Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/V_c0MczS3zUpZJNTtQxngj6lCXY.roa
File: V_c0MczS3zUpZJNTtQxngj6lCXY.roa (raw, json)
Hash identifier: I3RW9QlgWDHOKk+vzXe99y6FDPghIiCTxEZoxiZd0LQ=
Subject key identifier: 57:F7:34:31:CC:D2:DF:35:29:64:93:53:B5:0C:67:82:3E:A5:09:76
Certificate issuer: /CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Certificate serial: 019F23682B6B3E31D7C5F7CBB3F38783929C
Authority key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/V_c0MczS3zUpZJNTtQxngj6lCXY.roa
Signing time: Thu 02 Jul 2026 15:17:37 +0000
ROA not before: Thu 02 Jul 2026 15:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 161.3.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2b:6b:3e:31:d7:c5:f7:cb:b3:f3:87:83:92:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Validity
Not Before: Jul 2 15:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f73431ccd2df3529649353b50c67823ea50976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:88:dd:54:ed:d0:1d:05:7f:dc:42:41:e2:
8f:bf:15:38:9d:41:52:ce:4b:87:81:6b:38:76:95:
ad:3b:dd:db:93:52:52:73:2c:3a:a9:27:24:1f:f7:
cc:5c:a2:dd:2b:a6:6c:bb:76:ad:4b:a9:9f:64:28:
18:63:74:b9:94:6e:07:c0:ff:59:d4:7a:5f:cb:68:
ba:e1:36:db:28:19:35:6c:77:4f:d0:17:4a:98:23:
04:98:64:36:1c:da:53:f6:56:13:66:18:a8:7b:2b:
d6:09:52:73:d9:18:1b:04:9a:7b:bf:9e:5c:3e:8b:
1c:0b:81:ba:83:91:50:ff:ed:0d:25:66:36:34:aa:
ba:47:91:13:d9:e8:43:22:90:14:3d:82:35:95:16:
13:81:90:5e:ea:72:ce:a7:af:0d:3b:8f:b5:23:2f:
dd:c0:ce:47:1c:85:ec:d3:cd:54:ab:29:aa:ca:9a:
00:17:53:d3:64:4d:bd:a1:34:01:a9:fa:e1:99:88:
6e:7b:42:43:a1:e6:85:f3:b9:b1:db:f4:03:bd:b2:
9b:17:21:a1:c6:12:57:f9:d3:43:b8:dd:f3:5e:24:
f9:d8:e4:d0:3b:ca:26:0f:6c:cc:43:ca:d7:9e:36:
2a:78:bb:bb:77:9c:11:f1:17:76:a0:d0:70:cd:4c:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F7:34:31:CC:D2:DF:35:29:64:93:53:B5:0C:67:82:3E:A5:09:76
X509v3 Authority Key Identifier:
keyid:74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/V_c0MczS3zUpZJNTtQxngj6lCXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:eb:e4:cf:23:c2:49:7f:3b:91:18:97:e4:5f:4e:f7:2a:96:
43:43:32:8a:42:95:60:de:9a:d4:04:84:50:56:42:88:9f:34:
1d:36:ba:03:ff:e8:c1:9f:57:44:bb:d0:f9:94:36:54:f3:5a:
40:9c:d0:25:92:78:e7:a5:bf:8e:c1:0a:d9:64:6c:9c:62:39:
76:81:80:52:bf:78:d5:ca:ea:f5:dd:f4:0a:28:e2:3e:d4:97:
08:69:d1:90:1f:2c:ed:bc:a0:dc:9f:e6:f6:2c:b3:87:17:36:
1c:f8:fc:f3:d7:6a:70:2d:fc:06:d0:1f:7b:64:b4:2e:8c:b6:
04:0a:65:d1:6e:c5:e1:46:94:72:81:29:39:81:b3:57:7e:fe:
9c:e7:fa:bc:4d:46:27:10:5a:ff:54:f3:51:bb:11:8e:f8:44:
71:6f:b0:1a:6f:50:ed:18:50:36:f8:40:26:fd:26:98:b7:12:
42:5b:3e:50:c2:9d:30:73:a7:56:24:16:e4:5c:1e:05:0d:fb:
f3:f8:bf:a8:86:db:1c:39:ba:73:d6:32:13:4a:8d:df:75:dd:
79:ac:ab:ad:2d:02:13:03:1c:73:11:30:b4:55:f6:d1:01:59:
bf:e3:57:64:c2:55:62:b4:23:f6:71:92:5d:fb:1b:9a:e8:82:
f4:8c:0a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:18 2026 by rpki-client