Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VDGEenbPmYVeYdZDkEQPN0YPoxI.roa
File: VDGEenbPmYVeYdZDkEQPN0YPoxI.roa (raw, json)
Hash identifier: WVKOtQvgMaRORKvUyswLUtexUq6XHIohHu3F5D1yqq4=
Subject key identifier: 54:31:84:7A:76:CF:99:85:5E:61:D6:43:90:44:0F:37:46:0F:A3:12
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E0435D61D37F6E5809658EB52610A3CAA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VDGEenbPmYVeYdZDkEQPN0YPoxI.roa
Signing time: Thu 07 May 2026 20:51:37 +0000
ROA not before: Thu 07 May 2026 20:51:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11798
IP address blocks: 31.76.136.0/21 maxlen: 24
31.76.144.0/21 maxlen: 24
31.76.152.0/21 maxlen: 24
31.76.160.0/21 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:35:d6:1d:37:f6:e5:80:96:58:eb:52:61:0a:3c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 7 20:51:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5431847a76cf99855e61d64390440f37460fa312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:63:9f:2c:6c:dd:90:15:5f:47:00:bf:a2:
86:ac:18:17:30:a7:66:b3:6f:63:73:05:a8:bb:ef:
f2:0f:e5:b9:32:48:21:86:b2:2b:84:16:52:70:a0:
06:a0:ca:d5:f7:8e:16:89:1a:ee:d7:5a:df:7b:6b:
cd:ac:00:d2:79:fd:cb:33:db:ae:46:1b:d1:1d:89:
56:a5:f5:ff:7e:0e:87:3f:60:d6:1b:df:cd:5e:bd:
01:56:c0:82:fb:42:1c:4f:91:eb:80:f6:dc:ca:9c:
69:71:b2:ce:2f:06:05:14:b0:f8:42:42:3a:ef:a8:
3f:45:cd:34:b0:81:45:eb:9e:3b:53:73:40:1c:c4:
af:68:ea:0b:81:96:f3:7c:1b:0e:58:89:7f:57:88:
94:34:40:aa:20:e6:7a:46:bc:ae:aa:d2:45:24:74:
0b:4b:69:b5:5e:dd:8f:1e:42:40:f2:16:52:a3:12:
30:79:a4:ef:7e:f0:a5:b5:f7:2b:53:a6:9b:d5:d8:
27:28:de:df:42:da:3a:9a:11:70:cd:09:82:61:45:
3a:cd:36:7d:63:47:77:dd:86:ae:b2:ee:01:7d:d1:
7e:1e:5b:c4:93:37:26:28:77:89:40:29:7b:59:bf:
4b:45:f2:2a:57:8b:3f:54:b5:d3:33:04:83:60:d5:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:84:7A:76:CF:99:85:5E:61:D6:43:90:44:0F:37:46:0F:A3:12
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VDGEenbPmYVeYdZDkEQPN0YPoxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.76.136.0-31.76.167.255
185.207.135.0/24
185.216.104.0/22
Signature Algorithm: sha256WithRSAEncryption
82:9f:42:db:f1:64:21:f4:3a:d6:30:91:5c:27:d2:95:9c:d0:
5f:aa:42:0d:26:bc:8a:c8:6c:0b:a0:a5:52:00:12:a1:1a:55:
97:d9:85:b9:d2:22:19:23:e9:96:45:a9:a5:4b:b6:f8:d5:02:
77:5a:e7:b7:b2:56:f4:b6:e2:f2:09:6e:d4:5c:f8:fd:45:85:
4e:ec:5d:d3:7a:da:9a:8c:cb:80:c2:8b:9a:ec:71:ef:ab:6e:
50:23:31:ed:89:c5:6e:d4:d0:ec:e8:40:19:c2:c9:5d:32:67:
9b:9b:f1:66:db:41:09:71:8a:73:ce:ed:1d:b8:d9:bd:12:3a:
a0:43:1f:33:16:80:f8:e6:27:32:73:67:05:d6:53:86:b6:8a:
73:1f:29:89:e2:dc:34:7c:34:83:41:4d:25:bd:d3:22:f9:77:
45:82:d4:38:cb:2a:3f:90:43:df:d5:f5:55:a3:c0:5b:0f:1f:
18:46:24:19:4b:5b:88:f1:76:8b:4b:da:eb:bd:ef:52:57:c7:
04:2b:69:72:83:82:31:68:70:7c:e8:05:c5:b4:a4:3c:c4:1d:
1a:39:8a:4d:96:02:ee:92:2a:9e:da:a3:2a:c1:60:d0:61:95:
8e:62:3c:ea:32:26:74:0c:f1:af:f1:94:ba:10:b5:55:10:de:
10:39:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:23 2026 by rpki-client