Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa
File: vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa (raw, json)
Hash identifier: tS0p7+VSda9ujT1sG9qz+xFqrdY93YlWHLxpRI2nhkg=
Subject key identifier: BD:CF:C6:EC:A2:0C:2F:86:35:AF:ED:71:4B:C0:98:8E:F8:10:66:A3
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 019F1416F35459650AE7F9C3EEDDFB61106B
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa
Signing time: Mon 29 Jun 2026 15:54:36 +0000
ROA not before: Mon 29 Jun 2026 15:54:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203811
IP address blocks: 185.239.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:16:f3:54:59:65:0a:e7:f9:c3:ee:dd:fb:61:10:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Jun 29 15:54:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdcfc6eca20c2f8635afed714bc0988ef81066a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cc:a2:a2:60:be:07:4c:11:c7:4f:61:ed:a0:
46:34:c4:90:a0:12:bd:4e:05:d4:a6:cf:d9:d7:c8:
85:2d:f4:e6:a7:02:d4:10:42:11:18:e1:4d:d8:d6:
03:b8:26:ac:95:7d:fd:c0:1f:54:02:f6:3b:17:30:
b7:0d:0d:e8:eb:b9:f5:8d:fb:14:38:2a:a2:10:67:
a5:53:0b:1e:69:45:fb:3a:f0:f0:b6:2e:51:d2:23:
d3:2c:0b:6d:c3:03:7e:45:5c:6e:f2:f2:54:fa:24:
c4:f2:d5:bf:a6:bf:75:0e:64:13:69:e8:d3:a5:1a:
14:30:76:94:b6:04:7a:6e:13:20:42:28:74:1d:87:
60:a9:bd:37:f6:95:22:bd:f6:80:e5:c4:a9:a9:46:
96:ff:7c:c4:3d:30:25:55:9a:61:f7:d0:02:46:c7:
62:0a:86:e9:a6:be:e3:36:a0:1a:05:dc:04:e4:44:
92:0a:e9:f3:29:72:23:ee:fc:16:13:14:62:56:01:
7f:45:d5:83:a6:04:6f:b2:13:f6:2c:1d:3a:9f:b1:
1b:fe:c1:89:a2:da:4a:c7:9a:82:3c:f9:7a:91:27:
9b:3d:08:52:df:a0:a3:70:ea:72:68:e0:80:ef:88:
93:29:4a:38:c3:a9:c4:ab:63:c0:27:5b:79:c2:0c:
e9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CF:C6:EC:A2:0C:2F:86:35:AF:ED:71:4B:C0:98:8E:F8:10:66:A3
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/vc_G7KIML4Y1r-1xS8CYjvgQZqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.179.0/24
Signature Algorithm: sha256WithRSAEncryption
be:e4:bb:d3:77:fd:03:0c:a9:bc:63:9a:c5:f8:61:80:1e:10:
13:51:02:d2:fc:81:98:aa:12:4d:63:57:a5:3c:97:75:78:31:
97:66:ed:b2:b9:34:14:cb:93:c5:07:86:29:bd:2b:c6:6f:40:
a0:54:e0:5f:2b:04:b0:d3:70:4f:c7:6b:94:aa:b7:83:14:f5:
e9:2d:a2:68:ff:8a:29:1d:fa:d0:33:ec:57:46:c4:eb:09:e6:
cc:2b:09:ac:18:c6:b3:54:71:45:be:62:65:a4:5a:63:b7:ec:
8b:bc:0d:a4:c8:83:f2:03:bf:fb:2f:e8:eb:6e:37:1d:54:db:
b6:68:21:66:f0:3d:02:03:8d:53:4f:70:d4:00:8c:a9:b8:25:
69:06:42:db:1a:ff:47:58:d6:0e:86:ad:67:03:3f:40:31:b4:
4b:68:82:f9:43:ea:c2:43:b0:1b:bf:b1:77:35:e6:73:55:53:
09:3f:88:1b:64:30:42:07:68:a9:12:5f:b9:81:51:d8:d1:d5:
f0:ed:17:3b:5a:aa:dd:2b:c6:62:a1:fe:d4:47:a8:3d:d7:73:
65:1c:c9:44:c2:82:8b:3e:49:68:ba:df:21:1b:e5:8a:cd:82:
79:42:f6:0f:01:88:74:cd:c9:39:bc:d4:b2:8b:fd:ba:2a:44:
57:79:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:37 2026 by rpki-client