Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/vlUbXeVd5-0W1ggZOu-PD2cB_ME.roa
File: vlUbXeVd5-0W1ggZOu-PD2cB_ME.roa (raw, json)
Hash identifier: /P4Mf2P8+3Sa+9OFo1zp4dRKqlbn5WXUXnaJd4Qa1sM=
Subject key identifier: BE:55:1B:5D:E5:5D:E7:ED:16:D6:08:19:3A:EF:8F:0F:67:01:FC:C1
Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial: 019E1B5C07EDFACF91A812778ED2D600B1E2
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/vlUbXeVd5-0W1ggZOu-PD2cB_ME.roa
Signing time: Tue 12 May 2026 08:44:36 +0000
ROA not before: Tue 12 May 2026 08:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 194.117.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:5c:07:ed:fa:cf:91:a8:12:77:8e:d2:d6:00:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
Validity
Not Before: May 12 08:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be551b5de55de7ed16d608193aef8f0f6701fcc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:22:bf:97:2a:1b:78:a7:d8:68:31:57:61:6d:
be:b3:04:c7:e9:24:74:22:01:07:aa:9c:5c:70:b0:
70:8a:b0:3d:ef:91:2f:d3:ef:e3:e5:e8:2a:fd:1c:
fd:1a:f9:0f:63:84:89:b7:d5:2b:69:d9:50:ce:c4:
91:e2:fb:e2:c1:5b:21:f0:d9:10:ab:3d:e9:f3:a4:
0f:7e:e9:b6:56:dc:2d:4a:7e:03:23:65:ee:5a:9f:
f7:87:ad:45:79:bf:07:b2:6f:d2:36:d9:a3:55:33:
48:d2:e6:a7:a8:59:c0:7c:b4:86:50:70:34:df:7b:
6e:94:f8:38:53:74:0a:cc:b3:e1:3e:6e:07:dd:e7:
0a:41:1d:e0:d3:a4:62:99:08:a2:6f:47:15:40:6e:
ae:78:1c:50:03:e5:87:f6:80:1d:d4:77:e5:aa:b5:
8b:81:5c:36:3a:9f:81:d3:dd:80:9c:05:d3:a7:c7:
94:23:db:f7:b8:42:7a:e8:2e:ae:61:d4:b1:d5:af:
23:e1:1a:42:c2:01:5f:65:c1:53:c1:6c:d5:e7:4e:
43:7e:e8:d2:32:d9:59:9d:c2:4c:4e:be:18:ca:86:
67:6c:07:de:ef:22:3b:cd:07:94:94:2a:d0:4f:24:
00:47:f4:d6:1c:a8:00:f2:e2:88:89:95:7d:ba:79:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:55:1B:5D:E5:5D:E7:ED:16:D6:08:19:3A:EF:8F:0F:67:01:FC:C1
X509v3 Authority Key Identifier:
keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/vlUbXeVd5-0W1ggZOu-PD2cB_ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.64.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a5:c1:62:7e:ff:dd:cc:67:37:d6:b0:0a:89:f3:26:c7:d6:
1b:f5:9c:1b:9a:0e:85:45:5f:38:2a:79:c0:8a:35:94:94:74:
13:17:90:10:36:ae:7a:90:9e:64:82:75:87:76:3a:ec:4c:a3:
ca:e9:ef:e4:65:5a:13:2b:da:f9:90:47:ab:4b:55:a6:2d:20:
ff:78:bd:22:63:90:84:c9:1d:2e:cb:d9:88:c7:1f:7d:eb:ce:
08:d4:12:e9:31:91:c0:e6:60:33:da:bb:38:c0:1a:92:f0:12:
da:59:b7:e3:a9:6a:bc:31:81:a2:18:e8:b3:8b:7d:da:a8:b9:
2e:62:1f:6a:a1:6e:35:59:7b:44:0f:26:65:31:58:f8:d2:3b:
3a:5a:34:83:35:c2:19:af:df:93:a1:32:4d:82:29:77:62:e8:
f3:b9:07:1e:ef:28:75:47:05:37:0e:81:e2:35:c2:15:29:46:
3b:e9:bd:c3:8a:ea:a3:80:90:43:06:40:89:4c:5e:20:f9:10:
9c:bb:a3:a2:45:b4:75:7a:ca:1c:9b:e3:67:da:fd:e8:f4:d0:
c2:e6:f7:61:b6:fe:91:90:00:ed:d6:22:6c:40:93:dd:cf:33:
39:f9:13:38:36:21:a0:6a:2c:6c:0f:e2:f6:52:a0:b4:fa:d3:
14:b8:c6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:25:11 2026 by rpki-client