Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vmkNCB7xSVMY8s9R9RZm64BmUig.roa
File: vmkNCB7xSVMY8s9R9RZm64BmUig.roa (raw, json)
Hash identifier: iJOmYhg1BJ3kNUc1dJksAu6KqGjIymm51GwMacauc5o=
Subject key identifier: BE:69:0D:08:1E:F1:49:53:18:F2:CF:51:F5:16:66:EB:80:66:52:28
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01A0D318D3F0271C35098128D55E7DA6C647
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vmkNCB7xSVMY8s9R9RZm64BmUig.roa
Signing time: Thu 24 Sep 2026 11:06:54 +0000
ROA not before: Thu 24 Sep 2026 11:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210447
IP address blocks: 85.142.87.0/24 maxlen: 24
85.142.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:18:d3:f0:27:1c:35:09:81:28:d5:5e:7d:a6:c6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Sep 24 11:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be690d081ef1495318f2cf51f51666eb80665228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:cb:bc:32:bd:87:2b:fd:9f:d9:ad:92:7d:
a0:86:54:62:95:95:a5:ce:45:bd:75:e5:23:a6:72:
53:32:ed:91:bf:a6:2f:22:df:86:98:a5:5a:f6:e7:
ab:23:e6:b3:0f:72:ea:e2:6b:1e:9d:ac:02:db:ab:
8b:ae:6a:39:ef:38:4d:4d:84:7e:ec:ac:fe:96:a1:
d4:57:1c:71:22:b0:11:b8:4a:7e:35:bf:80:df:02:
53:c4:42:f4:a9:84:54:9e:4e:ac:08:8e:fe:c4:bb:
74:8d:42:c0:9e:f3:99:61:93:f9:7f:37:42:32:6f:
ed:26:7a:04:91:92:1e:67:d4:5c:09:d7:a2:78:29:
94:52:c2:8a:04:cc:17:b8:7a:c8:6b:20:ec:aa:67:
86:3f:0a:a0:77:af:84:d5:57:86:5d:84:44:28:8d:
a9:7e:54:20:84:0a:de:06:15:91:26:56:62:ae:9a:
3c:60:1e:bd:f4:a8:15:2a:5d:11:76:aa:77:09:9c:
0e:15:7e:59:a9:91:de:a6:a6:9b:67:de:39:17:30:
c3:04:6e:9a:9c:35:dc:33:c0:3f:2b:15:c2:15:43:
8f:7f:ee:34:65:f3:fe:60:36:00:f4:14:3f:5f:51:
4d:e1:c8:28:3e:9d:04:82:93:cf:de:a1:37:24:2e:
ca:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:69:0D:08:1E:F1:49:53:18:F2:CF:51:F5:16:66:EB:80:66:52:28
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/vmkNCB7xSVMY8s9R9RZm64BmUig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.87.0/24
85.142.114.0/24
Signature Algorithm: sha256WithRSAEncryption
00:96:45:20:db:6a:15:1b:ed:db:83:8b:51:4f:d8:7c:c0:59:
2e:44:80:fe:fb:41:3e:0f:68:ad:95:bd:c3:9f:22:cc:79:3a:
62:cf:f6:b0:d9:1a:2e:94:4c:2a:07:09:f4:02:89:da:1d:ac:
52:6e:42:7d:c2:a7:55:02:83:21:4c:99:86:48:4b:ff:59:39:
06:56:66:ac:c6:e8:c5:47:e9:7b:67:f9:b5:4c:c1:8a:7c:34:
03:42:3b:b5:93:02:51:85:51:5c:50:a5:96:c4:48:a3:89:b6:
64:58:b2:a6:c8:89:c6:b4:13:fd:2c:1a:e4:8e:91:65:81:1b:
d7:d5:33:00:49:ee:20:2f:21:23:d2:71:90:7f:fd:86:63:7d:
58:f5:a7:c8:0d:a8:75:d8:50:17:b0:9b:2e:6d:5f:75:a1:26:
c3:bd:e6:00:19:5c:2d:8f:f0:13:96:e1:d5:cc:13:15:cc:de:
7c:aa:81:72:03:95:14:d2:d1:e7:e2:e3:73:f6:16:2d:54:47:
e5:33:25:3a:fd:4b:53:e8:b6:2f:d2:da:44:1f:f9:51:31:21:
03:c6:ee:40:af:db:53:ee:cf:ca:6e:0b:2f:f5:55:c1:8c:3f:
3c:b5:98:08:78:a1:1b:72:9b:2c:4c:9c:4f:d6:5a:7d:c9:da:
2b:2a:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:30:48 2026 by rpki-client