Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/VJujZAbyrTl87nTJB7WEVqx8cbI.roa
File: VJujZAbyrTl87nTJB7WEVqx8cbI.roa (raw, json)
Hash identifier: vCqHf5vG7fMSLIQkQ1HLHugWf2Gb38FXRSEUXA4AcLE=
Subject key identifier: 54:9B:A3:64:06:F2:AD:39:7C:EE:74:C9:07:B5:84:56:AC:7C:71:B2
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0C9E0CA9FB40B6E94A092F4FBE3517B03
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/VJujZAbyrTl87nTJB7WEVqx8cbI.roa
Signing time: Tue 22 Sep 2026 16:09:07 +0000
ROA not before: Tue 22 Sep 2026 16:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 157.228.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:e0:ca:9f:b4:0b:6e:94:a0:92:f4:fb:e3:51:7b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 22 16:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=549ba36406f2ad397cee74c907b58456ac7c71b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:f3:f5:fb:f1:a6:c6:cc:ee:38:4c:65:d0:
94:f6:7d:ff:13:16:bd:e0:a0:7b:0c:4a:00:db:a0:
6b:01:b2:50:0b:9f:a7:ff:9e:be:be:72:02:26:a3:
c6:6f:2d:37:f4:1f:aa:1c:f7:b1:c5:ea:36:4f:0c:
e2:b9:85:45:fc:9b:b4:53:d8:0d:85:7e:c3:34:b7:
f5:96:f2:55:21:0d:9b:a3:e0:91:95:b4:e8:f6:23:
fb:50:d2:ed:c8:43:8c:7b:00:10:0f:1e:b4:12:82:
30:09:89:7d:74:0c:19:f6:f3:6a:1d:0c:2d:0a:df:
22:17:87:67:1c:01:cf:0d:ed:6c:10:44:1e:0d:32:
2a:a1:84:39:3d:70:3c:75:a5:9b:30:69:df:6b:88:
92:64:89:59:1f:02:46:c3:0a:6e:24:f2:71:35:9b:
1e:01:c7:ec:d7:45:6c:98:14:df:c1:cf:ea:a7:ba:
7e:71:ee:36:99:1c:41:84:0b:16:b7:86:ce:ef:a0:
84:32:fa:58:f8:6d:3a:b2:cb:dd:ee:1a:ca:4c:70:
9f:2b:e9:86:20:20:63:6b:86:9c:ee:59:d5:f7:22:
db:9f:b5:de:c2:90:d8:e3:d6:b4:17:84:0c:0d:92:
44:ae:9c:6e:1f:21:4e:6f:6e:ed:c5:ff:e1:dd:f5:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9B:A3:64:06:F2:AD:39:7C:EE:74:C9:07:B5:84:56:AC:7C:71:B2
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/VJujZAbyrTl87nTJB7WEVqx8cbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.228.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:f5:4a:ac:1d:82:27:8a:d1:a1:e1:2c:9a:15:85:6e:c3:8b:
41:f0:36:12:a1:be:01:c3:b2:c5:7f:79:54:ca:c2:2a:e9:ec:
c9:b4:73:e0:ae:af:7c:00:2a:a9:fa:5c:95:e0:5d:44:21:e2:
71:09:a7:29:69:c0:ea:1b:64:3a:a9:fc:96:b6:bb:ce:4e:0f:
ac:64:6a:65:15:89:88:f7:a9:70:e7:7c:90:e8:4d:a0:a9:ab:
56:27:36:7b:e6:65:22:c0:b4:17:34:ce:fd:17:cc:33:a4:9b:
9d:bc:07:54:17:09:8a:b6:6a:8f:f2:6b:67:fb:7d:15:40:38:
19:3c:c9:ec:c6:32:4e:ab:36:cd:24:19:8b:c7:48:31:b8:7f:
6e:59:33:f1:e6:d0:b9:75:9c:2b:d3:21:46:f8:bd:4b:c1:a4:
9a:a7:c2:68:c2:aa:01:5a:28:67:d6:8c:9c:0d:fe:ff:17:91:
8c:18:aa:4b:7e:cd:70:2d:6c:ff:7f:c9:33:46:fe:87:33:bd:
88:4c:dc:58:e9:67:d0:95:21:31:ab:a6:90:1f:fc:0e:f2:e0:
46:45:f8:49:5b:15:a3:e1:e0:c9:e7:c4:2c:85:cf:e2:cf:f8:
4c:34:05:6c:94:39:19:44:5e:67:d0:3a:09:f6:cc:cb:c6:e9:
85:6d:48:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:17:33 2026 by rpki-client