Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/vyj8IOJOHNzTxgRX65R19o7LjU4.roa
File: vyj8IOJOHNzTxgRX65R19o7LjU4.roa (raw, json)
Hash identifier: 3hTYsnPUXOWnFlyu/vwqxhKvcZltcMLiA35+JAhcAoE=
Subject key identifier: BF:28:FC:20:E2:4E:1C:DC:D3:C6:04:57:EB:94:75:F6:8E:CB:8D:4E
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 019DDD3C9ADB979CBC1D806B43D466C2A6AA
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/vyj8IOJOHNzTxgRX65R19o7LjU4.roa
Signing time: Thu 30 Apr 2026 07:13:49 +0000
ROA not before: Thu 30 Apr 2026 07:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 109.160.32.0/24 maxlen: 24
109.160.33.0/24 maxlen: 24
109.160.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:3c:9a:db:97:9c:bc:1d:80:6b:43:d4:66:c2:a6:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Apr 30 07:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf28fc20e24e1cdcd3c60457eb9475f68ecb8d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b4:94:57:38:67:2b:91:ec:46:f4:49:45:e1:
d7:e9:b6:75:3b:28:0a:df:f7:0c:f0:75:30:5d:bb:
e6:e2:c5:08:c2:61:8d:23:0d:38:bc:46:fc:11:49:
be:89:69:87:cd:98:72:8d:23:2a:b9:7e:eb:1e:24:
42:4a:53:bf:7d:ab:ec:95:22:66:fd:7a:35:77:bb:
e4:ab:b1:87:24:47:9d:b0:e7:04:b7:c4:bf:36:7b:
7f:bf:14:65:31:55:58:ab:5e:c6:b2:97:6b:4c:2d:
46:fd:71:b5:30:72:7d:94:93:00:56:d5:b0:5b:f5:
e9:02:4a:a5:ce:3b:23:22:d2:aa:2a:27:2b:e8:d7:
19:6b:b6:3a:41:d3:27:d5:19:fb:b8:af:b7:a0:10:
78:f3:bf:4e:74:52:f2:40:ae:9c:e4:a9:d4:c3:49:
9a:f8:bf:ed:91:f7:6b:fb:5a:76:b7:7c:df:a4:35:
d7:55:3e:1b:0b:d9:7b:3d:7c:5d:60:a3:08:48:c1:
1c:85:ed:f1:4f:dc:35:9f:93:46:25:5d:ac:fe:6f:
3c:54:0a:42:52:79:d9:77:c0:09:b4:56:84:5e:f0:
0c:9e:89:eb:bc:3c:5e:3e:d0:e1:d4:a2:5e:b3:09:
38:0b:32:3e:41:cc:1f:a3:73:1b:f3:f9:4a:f9:b0:
b5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:28:FC:20:E2:4E:1C:DC:D3:C6:04:57:EB:94:75:F6:8E:CB:8D:4E
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/vyj8IOJOHNzTxgRX65R19o7LjU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.32.0-109.160.34.255
Signature Algorithm: sha256WithRSAEncryption
14:b3:e6:90:9d:38:73:07:67:62:ea:b9:4f:0e:2b:62:ea:c3:
e1:64:35:c1:b0:af:ed:61:1b:39:46:3c:59:84:5b:2e:a4:8b:
26:a1:28:c0:97:96:76:95:87:57:b6:0a:38:41:68:8e:13:5d:
1c:f5:31:3e:55:05:96:61:39:17:f9:2c:86:0c:9f:5c:d4:c8:
6f:d7:cc:48:22:2d:c4:2f:c4:42:92:74:4a:99:85:44:af:5a:
65:c8:f1:63:ca:43:ed:1f:e7:a3:77:e3:b2:dd:d0:d9:c3:6c:
3d:39:58:c7:eb:fe:48:ba:6e:45:e4:95:04:36:94:90:3a:41:
69:3a:bc:3f:58:9c:23:38:90:ec:06:86:ab:97:01:62:1d:76:
d3:8f:3c:aa:06:f3:f2:89:42:75:18:c8:48:9a:d7:70:31:d6:
02:e4:1b:7e:13:be:d7:b5:e9:d9:f6:06:cf:56:5c:87:d5:f0:
b5:97:06:9f:2e:57:09:70:31:25:fc:c2:a6:68:61:03:3b:ae:
5b:fb:ec:7c:42:8f:d3:54:47:c4:0e:e9:28:19:35:9f:9d:33:
f4:f4:11:c7:32:4e:58:de:09:22:dd:ca:e1:e1:b2:7e:d0:83:
ce:69:a0:6e:e0:04:a3:7a:67:d3:ff:ca:f0:01:6e:43:df:dd:
78:42:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:07:12 2026 by rpki-client