Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/vRCc6wSVpGDCjEGuBc_d2VFIC1o.roa
File: vRCc6wSVpGDCjEGuBc_d2VFIC1o.roa (raw, json)
Hash identifier: I3JSKrwrfRrEjKpZwP2hswy/hY627u4kM14hSG3V1DI=
Subject key identifier: BD:10:9C:EB:04:95:A4:60:C2:8C:41:AE:05:CF:DD:D9:51:48:0B:5A
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 019F885893D583D057401E96683EC9660E13
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/vRCc6wSVpGDCjEGuBc_d2VFIC1o.roa
Signing time: Wed 22 Jul 2026 05:42:14 +0000
ROA not before: Wed 22 Jul 2026 05:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 5.0.128.0/21 maxlen: 21
5.0.136.0/21 maxlen: 21
5.0.144.0/21 maxlen: 21
5.0.152.0/21 maxlen: 21
5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
5.155.128.0/21 maxlen: 21
5.155.136.0/21 maxlen: 21
5.155.144.0/21 maxlen: 21
5.155.152.0/21 maxlen: 21
5.155.160.0/21 maxlen: 21
5.155.168.0/21 maxlen: 21
5.155.176.0/21 maxlen: 21
5.155.184.0/21 maxlen: 21
5.155.192.0/19 maxlen: 19
178.253.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:06:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:58:93:d5:83:d0:57:40:1e:96:68:3e:c9:66:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Jul 22 05:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd109ceb0495a460c28c41ae05cfddd951480b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:3d:bd:f7:a6:1a:6f:63:43:24:ea:19:c4:
33:b2:b1:38:dc:28:87:7b:f4:b4:47:3a:ec:14:e7:
da:71:60:2e:3d:76:64:e6:a1:5c:9a:c6:60:8c:d5:
51:b0:28:30:46:d5:7d:02:6e:35:fe:3d:67:8a:dd:
e1:4e:33:39:0b:34:2f:a8:21:70:96:38:b5:c2:64:
35:f4:d5:3e:34:5f:e9:bd:e2:75:50:6b:53:39:e8:
96:38:0a:1e:f2:00:5c:a6:41:b3:a2:00:1d:f9:e0:
6e:d6:12:a5:aa:32:5e:98:31:24:3c:1f:4c:20:6a:
96:bb:ef:f7:f0:83:a2:f4:a6:df:24:7a:c7:49:61:
ec:93:14:f5:7a:af:54:9c:3c:25:e1:ae:9a:c9:3e:
99:74:16:55:2f:9e:84:a3:6e:a6:45:d5:5f:00:ab:
31:7d:3a:d5:2f:81:7c:c0:1b:eb:5b:c4:3e:92:c1:
28:3f:bb:da:1e:1f:28:73:e7:d7:f3:ca:c4:f9:00:
a7:44:45:a1:24:7e:a9:e6:32:6e:fc:ea:c0:e2:df:
13:77:ea:29:da:80:75:ce:59:fe:7e:72:69:b0:e0:
e3:b5:3a:ec:7f:54:8b:34:bf:82:b5:df:22:ca:56:
b9:c8:82:44:d1:f9:41:92:18:7b:03:76:69:a4:a2:
b4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:10:9C:EB:04:95:A4:60:C2:8C:41:AE:05:CF:DD:D9:51:48:0B:5A
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/vRCc6wSVpGDCjEGuBc_d2VFIC1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.128.0/18
5.155.128.0-5.155.223.255
178.253.100.0/23
Signature Algorithm: sha256WithRSAEncryption
14:c6:67:27:b3:6a:bb:02:63:d8:59:77:41:a8:e1:12:0d:cc:
c6:44:a1:59:f4:ee:8b:3a:2c:43:90:fd:fa:67:1f:27:32:cf:
d0:b3:b3:ce:02:37:0a:12:2e:22:61:33:00:e4:54:83:bf:17:
94:29:a9:32:3a:fd:8f:d4:60:00:a1:41:a7:5f:7e:27:fa:d5:
e5:f8:06:8c:15:1c:99:d9:0c:2b:92:67:ef:34:1c:5e:36:58:
32:61:d2:35:c8:8d:27:7d:5b:c3:33:b4:c1:8a:d2:c1:2e:45:
fa:d6:31:23:28:8a:83:be:5a:88:5a:17:bc:51:66:ac:a2:26:
21:d4:ee:a5:7f:cd:25:92:3f:9d:cd:04:08:f3:b4:05:fb:9e:
d1:93:43:c0:cb:d7:81:29:60:bd:b9:59:81:5a:1c:bd:40:a5:
92:16:6c:ea:4c:bf:c5:f5:08:aa:07:a0:1a:11:58:bc:a2:68:
95:31:66:24:5d:9c:cd:b0:e4:f8:4c:0d:83:ca:a9:74:74:56:
8a:cc:bd:43:ad:3a:56:5b:0a:29:d5:5c:32:3d:9e:85:65:90:
16:a9:34:a9:b4:62:0f:9e:27:9e:f7:15:0a:fb:74:69:1d:ce:
cd:fe:75:07:8a:3a:02:ee:8d:ed:e9:cb:d5:ae:9d:99:52:8b:
c4:48:55:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:13 2026 by rpki-client