Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/vHXepVpKIWkVP3xDk93G1Kcb1DM.roa
File: vHXepVpKIWkVP3xDk93G1Kcb1DM.roa (raw, json)
Hash identifier: hhAFdaETyQv2y4V0RVthnkONgbjAxOm2okzHuxGf6Ws=
Subject key identifier: BC:75:DE:A5:5A:4A:21:69:15:3F:7C:43:93:DD:C6:D4:A7:1B:D4:33
Certificate issuer: /CN=33a924ad59b459357a19ee0a47f379530e2d244c
Certificate serial: 019CBE290D930A956C0FDFAB5BE2002AE8AF
Authority key identifier: 33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/vHXepVpKIWkVP3xDk93G1Kcb1DM.roa
Signing time: Thu 05 Mar 2026 13:21:27 +0000
ROA not before: Thu 05 Mar 2026 13:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51104
IP address blocks: 185.26.85.0/24 maxlen: 24
185.169.7.0/24 maxlen: 24
213.239.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:be:29:0d:93:0a:95:6c:0f:df:ab:5b:e2:00:2a:e8:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a924ad59b459357a19ee0a47f379530e2d244c
Validity
Not Before: Mar 5 13:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc75dea55a4a2169153f7c4393ddc6d4a71bd433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:55:77:4d:a4:cd:9d:6b:29:6c:c3:85:41:
69:05:ea:d8:40:e0:4a:c2:bc:39:b0:aa:5b:a1:d2:
0b:f2:86:b2:35:e7:9b:d8:1f:59:a0:6d:af:b8:05:
72:8a:1c:1a:f8:eb:d0:39:ef:10:37:34:01:ab:b2:
2d:ab:a7:ce:2a:98:48:a4:9c:42:d0:e5:f7:19:cb:
8f:fa:7c:78:c1:7c:25:e6:3a:dc:21:11:00:e3:b0:
26:23:4e:66:ab:51:5f:ac:35:dd:b4:3b:ca:9f:7b:
2f:f9:51:53:4c:39:7d:92:07:fd:7c:80:87:93:d3:
ba:89:11:6c:f9:a4:0b:9f:29:67:ab:e0:21:bd:7e:
45:d4:5c:92:9e:79:e2:2c:50:72:9b:8f:ce:be:3f:
81:a1:3f:d1:13:f2:28:5c:59:81:be:5f:99:1c:21:
a3:a0:42:77:6a:b3:99:c8:a4:d5:cf:dc:e9:7f:39:
63:e8:e1:ab:47:63:14:1e:ae:24:a2:2e:55:ee:c0:
86:3c:61:a3:fb:e8:4c:1d:4d:73:da:4a:53:a6:b0:
64:2c:a2:70:37:01:f8:cb:2a:7c:16:78:6b:8d:3f:
3a:62:19:5b:02:d9:bc:2c:f1:4d:e5:e9:b9:a2:a8:
b2:36:37:3f:36:7a:86:10:0b:63:f5:44:1f:4f:9c:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:75:DE:A5:5A:4A:21:69:15:3F:7C:43:93:DD:C6:D4:A7:1B:D4:33
X509v3 Authority Key Identifier:
keyid:33:A9:24:AD:59:B4:59:35:7A:19:EE:0A:47:F3:79:53:0E:2D:24:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/vHXepVpKIWkVP3xDk93G1Kcb1DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/09830e-0ffe-4682-bc4d-eb77e9571152/1/M6kkrVm0WTV6Ge4KR_N5Uw4tJEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.85.0/24
185.169.7.0/24
213.239.155.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e7:ce:93:1f:e6:65:6a:9d:ea:11:36:2e:53:1a:b7:ca:c7:
95:1f:5f:70:82:8d:7f:5f:8e:fa:15:e0:e2:22:7e:5d:1e:20:
d5:c8:a0:b7:7b:55:9e:7e:a2:18:2d:70:d1:9f:62:17:7f:63:
a8:2a:bf:2d:88:21:88:33:26:9b:a4:b9:65:0a:a2:c0:95:85:
ca:c6:80:86:fd:fc:69:a9:4c:40:9f:20:15:2d:e1:b9:61:02:
69:2b:26:ac:f1:4a:a7:25:ff:32:72:23:b8:8b:a0:b1:4a:bc:
63:c3:08:d3:98:ab:95:4a:bb:fe:f3:81:c6:2b:30:35:ca:f6:
cf:80:36:80:7c:9f:4d:3c:ab:2e:16:e4:1d:b6:0b:89:05:8c:
a1:3b:ee:47:6f:ae:fb:8f:72:bd:06:83:35:e5:1d:f4:05:a7:
1d:fe:b6:ff:61:70:ce:c6:22:4b:22:02:1b:5e:06:c7:e7:db:
74:f2:00:c8:27:47:79:ff:4b:25:5e:c2:d2:76:eb:84:b4:6d:
f0:af:35:03:32:02:34:39:95:3e:6f:92:57:ef:71:5f:c6:f2:
5e:45:cb:02:15:ad:b1:fa:d5:c3:2c:ed:9c:3d:cb:38:f3:a2:
e1:6f:70:22:4b:72:9c:9e:f4:a3:58:96:0a:3f:77:04:b7:3b:
5e:2f:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:47:04 2026 by rpki-client