Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/vBJuwGaliB1wpV7hStwLSnTiWLg.roa
File: vBJuwGaliB1wpV7hStwLSnTiWLg.roa (raw, json)
Hash identifier: 53iv+46+n24h5x2j6OcqjQhtxXwivIsgJDxIfIoHYag=
Subject key identifier: BC:12:6E:C0:66:A5:88:1D:70:A5:5E:E1:4A:DC:0B:4A:74:E2:58:B8
Certificate issuer: /CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Certificate serial: 01A0C8F57F09F6758E2492406A5F9B98EED9
Authority key identifier: 63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/vBJuwGaliB1wpV7hStwLSnTiWLg.roa
Signing time: Tue 22 Sep 2026 11:52:07 +0000
ROA not before: Tue 22 Sep 2026 11:52:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48529
IP address blocks: 217.65.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:f5:7f:09:f6:75:8e:24:92:40:6a:5f:9b:98:ee:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=635d5b644e22fb488e4d6c0012b0aabf238e61e5
Validity
Not Before: Sep 22 11:52:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc126ec066a5881d70a55ee14adc0b4a74e258b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1e:7b:7e:ce:fd:8d:fb:2e:be:72:63:08:06:
57:69:a8:3a:6d:57:64:19:ea:32:f4:84:87:01:f9:
c4:f8:1c:4d:2a:3c:55:99:a6:a3:12:11:81:7f:6a:
47:92:81:6f:d3:f3:a0:eb:ee:fa:a2:df:2c:d9:da:
27:e7:59:6d:d4:80:d7:38:84:4e:20:4e:33:85:6f:
94:18:27:b8:ec:62:89:0e:b2:59:1e:15:51:7c:2b:
5c:e2:6c:34:cf:45:d0:6d:c8:24:c9:80:c2:27:62:
74:2d:b5:13:8a:d9:85:0e:aa:d2:99:ca:c1:43:c9:
64:56:d8:57:27:07:06:2e:be:fc:06:ad:d1:78:b2:
f2:32:91:92:f0:83:74:6a:4d:e3:53:d8:55:4b:ac:
d1:b0:1a:39:21:cf:a0:a2:04:74:06:36:c3:99:31:
c5:62:b2:2f:c1:da:02:c8:b1:95:46:e4:ad:a5:a0:
14:56:53:ae:a5:4e:1d:b3:cf:3a:88:43:93:ed:46:
8b:2c:a9:02:11:18:56:bf:0f:43:c7:db:2f:e3:b0:
3b:88:f9:6c:67:da:b2:ce:ae:49:25:98:f4:19:a0:
bd:27:bc:27:1d:e5:c2:c8:b5:95:8e:49:93:85:7a:
eb:b7:b3:3c:ac:78:f1:2c:39:8b:79:f1:8e:dd:79:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:6E:C0:66:A5:88:1D:70:A5:5E:E1:4A:DC:0B:4A:74:E2:58:B8
X509v3 Authority Key Identifier:
keyid:63:5D:5B:64:4E:22:FB:48:8E:4D:6C:00:12:B0:AA:BF:23:8E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y11bZE4i-0iOTWwAErCqvyOOYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/vBJuwGaliB1wpV7hStwLSnTiWLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fe7fc2-41cc-467d-980b-f5af616b5483/1/Y11bZE4i-0iOTWwAErCqvyOOYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.65.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ac:3b:f4:91:1d:e1:62:82:c2:79:37:3f:0f:6a:4a:98:99:
96:ee:8f:5e:c6:99:ec:67:06:3f:85:23:a2:3f:50:29:ac:69:
58:fe:d1:58:14:77:18:1c:a3:6a:8e:e4:99:fe:57:e6:ab:3e:
c5:7c:36:fa:ce:8f:90:32:9f:67:aa:ad:16:30:e3:2d:31:5a:
76:e8:f4:56:c8:8d:e9:21:1b:80:2a:ce:94:ae:b4:53:8a:e6:
7c:3b:28:30:8f:32:01:5e:2d:ac:cc:22:bc:0c:0c:b6:c9:c6:
d6:8a:8a:fb:a1:01:e0:28:dd:40:12:fe:6e:5c:53:99:d4:c8:
4a:f3:1a:6b:9f:69:b9:f8:51:69:14:63:18:e0:60:8b:75:c6:
76:0f:cb:29:8d:9d:ac:13:b0:18:d9:78:3a:b2:b8:75:46:0c:
68:c7:76:68:b1:38:ea:d5:47:f9:49:3c:21:f6:bf:81:15:be:
98:78:01:a1:b7:45:75:f5:fd:c5:da:d3:72:c1:e7:45:a6:17:
5b:9f:03:f3:08:12:e3:20:47:fd:48:fc:e4:20:d7:76:77:1d:
58:cf:1c:6d:6b:77:54:30:89:24:db:72:78:cb:56:25:28:be:
15:fb:c1:90:90:5e:85:c7:a2:f1:59:34:64:ca:2d:54:18:37:
48:0f:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:41:00 2026 by rpki-client