Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/VLazWnEoP4FNqXwAq5qItoa84gg.roa
File: VLazWnEoP4FNqXwAq5qItoa84gg.roa (raw, json)
Hash identifier: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=
Subject key identifier: 54:B6:B3:5A:71:28:3F:81:4D:A9:7C:00:AB:9A:88:B6:86:BC:E2:08
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 019F23690608CF99AFE33AAB5311DCAE69F2
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/VLazWnEoP4FNqXwAq5qItoa84gg.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48708
IP address blocks: 185.202.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:06:08:cf:99:af:e3:3a:ab:53:11:dc:ae:69:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54b6b35a71283f814da97c00ab9a88b686bce208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:10:f4:67:1d:5e:3b:28:21:10:15:74:8b:
a6:19:1d:93:dc:76:67:19:90:ff:d9:b2:a9:c6:0a:
fd:f0:49:c0:c2:fc:4c:e9:71:c6:6b:c0:f7:a5:c6:
20:7b:89:e2:8b:43:41:8c:66:e4:ed:ec:39:d6:12:
8a:cb:05:2c:f3:16:5a:1e:ca:9f:ed:c0:e2:aa:6e:
bf:f9:66:3d:36:83:63:08:34:66:8d:25:87:12:03:
73:50:23:98:40:65:02:50:62:f8:5c:47:5e:14:18:
3c:90:98:a3:f9:9c:d9:86:27:37:ac:34:e3:d8:8b:
b0:68:c8:70:c9:4f:b6:fa:4c:14:38:26:e6:24:f8:
33:6c:c1:15:e7:4b:bf:53:14:e4:b9:ba:0d:d1:96:
93:cf:1a:96:7d:8c:9b:7b:47:a8:b7:2b:32:b6:3c:
db:70:24:76:a1:f3:e4:ed:71:4c:85:66:4b:12:4a:
c0:71:2d:49:fa:19:de:2d:12:29:d8:d0:05:db:77:
04:59:c7:f9:11:09:1c:2a:df:df:11:a6:ab:b3:76:
52:85:45:1b:30:ad:4d:61:03:86:71:16:21:7a:36:
aa:16:0c:7f:14:d2:37:43:98:18:a7:90:0f:0b:9c:
0f:1c:bf:4c:ad:dc:d4:b7:24:79:ca:c4:83:e0:53:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B6:B3:5A:71:28:3F:81:4D:A9:7C:00:AB:9A:88:B6:86:BC:E2:08
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/VLazWnEoP4FNqXwAq5qItoa84gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1e:e5:e5:c8:58:df:98:0c:48:3c:a0:6c:f2:9d:75:73:25:
78:8e:15:2e:59:00:a6:da:e5:c5:37:4d:af:23:35:d7:94:4f:
05:ff:cc:ed:fc:a8:72:f0:37:cf:63:af:83:10:82:38:3a:30:
4b:43:a0:bb:8e:02:68:26:af:9b:55:b4:42:d1:b7:93:6d:2c:
92:ee:b3:ea:6c:28:b5:2b:50:9d:0d:04:24:cb:0d:ca:0c:89:
18:25:cc:40:15:09:82:17:f2:93:6f:fc:80:9a:09:eb:a7:cb:
9a:4e:8c:ec:b1:55:9f:d9:8b:08:f1:93:5d:7c:f9:14:fb:7f:
20:b0:9b:86:5f:c0:47:e6:db:ea:f7:31:58:13:8a:db:05:64:
eb:81:c4:14:48:a6:65:11:5d:a5:53:7b:4a:4f:28:be:da:0a:
47:43:50:da:40:5f:be:14:3e:95:da:b2:1f:e9:85:a4:50:8a:
4a:03:35:57:08:e6:7c:5d:48:c1:bc:e4:d4:9b:7f:cc:92:2d:
f4:9b:39:8e:fa:e5:74:ef:87:b5:e3:20:c5:28:60:a7:89:f9:
c3:65:24:45:84:c7:70:7e:a8:0f:8e:86:98:96:50:d0:4d:f5:
3a:59:cf:0a:32:a4:20:5a:68:72:49:a8:1c:7c:85:67:49:34:
ee:92:48:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:17 2026 by rpki-client