Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vfcIEd89w7RHFNMpkDPFKdiuSXU.roa
File: vfcIEd89w7RHFNMpkDPFKdiuSXU.roa (raw, json)
Hash identifier: ixlqDv1r7we5MxrflT22tc1tM+oGVmsMKCPwwcmUkV0=
Subject key identifier: BD:F7:08:11:DF:3D:C3:B4:47:14:D3:29:90:33:C5:29:D8:AE:49:75
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D04C62EDC96B5FE038EB089E15728E74D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vfcIEd89w7RHFNMpkDPFKdiuSXU.roa
Signing time: Thu 19 Mar 2026 06:26:30 +0000
ROA not before: Thu 19 Mar 2026 06:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211577
IP address blocks: 45.74.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:c6:2e:dc:96:b5:fe:03:8e:b0:89:e1:57:28:e7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 19 06:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdf70811df3dc3b44714d3299033c529d8ae4975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:b1:3c:a9:d5:34:8c:16:88:63:f2:56:c6:
43:cd:e7:10:2c:ea:af:8d:24:40:bb:bb:35:c8:fd:
b3:16:d2:0c:6c:79:f9:6b:c8:f7:6e:d6:e8:3b:64:
cd:a4:64:55:ee:6b:f7:5c:31:cb:dc:72:ae:82:6f:
26:d2:95:9c:b9:e1:43:9f:89:62:f5:a3:2a:5f:f6:
04:1a:14:45:04:47:19:8a:9c:c0:74:ca:41:a6:35:
ec:fa:1c:33:6b:e9:e2:c4:75:01:6a:64:58:f0:d4:
83:9e:fd:81:ea:f4:95:17:d0:d7:71:2f:95:72:24:
c0:c7:cb:91:cf:99:05:ac:60:1e:5c:db:cf:1a:44:
58:62:dd:cf:87:31:2e:93:60:b7:49:d0:ba:a2:eb:
c4:f7:f0:39:35:82:8d:f5:e4:be:c5:5a:db:68:6a:
65:1a:20:9a:3f:74:37:9c:c4:53:b1:5c:4f:5b:20:
08:15:ce:ad:84:99:46:dd:35:98:e2:c2:be:47:03:
93:b5:c0:cb:e7:7d:fd:1b:94:6f:af:89:81:54:34:
79:00:74:7d:49:65:fe:e2:7f:8a:87:44:c2:d9:63:
19:f3:3d:dd:58:5a:72:4a:44:3e:94:3a:b0:a6:cf:
6a:7c:3b:27:91:3f:8c:ed:35:2d:4d:e6:42:c4:b2:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:08:11:DF:3D:C3:B4:47:14:D3:29:90:33:C5:29:D8:AE:49:75
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vfcIEd89w7RHFNMpkDPFKdiuSXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.247.0/24
Signature Algorithm: sha256WithRSAEncryption
21:34:21:2d:30:fa:a4:5d:7b:b4:dc:c6:a9:7b:50:fd:41:c0:
9b:ab:c6:a6:85:37:06:21:a2:c8:43:63:77:98:b5:12:7a:1c:
02:3c:e7:78:2b:b4:6b:fc:00:6e:c8:75:15:71:50:ae:50:79:
0d:e1:55:ff:df:cf:c8:23:2f:8b:9d:18:21:ec:1f:d2:15:59:
2c:5b:8d:5b:33:74:4a:66:f2:d2:f7:0f:ba:1a:15:87:8c:f1:
4f:39:7c:78:ae:1c:d6:8a:9a:ad:ec:42:0b:bc:71:a9:92:c3:
91:81:53:2e:49:08:2e:84:31:37:cf:3d:3e:fc:3e:2b:d4:03:
65:0d:d9:cb:d3:33:97:c8:60:8b:45:6d:d1:74:97:41:46:25:
88:58:e3:31:a0:68:99:67:ff:d2:f1:40:74:20:41:a4:5f:40:
4d:fe:0e:e4:a3:ad:05:68:7a:ba:7f:20:2a:0c:90:09:84:c1:
50:e2:3f:f8:11:e9:3b:27:5f:8c:46:7d:e4:56:1d:e1:7b:3e:
ce:81:6e:09:03:88:f2:c7:a0:cd:63:fd:39:b7:ad:c5:3e:e0:
5b:61:89:01:c1:03:2c:b1:f2:af:7e:03:21:8a:58:73:1a:b2:
98:83:8b:c3:f4:2a:a2:00:38:42:59:5d:27:54:21:96:8b:18:
ff:4b:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:36 2026 by rpki-client