Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/_VigQvf0Dyf23xGtLwUHzrTkZtA.roa
File: _VigQvf0Dyf23xGtLwUHzrTkZtA.roa (raw, json)
Hash identifier: fIK7iGnc84nGrsjgl6rp4thRhx3d9ulBPkLIYk4JgEM=
Subject key identifier: FD:58:A0:42:F7:F4:0F:27:F6:DF:11:AD:2F:05:07:CE:B4:E4:66:D0
Certificate issuer: /CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Certificate serial: 01A0C972EC5AEA760AC86475DFDC78A3079B
Authority key identifier: B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/_VigQvf0Dyf23xGtLwUHzrTkZtA.roa
Signing time: Tue 22 Sep 2026 14:09:06 +0000
ROA not before: Tue 22 Sep 2026 14:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1945
IP address blocks: 159.84.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:72:ec:5a:ea:76:0a:c8:64:75:df:dc:78:a3:07:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e2d8fb118bb0b60c07fd55738dfd9fcbc1e6a8
Validity
Not Before: Sep 22 14:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd58a042f7f40f27f6df11ad2f0507ceb4e466d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:72:a7:6e:d5:91:6a:9f:63:e8:f3:7e:e8:
d6:38:33:33:3a:df:44:51:84:ce:e1:0e:12:62:fe:
d6:d1:21:78:89:4d:a3:d1:62:6c:53:19:b2:70:07:
da:c2:52:c8:e9:9f:dc:f1:c6:85:24:64:85:29:bb:
5c:d7:e0:f9:88:15:00:18:53:fb:0a:67:5c:ff:e9:
fe:0a:a2:f8:4e:42:1a:31:27:63:d8:07:85:71:6a:
cf:26:6d:02:e2:12:2b:65:b7:c4:1e:3c:a5:40:a8:
b2:78:1c:de:d3:1d:85:c1:13:5c:60:c1:80:00:52:
1f:33:60:00:f4:c5:bb:d7:67:39:e1:f6:b4:b6:fe:
2f:fa:01:47:0e:3a:90:3e:43:92:8f:f4:e1:73:48:
81:c7:4c:f3:a7:19:84:fb:ce:96:b8:f4:29:92:90:
40:a6:dc:da:13:60:f1:3f:54:45:4b:79:51:47:c6:
9d:77:8a:ad:f4:da:76:a9:af:cb:76:ff:b8:4b:8d:
47:67:3b:d7:68:9b:d4:fe:29:63:4c:d8:a1:83:eb:
07:8d:60:33:34:6a:04:3d:a7:60:6b:73:2a:5f:18:
23:ae:79:0b:dc:fa:2c:30:99:6e:aa:c8:cb:a2:1b:
9c:db:f8:41:9d:93:3c:81:e3:16:8f:42:6b:7c:2d:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:A0:42:F7:F4:0F:27:F6:DF:11:AD:2F:05:07:CE:B4:E4:66:D0
X509v3 Authority Key Identifier:
keyid:B4:E2:D8:FB:11:8B:B0:B6:0C:07:FD:55:73:8D:FD:9F:CB:C1:E6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOLY-xGLsLYMB_1Vc439n8vB5qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/_VigQvf0Dyf23xGtLwUHzrTkZtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b0040f-c9fd-4d5c-935e-ebd6997e41c7/1/tOLY-xGLsLYMB_1Vc439n8vB5qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.84.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:1c:d9:61:43:9f:a3:9a:c8:eb:10:26:73:68:d5:f9:62:a2:
a8:7d:eb:81:90:a8:15:a5:00:0f:3c:63:f0:fd:54:b8:96:f4:
02:d9:7c:da:6d:07:70:df:a5:87:28:74:6a:98:8b:69:00:59:
01:13:8f:b5:9a:6f:6f:e4:35:75:a3:5e:38:d4:30:19:77:4a:
fe:ef:af:ec:ed:80:6e:bd:64:37:93:92:b6:22:63:bd:18:2e:
09:19:63:71:f4:46:4c:dd:28:10:3c:8c:d0:92:e4:36:6a:d6:
16:1a:4f:36:ac:aa:aa:4c:88:cb:70:40:9b:84:fb:e3:f8:92:
f2:65:ab:fb:86:77:3b:91:f7:da:c4:b2:6b:da:92:27:3c:b7:
7e:5b:2a:31:e9:40:4b:69:b2:a9:0b:f8:03:c6:b8:71:91:02:
04:73:6e:4c:4b:da:f1:4d:eb:7e:8d:18:40:9a:e4:1b:50:a6:
7f:81:d7:c2:29:ae:61:0d:80:46:40:a5:ab:c8:13:78:a5:81:
9e:73:27:54:6f:cd:f5:18:8f:b9:f8:96:bf:f5:f8:df:ba:5a:
fb:a1:0d:61:3f:cd:ef:42:a3:f0:e5:06:55:35:6e:7f:a2:d0:
c2:1e:d6:76:24:1c:2f:a6:3c:ec:d1:2b:75:cd:a3:c1:d1:14:
94:21:12:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:58:11 2026 by rpki-client