Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/VcYSbieanIHo6vXwXzt_eynZ2hg.roa
File: VcYSbieanIHo6vXwXzt_eynZ2hg.roa (raw, json)
Hash identifier: tT7q391ckh97qErQP/wSxRxUIvkJpwWEWY/156fqwXo=
Subject key identifier: 55:C6:12:6E:27:9A:9C:81:E8:EA:F5:F0:5F:3B:7F:7B:29:D9:DA:18
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 019F89AD27F92D62168FF601267FB02D38A8
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/VcYSbieanIHo6vXwXzt_eynZ2hg.roa
Signing time: Wed 22 Jul 2026 11:54:14 +0000
ROA not before: Wed 22 Jul 2026 11:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 194.62.140.0/24 maxlen: 24
194.62.141.0/24 maxlen: 24
194.62.142.0/24 maxlen: 24
194.62.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:ad:27:f9:2d:62:16:8f:f6:01:26:7f:b0:2d:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Jul 22 11:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55c6126e279a9c81e8eaf5f05f3b7f7b29d9da18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:27:5c:c1:8e:35:62:ca:19:29:87:7a:ed:
77:3e:12:89:df:58:d1:2a:26:5c:e3:08:f8:b5:4a:
06:d9:d4:2f:91:04:32:5f:64:48:65:f2:c7:cb:2a:
ee:68:0a:5f:4e:9f:d9:9c:50:03:1e:6d:d6:5b:bf:
c5:c2:20:3f:e5:be:3b:58:ad:d7:48:04:18:63:5e:
1b:d6:0e:ee:4c:f3:07:c2:10:5b:ad:cc:0f:02:b6:
8b:5a:26:fa:87:ff:6a:be:dd:63:cb:e0:d3:ce:b1:
d4:da:b2:2b:27:cc:80:95:22:90:11:78:ae:8b:0b:
66:55:b1:35:75:76:35:a4:46:9f:ae:8b:06:c0:0c:
9d:68:83:1e:b6:27:21:4d:b7:6f:34:ea:93:25:ae:
2c:70:64:ee:ec:b8:4c:f3:60:17:d1:4a:e9:f4:34:
41:5c:bf:fd:5d:9d:1c:c7:53:47:8a:b0:a4:bd:af:
eb:00:59:32:b2:3b:26:5e:68:d0:48:09:76:23:ff:
3c:9b:6c:e8:92:75:6a:31:3d:51:05:23:bc:61:7e:
34:c5:fd:5b:e9:da:e0:74:06:a2:77:df:49:7d:5c:
26:47:f5:a5:d1:01:18:53:40:47:35:dd:da:c5:6b:
f5:ca:e3:a6:c4:11:b6:6b:fe:e9:b5:56:dd:df:2d:
9c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C6:12:6E:27:9A:9C:81:E8:EA:F5:F0:5F:3B:7F:7B:29:D9:DA:18
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/VcYSbieanIHo6vXwXzt_eynZ2hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.140.0/22
Signature Algorithm: sha256WithRSAEncryption
62:22:67:be:eb:83:bd:1d:6b:b0:bd:93:0d:a1:6d:3e:32:fc:
0d:6c:10:e6:90:bc:7a:42:a8:f6:18:b5:bc:72:89:b2:d7:87:
4e:af:2e:90:09:11:81:e3:10:68:15:c9:b7:73:e5:c0:1b:e6:
0b:11:73:b1:87:c1:26:6d:93:55:8e:3c:ce:68:0e:67:4e:e2:
f9:fa:93:d9:6f:cd:82:c5:27:54:b6:d2:af:ab:22:a7:b4:36:
54:f6:2b:ef:84:a6:00:2d:5b:1b:27:90:48:37:b4:85:cd:69:
d4:de:90:67:53:94:b4:a9:3f:d7:90:74:d0:0e:a4:f9:a7:c3:
68:b4:25:f2:23:28:e5:50:85:9f:1d:3b:04:68:51:8a:41:0c:
6c:7e:04:00:15:e9:e8:02:14:82:55:80:bc:1e:29:1d:27:95:
7c:51:e6:87:e2:cc:8c:5a:8f:79:97:b9:12:bb:79:4b:6a:2d:
b2:39:b7:99:60:b0:1a:be:79:e2:bc:49:32:51:6d:e4:5a:e2:
d3:64:cc:1d:2e:76:db:40:50:a5:ec:5b:7e:9d:c8:92:68:c6:
c2:4c:f2:5a:de:ce:77:95:9f:80:82:b2:62:78:ae:ab:0d:f9:
89:70:89:e0:3e:50:46:41:d8:61:cb:80:80:bb:27:46:aa:0c:
21:18:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:17 2026 by rpki-client