Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa
File: vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa (raw, json)
Hash identifier: VYtXHqRevYtaXeI9lQQ4d+QNrCRIHyo5F1ekiS2/Np0=
Subject key identifier: BD:38:DD:CB:CD:54:8B:57:F6:70:38:19:D6:1C:6A:10:9C:66:2E:5A
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019D00EB3CD7BFAF9F3F5313484342ABC259
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa
Signing time: Wed 18 Mar 2026 12:28:29 +0000
ROA not before: Wed 18 Mar 2026 12:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208959
IP address blocks: 45.131.79.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:eb:3c:d7:bf:af:9f:3f:53:13:48:43:42:ab:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 18 12:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd38ddcbcd548b57f6703819d61c6a109c662e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:89:5a:69:86:8e:c4:f6:57:54:4a:d7:3f:
ec:de:99:4a:50:92:f6:c1:1e:61:ec:9a:b2:10:51:
3d:21:cd:4f:10:2d:90:35:9c:26:9c:c7:41:89:48:
a0:7b:1d:e9:8a:30:3a:70:f3:1d:a3:ff:45:1f:6f:
1a:b0:d7:5f:61:14:40:02:8c:32:bc:d5:a8:59:a3:
f8:8c:1d:fb:1d:47:56:70:0b:d3:0f:49:85:b1:19:
f9:e2:53:f6:45:2a:e2:4a:9b:78:e4:c7:21:95:20:
41:34:31:25:88:b9:96:a6:92:03:32:01:1b:9f:81:
05:b7:6b:ed:83:ea:42:cd:3b:b0:d3:3c:b2:e3:50:
a3:d6:58:25:60:f4:0f:81:8c:2c:37:dd:fb:c8:5e:
26:94:7a:e3:d1:2e:99:3b:33:18:38:f7:2e:0e:ad:
b8:51:e6:01:63:65:3a:35:51:e0:00:8a:18:4d:e8:
ae:45:cb:df:6d:66:74:12:20:f7:b7:e3:66:0d:f0:
fb:0e:7c:59:59:37:65:95:0f:4c:36:72:ad:88:f7:
ac:16:e2:61:c4:15:61:09:9a:ff:d7:35:60:3a:83:
21:ea:3a:51:c7:75:17:b6:4c:81:cf:2c:00:bd:da:
d9:01:5f:19:56:e5:02:e4:b8:9d:7e:59:08:ef:d5:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:DD:CB:CD:54:8B:57:F6:70:38:19:D6:1C:6A:10:9C:66:2E:5A
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vTjdy81Ui1f2cDgZ1hxqEJxmLlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:40:6e:5b:13:f5:68:60:de:09:79:f5:79:ec:aa:d9:42:a3:
70:ed:e5:b5:8d:c4:7e:cb:9b:3a:52:24:75:0c:cb:64:d2:b2:
cd:d6:14:a4:9a:98:91:92:cd:8b:44:76:96:7a:a2:a3:30:72:
d1:56:d8:90:d8:00:5f:5c:d4:cd:95:6c:01:3a:87:40:8c:56:
3f:d2:8f:06:2b:0b:a3:63:3b:61:ec:c6:b8:e6:62:ff:8f:78:
f4:fd:ac:2f:ca:c8:6a:1b:bd:b7:65:00:60:b1:d4:8b:92:55:
6c:a4:de:e4:5c:dd:5f:a7:8c:a7:fa:91:0f:b5:66:a1:c9:70:
d3:e6:3c:c9:22:9c:ce:2b:dc:91:69:eb:42:e0:16:f0:1c:8d:
3d:57:f7:51:4a:89:6b:f8:28:24:f5:e3:b1:25:53:9e:51:f5:
39:7c:a4:4c:44:6a:f9:53:e9:c5:ab:01:5c:7c:6b:b8:92:b6:
a4:83:4f:87:20:fe:0a:d2:43:d5:bc:f3:73:78:c2:1a:62:64:
fd:43:20:ab:47:7c:9a:53:49:6b:e9:3f:ae:8e:41:69:ac:cd:
96:10:5c:48:56:ec:d0:a8:e2:bb:60:72:8c:1b:4d:74:e6:32:
ca:e2:70:e3:bf:52:ab:47:c9:2f:ca:4f:15:90:eb:5e:5a:e6:
ee:d0:db:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:32:20 2026 by rpki-client