Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/vcqIh9RGrfqsmlHa25tlLbDVTfk.roa
File: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (raw, json)
Hash identifier: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=
Subject key identifier: BD:CA:88:87:D4:46:AD:FA:AC:9A:51:DA:DB:9B:65:2D:B0:D5:4D:F9
Certificate issuer: /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial: 019F3BBAC515D5586DBDB1623CDEA8DB2175
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/vcqIh9RGrfqsmlHa25tlLbDVTfk.roa
Signing time: Tue 07 Jul 2026 08:38:43 +0000
ROA not before: Tue 07 Jul 2026 08:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.194.86.0/24 maxlen: 24
185.194.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:ba:c5:15:d5:58:6d:bd:b1:62:3c:de:a8:db:21:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Validity
Not Before: Jul 7 08:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdca8887d446adfaac9a51dadb9b652db0d54df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:91:74:4a:05:42:07:8c:28:5c:eb:65:ef:
c5:aa:5f:60:09:3d:f3:c2:88:04:8d:9c:65:f2:1f:
22:fb:fc:a0:54:6b:18:7e:e9:1d:21:bb:69:56:70:
e6:22:95:ae:31:b8:c6:18:0a:4e:65:a6:f9:ef:ea:
25:82:38:41:0c:2b:08:59:ab:ef:00:eb:a5:f7:6c:
41:09:56:72:90:e2:8e:96:86:9e:c5:12:8f:59:f1:
21:b6:2b:d1:2e:71:ab:05:95:ca:7a:b4:35:66:35:
19:46:4d:e0:f0:2f:0d:bc:1f:46:61:49:57:f5:d0:
84:50:71:60:48:7a:48:ba:25:20:7d:b3:0e:0e:6b:
2d:97:6f:e6:c0:4b:f7:ae:c5:e1:60:22:c0:af:ac:
ed:db:04:9c:a4:c8:16:37:3d:7a:91:cd:72:59:c6:
33:80:c1:81:c3:cd:d3:8b:11:3a:59:d5:db:db:f0:
e4:2f:7b:01:7d:96:70:7e:95:c5:54:0a:bb:69:a7:
10:3b:1a:a0:ed:92:a1:8b:be:2d:f5:d4:32:d8:9f:
0d:65:c9:25:15:5d:7c:96:c0:7b:03:59:f5:17:13:
b7:9b:74:47:ab:39:e4:ff:51:b1:ea:2d:7d:0c:2f:
a4:c4:11:d7:63:ee:be:a0:ef:5d:6b:fa:c6:96:60:
c5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CA:88:87:D4:46:AD:FA:AC:9A:51:DA:DB:9B:65:2D:B0:D5:4D:F9
X509v3 Authority Key Identifier:
keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/vcqIh9RGrfqsmlHa25tlLbDVTfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.86.0/23
Signature Algorithm: sha256WithRSAEncryption
24:df:c9:82:0e:ff:c4:2c:25:e9:d2:69:43:4d:53:ac:bf:d4:
bc:25:f9:32:cb:65:ad:75:18:d2:0b:44:c5:76:40:f7:9c:37:
e6:cd:51:90:28:b7:d1:8d:ea:5f:27:18:68:15:23:43:aa:99:
bd:68:70:9a:d1:f2:4c:8c:2c:7d:c1:2b:53:34:af:ce:fe:37:
72:fd:e0:7d:42:18:b6:2a:70:0e:31:97:83:fe:18:f3:6e:48:
26:e3:0a:21:a4:ba:ac:49:8d:57:f6:95:b4:2c:5f:28:49:25:
f0:20:f8:e2:76:89:58:7c:7e:84:41:7d:31:3e:7f:c1:b8:47:
42:06:93:74:9e:b9:f5:e8:72:5b:e9:5a:89:c6:ae:48:47:71:
08:5f:60:0f:fb:f2:a0:66:d9:db:e1:cb:ca:de:5b:3f:ed:19:
76:00:ff:75:a5:40:97:0b:b1:c8:ed:26:75:34:eb:96:7f:a3:
97:8a:67:d0:c3:76:6d:e8:b8:4b:61:ca:03:90:0c:e4:49:2a:
b2:ac:12:8b:b4:cd:2d:89:ac:c8:37:20:b8:5e:e7:37:f6:c1:
c3:27:8d:c2:cb:1a:05:bc:1e:18:c5:bd:f3:a3:a3:ab:d7:28:
db:8c:8f:5c:de:e1:f4:5c:94:ca:eb:b6:fa:a9:21:9c:ac:f8:
2b:9d:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:23:14 2026 by rpki-client