Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/vRygvOqNhI2wTpuqzdq5oBhm_zo.roa
File: vRygvOqNhI2wTpuqzdq5oBhm_zo.roa (raw, json)
Hash identifier: XbSnGt0avPcDQ8m+LfCZlA/QR8KLg0tsMoJgvEji9Tc=
Subject key identifier: BD:1C:A0:BC:EA:8D:84:8D:B0:4E:9B:AA:CD:DA:B9:A0:18:66:FF:3A
Certificate issuer: /CN=9bebfd9ea4baf040819c0cfd7cb37074891c3629
Certificate serial: 019CE803CD5D18C9BD3A6D283AED5F449456
Authority key identifier: 9B:EB:FD:9E:A4:BA:F0:40:81:9C:0C:FD:7C:B3:70:74:89:1C:36:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/vRygvOqNhI2wTpuqzdq5oBhm_zo.roa
Signing time: Fri 13 Mar 2026 16:24:49 +0000
ROA not before: Fri 13 Mar 2026 16:24:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203802
IP address blocks: 155.212.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e8:03:cd:5d:18:c9:bd:3a:6d:28:3a:ed:5f:44:94:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bebfd9ea4baf040819c0cfd7cb37074891c3629
Validity
Not Before: Mar 13 16:24:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd1ca0bcea8d848db04e9baacddab9a01866ff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:22:3a:73:9e:af:c2:d1:21:ef:19:5d:2a:cd:
27:81:78:53:e5:21:64:57:77:ff:35:a0:5e:68:43:
83:94:8e:72:07:0e:03:c4:d9:be:f1:5f:1f:ab:e4:
5a:66:b7:2e:44:3c:e9:02:54:60:d8:80:fe:a2:86:
64:47:11:52:8c:9d:0c:77:ea:8f:e9:99:08:3e:e2:
14:1e:c1:8b:19:1c:a9:55:7c:66:91:f4:c9:45:51:
d3:6f:76:1b:50:1e:b7:de:ab:e3:35:b0:cf:9c:b0:
e2:cf:8a:6c:7a:b9:a3:68:4d:c9:f7:74:b5:cf:09:
28:81:de:d7:f7:da:bb:2d:83:cc:19:c7:a6:1f:c5:
f1:42:7f:c4:a8:f6:a0:eb:7c:a3:a7:db:da:4b:25:
ba:33:18:3c:2b:a0:23:d7:3e:2c:05:a8:02:75:93:
a8:bf:cc:90:62:6e:2a:03:83:82:29:09:a3:32:ad:
b7:85:40:09:f1:ba:4f:5b:f4:5a:7e:7b:78:1b:04:
21:9a:20:32:af:d8:77:8b:c6:97:15:d9:9d:21:16:
9d:1e:1f:86:e0:3e:b3:4a:b4:33:18:17:b2:c6:9a:
4d:28:cd:71:24:07:f0:a7:40:f4:c3:c3:b8:37:e5:
a7:0d:08:ee:b5:cb:1f:ff:83:42:61:2c:81:4a:ce:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1C:A0:BC:EA:8D:84:8D:B0:4E:9B:AA:CD:DA:B9:A0:18:66:FF:3A
X509v3 Authority Key Identifier:
keyid:9B:EB:FD:9E:A4:BA:F0:40:81:9C:0C:FD:7C:B3:70:74:89:1C:36:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-v9nqS68ECBnAz9fLNwdIkcNik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/vRygvOqNhI2wTpuqzdq5oBhm_zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/048ce0-dbdc-4831-9af3-12b239972a2a/1/m-v9nqS68ECBnAz9fLNwdIkcNik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.212.232.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f1:67:ef:68:d2:eb:5a:b2:6e:0b:ca:b5:84:f5:c3:53:d6:
d4:2a:23:e7:50:14:3f:53:0c:6f:bd:00:78:2f:9f:3f:ef:ce:
79:eb:cd:88:05:d7:2c:7f:92:c9:32:8c:d8:f0:5b:ae:01:cf:
18:0d:a9:40:83:2e:2c:03:04:dd:1d:ad:99:03:70:34:f8:2b:
aa:a2:65:fb:c1:8c:87:30:16:42:a3:a2:57:16:66:c7:33:0f:
03:26:77:7b:83:fa:2f:32:64:91:2a:5b:f1:a2:e5:fd:37:04:
e3:70:58:64:90:92:2e:1a:4e:78:35:01:e5:87:db:e7:4f:af:
5e:f8:29:19:74:d4:9b:dc:ce:48:50:42:8f:8a:12:d1:b5:0e:
80:18:40:49:78:c1:c3:17:25:f0:8d:05:af:40:0b:55:d4:c2:
1e:d2:59:86:09:09:91:87:5e:b2:25:38:71:fe:8d:05:76:40:
b4:79:41:fa:fb:e3:92:4f:e3:c9:f5:da:29:66:86:6b:b1:a0:
ea:5c:9a:7b:2c:04:5b:87:19:28:fd:29:9a:3b:1b:d7:4f:db:
6b:31:fb:52:c4:9f:c3:ce:7c:28:3c:2d:36:e1:29:d1:f0:2b:
3e:8f:57:26:c6:4f:93:04:ca:c8:5e:f8:5d:66:1b:fb:03:4e:
f0:73:bc:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:32:51 2026 by rpki-client