Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VCYG9jW5ZRPqIZH3NPG8M5D6rdo.roa
File: VCYG9jW5ZRPqIZH3NPG8M5D6rdo.roa (raw, json)
Hash identifier: WZCSC8WmNP3+eVsC/jCVzVB4Byy4L+TdEgXvUowz1qs=
Subject key identifier: 54:26:06:F6:35:B9:65:13:EA:21:91:F7:34:F1:BC:33:90:FA:AD:DA
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0E76385F61B2AAA84395DE046D73C8DC0
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VCYG9jW5ZRPqIZH3NPG8M5D6rdo.roa
Signing time: Mon 28 Sep 2026 09:40:54 +0000
ROA not before: Mon 28 Sep 2026 09:40:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 212.87.188.0/24 maxlen: 24
212.87.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:44:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:63:85:f6:1b:2a:aa:84:39:5d:e0:46:d7:3c:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Sep 28 09:40:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=542606f635b96513ea2191f734f1bc3390faadda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:12:4a:a7:24:e4:72:9b:cb:d0:d9:9e:c6:ee:
87:29:fe:bd:32:cb:96:a5:07:33:8f:78:0f:02:04:
39:9b:eb:33:49:d5:1e:f7:69:18:37:a3:fb:87:67:
48:26:d3:7a:8a:c5:53:09:1f:6b:34:ff:32:ac:65:
4b:bc:f8:a5:14:ff:f2:b6:f7:aa:61:25:ef:39:74:
c4:c8:66:e0:a3:59:7c:63:ec:a9:6d:bb:c8:89:87:
f6:bf:55:36:dc:cd:a5:5a:1c:d0:f5:a0:f3:0c:90:
94:57:f6:10:8f:5d:ec:90:83:5b:ef:59:76:12:43:
fa:51:80:83:6a:40:9f:27:f7:ec:48:eb:7b:78:d6:
e3:e2:79:74:65:6a:54:6b:97:50:03:87:dd:5d:ef:
e0:36:46:50:50:d9:55:7f:c6:ed:3d:d9:97:54:b7:
dc:47:e7:89:59:87:0c:e8:01:a9:58:8d:a4:d5:4e:
c9:40:97:02:c0:20:b3:7a:41:66:b7:31:9c:12:2e:
a5:0c:10:14:ce:52:62:01:da:c6:a9:83:09:0c:b4:
c6:a7:34:63:00:8f:55:68:e5:de:4e:9a:d0:8f:49:
75:30:2b:9e:6b:67:a8:1f:ab:dd:fa:9e:e5:15:eb:
51:33:95:6a:0e:be:39:fc:85:3b:e3:c7:7c:74:bf:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:06:F6:35:B9:65:13:EA:21:91:F7:34:F1:BC:33:90:FA:AD:DA
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/VCYG9jW5ZRPqIZH3NPG8M5D6rdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:f6:1a:9c:7f:3a:83:97:18:a9:51:d5:50:ef:72:cc:b0:a7:
b8:24:f5:dd:b8:ce:2b:49:82:2e:42:4a:57:39:0c:6a:a8:c9:
0b:61:1f:b9:3d:61:dc:0d:4b:34:99:17:b1:1a:76:ad:81:1d:
88:11:60:96:ef:69:83:7a:7d:41:8c:be:cb:eb:f0:4b:40:04:
f9:82:fc:48:17:d5:5f:b7:12:fd:db:37:25:7c:9c:b2:a3:b7:
88:12:ee:3e:95:ae:96:cd:a1:65:d2:bd:09:b6:34:17:95:9f:
79:26:3c:6a:69:3e:7b:28:d0:78:1d:01:75:c5:94:1a:89:0d:
53:1f:d2:11:2a:f3:9e:e0:2d:48:cb:e1:54:c9:d5:0e:0a:5e:
d4:0d:e0:8e:4a:80:a2:10:7c:59:57:de:cc:35:85:90:84:97:
39:68:d2:e3:36:46:3f:a2:a6:2b:4b:dd:32:78:cb:8f:a5:ba:
4a:23:00:f1:a3:59:0c:86:74:03:23:64:e0:05:cb:bd:c9:02:
3e:ca:a3:19:15:cf:08:d8:62:13:9d:9b:0b:12:ba:ab:da:14:
cb:a2:ad:19:3a:21:8d:a1:d1:cf:3b:a8:9a:8d:9d:24:64:6a:
e8:a5:07:b3:f0:be:da:ea:aa:db:c3:f4:b4:f1:41:d0:dc:ad:
08:9d:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:13 2026 by rpki-client