Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa
File: VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa (raw, json)
Hash identifier: PJAiuPsV0OJUExzoh82Xuin/NOUbTrHxFe1Pka5/k/Q=
Subject key identifier: 55:54:9F:00:9F:CB:FB:CA:49:16:07:1B:E8:48:EA:9D:53:B2:BD:11
Certificate issuer: /CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Certificate serial: 019F1777F2ECE07C027E66D960483AC30B87
Authority key identifier: 6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa
Signing time: Tue 30 Jun 2026 07:39:24 +0000
ROA not before: Tue 30 Jun 2026 07:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 192.190.201.0/24 maxlen: 24
192.190.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:77:f2:ec:e0:7c:02:7e:66:d9:60:48:3a:c3:0b:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c279c7fd2ed95f8185da1522a0f57c503eec5ab
Validity
Not Before: Jun 30 07:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55549f009fcbfbca4916071be848ea9d53b2bd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:32:24:3d:55:5b:b4:de:b4:76:2b:65:55:6c:
20:e7:56:ce:94:b5:3b:cb:ee:35:e4:c5:c3:f8:5f:
a9:01:96:6b:e0:2e:00:21:6c:68:e5:7a:3e:0a:05:
4f:78:3b:ab:fa:5f:77:4c:42:37:2b:de:f6:16:07:
1a:3a:66:01:7f:8b:dc:fc:f9:99:d4:51:df:e1:51:
62:b4:5e:ed:bb:ff:7e:8a:9b:cc:7e:7b:67:36:cc:
ff:d4:49:34:a7:cb:a5:1c:1f:ec:9d:9a:76:ba:ce:
f3:6b:ec:e6:53:0c:dd:28:59:67:00:91:c5:29:c5:
33:fd:6c:ef:86:e7:e7:fd:6e:0a:12:d2:60:c4:7a:
08:01:4a:b9:b9:87:c8:6b:c5:f7:68:29:b9:f1:03:
d0:7b:53:ae:44:8f:e5:c7:bf:87:30:52:ff:21:3f:
e5:6f:45:91:72:9b:cb:5e:15:fa:06:ed:5f:3b:3f:
82:38:7f:74:7b:7c:07:19:68:97:e1:00:43:4b:cb:
e1:82:67:6d:24:da:f3:3c:fe:a2:1b:fe:49:12:40:
3b:9b:76:79:60:57:3e:de:57:48:da:a6:f4:ae:c8:
f8:4b:8a:e8:b6:45:75:dc:48:2b:57:2f:f3:8e:e5:
4c:bc:e5:42:5d:b7:0e:fb:e3:8a:79:48:e0:fb:94:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:54:9F:00:9F:CB:FB:CA:49:16:07:1B:E8:48:EA:9D:53:B2:BD:11
X509v3 Authority Key Identifier:
keyid:6C:27:9C:7F:D2:ED:95:F8:18:5D:A1:52:2A:0F:57:C5:03:EE:C5:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCecf9LtlfgYXaFSKg9XxQPuxas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/VVSfAJ_L-8pJFgcb6EjqnVOyvRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d22ade-53dd-40d0-8254-240dd8636e47/1/bCecf9LtlfgYXaFSKg9XxQPuxas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.190.201.0-192.190.202.255
Signature Algorithm: sha256WithRSAEncryption
5d:8a:0e:b6:be:1a:d6:8f:c9:8c:f3:85:88:ee:7a:ae:81:86:
5a:5d:05:99:3a:f0:2e:b3:4b:68:d1:49:a2:17:eb:64:e5:b0:
c9:81:a8:50:b3:64:b8:66:5e:ca:69:f7:f7:8c:33:c1:59:16:
c0:36:49:1a:e0:69:1d:97:54:5c:72:39:8b:ad:2c:1c:b7:0c:
27:49:d9:c4:80:e9:de:34:37:f5:e1:f0:fa:81:36:55:9e:d5:
be:8b:4b:23:92:91:9c:f0:e7:a6:b8:1f:8f:c6:79:77:0e:12:
b0:b5:0a:ba:a0:83:80:75:78:dd:f2:0c:9f:aa:fb:e6:b6:65:
6d:9d:b4:d1:17:fb:4c:60:98:ac:eb:f4:14:c0:2c:f7:d1:5b:
31:6b:35:bf:2a:90:72:50:a6:dd:2e:25:1d:0b:d1:41:e0:ae:
73:ad:99:5f:89:60:06:42:22:a4:86:13:fb:86:14:4c:47:80:
a6:de:2a:79:8a:2d:7b:ae:cd:f4:c4:16:1a:6b:23:53:e8:79:
ce:07:d0:e5:ab:9f:a7:3c:fa:0d:95:a3:f7:57:e7:54:ca:ec:
39:04:4e:50:52:cf:c6:25:ca:b9:51:a7:17:05:69:78:e9:a0:
15:98:92:36:f9:03:37:c6:58:f4:b6:17:ef:ec:7c:eb:79:20:
2e:c8:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:37 2026 by rpki-client