Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/vGHJkcI0lv0U7ILOn4zfllCf3yg.roa
File: vGHJkcI0lv0U7ILOn4zfllCf3yg.roa (raw, json)
Hash identifier: ztgbqajy6fH7bPNEqaDFnT0dwAyBik+MFkE3xF9phh4=
Subject key identifier: BC:61:C9:91:C2:34:96:FD:14:EC:82:CE:9F:8C:DF:96:50:9F:DF:28
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F1CE94AF153D0259BA5A321A260F40E64
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/vGHJkcI0lv0U7ILOn4zfllCf3yg.roa
Signing time: Wed 01 Jul 2026 09:01:18 +0000
ROA not before: Wed 01 Jul 2026 09:01:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211904
IP address blocks: 94.184.0.0/24 maxlen: 24
94.184.1.0/24 maxlen: 24
94.184.2.0/24 maxlen: 24
94.184.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:e9:4a:f1:53:d0:25:9b:a5:a3:21:a2:60:f4:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 1 09:01:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc61c991c23496fd14ec82ce9f8cdf96509fdf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:0b:08:69:7b:e7:5d:02:b7:b5:ff:f5:85:
6f:71:a5:89:d7:75:89:15:b7:54:98:1e:83:dc:0b:
2f:4d:fb:bb:ff:37:07:27:e1:72:e9:05:93:af:26:
98:d3:d1:5c:6f:97:25:d2:3c:bc:45:35:02:36:87:
8e:ff:a9:8a:26:33:03:36:86:4e:63:06:72:a0:12:
db:3a:94:0a:45:c9:62:e0:0b:6f:ec:cb:76:b0:b1:
aa:33:4a:83:cc:14:f5:f6:2c:51:cc:2f:2e:9c:ef:
62:18:0d:36:33:5d:94:f8:ec:59:9d:75:69:f5:3e:
22:8f:7f:65:f8:03:d9:d3:c5:f1:c0:c3:c5:8c:e1:
06:c2:a2:9f:b3:02:fb:a8:b6:9a:0c:20:e7:40:20:
bb:a9:16:c1:5d:cd:63:3a:16:ef:76:cf:c0:0c:62:
6a:c4:2e:3b:90:1d:94:95:01:0a:cd:df:2e:4f:49:
25:db:7e:89:a7:ba:4b:2f:66:4d:2f:ce:99:9c:c5:
4a:42:f5:35:6b:3c:7a:6d:67:8e:3b:14:da:9f:a2:
cd:7e:c9:92:df:fe:0c:0b:01:32:08:8b:5a:c1:89:
80:16:78:a3:6b:3d:e0:75:25:15:f2:d4:89:c6:e4:
31:8f:e7:b1:1e:30:d1:ad:30:6b:2e:be:0e:12:89:
fd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:61:C9:91:C2:34:96:FD:14:EC:82:CE:9F:8C:DF:96:50:9F:DF:28
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/vGHJkcI0lv0U7ILOn4zfllCf3yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.0.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e2:8e:07:07:88:fa:91:82:85:98:ed:44:58:76:01:08:c0:
df:ac:ce:c9:9b:e5:ad:7e:96:45:82:d4:15:37:2f:62:19:7d:
98:35:be:04:f4:77:d3:bb:0f:d5:cb:e4:f8:c0:b1:e1:eb:46:
58:06:f0:36:0e:67:3d:bc:83:43:c1:3d:36:3c:4e:bb:4d:26:
91:68:eb:49:3d:ea:b1:9e:fe:5c:12:26:ee:14:c6:90:59:e0:
8b:45:03:09:30:61:86:f1:89:aa:67:48:4a:d4:d3:f4:3b:df:
df:c6:be:c5:78:fc:23:dd:99:79:ea:98:fc:ff:47:40:fe:6f:
e0:be:5f:70:e9:52:7a:93:b4:9d:c2:04:a4:2d:ad:ba:f9:4e:
d1:d4:f2:91:44:7a:15:1d:af:ed:f8:3f:03:2e:7a:39:bd:16:
df:5b:2b:73:d7:5c:00:e0:34:3a:81:49:53:d1:4a:d1:99:40:
c7:d4:03:55:e5:86:ab:09:fc:ec:ea:0b:5b:0b:ca:78:76:60:
f9:52:a7:5a:24:29:4e:b7:57:37:f8:25:98:38:f6:85:2a:bc:
14:e6:ac:a5:75:ff:79:67:4c:3e:f0:03:8c:9a:cd:a7:8a:6b:
d7:c4:e6:42:5e:b4:83:f8:ab:09:f1:aa:af:0f:7d:d0:4b:06:
fd:d2:56:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:35 2026 by rpki-client