Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/vVBLHXBfJPbXpqgCtq1p4eZjYp8.roa
File: vVBLHXBfJPbXpqgCtq1p4eZjYp8.roa (raw, json)
Hash identifier: j4MS7T10SL0UjiLNEtBo/0ApgVLxDlttUrEV3DBQOno=
Subject key identifier: BD:50:4B:1D:70:5F:24:F6:D7:A6:A8:02:B6:AD:69:E1:E6:63:62:9F
Certificate issuer: /CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Certificate serial: 01A0B125EA09B3D8F071DF3213BFD7C7AE81
Authority key identifier: 5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/vVBLHXBfJPbXpqgCtq1p4eZjYp8.roa
Signing time: Thu 17 Sep 2026 20:54:06 +0000
ROA not before: Thu 17 Sep 2026 20:54:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 176.123.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:25:ea:09:b3:d8:f0:71:df:32:13:bf:d7:c7:ae:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b611a3cfae951764cf9669a068d4ce74fa619a8
Validity
Not Before: Sep 17 20:54:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd504b1d705f24f6d7a6a802b6ad69e1e663629f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:a9:b5:92:13:f1:64:d4:4f:e9:13:5d:24:
12:1e:e0:ac:9b:94:cf:68:53:2a:23:51:2b:9a:29:
fe:ee:40:26:7f:fd:c4:4b:c6:94:4b:67:c5:f4:54:
3f:04:1a:08:d5:57:73:82:9a:7c:4e:21:75:d4:44:
d8:18:9c:2b:91:a8:c1:58:ef:9e:5f:73:e5:31:87:
4b:cd:12:f1:42:18:bd:46:cf:22:bb:33:26:4c:7a:
5c:0e:e8:1d:ff:e4:da:b3:98:d1:d9:8a:dd:3a:74:
45:01:dd:c6:d6:2a:df:df:5f:38:63:90:d9:3e:74:
fb:61:8d:1d:ad:d7:fc:6c:ba:56:67:58:a6:dd:06:
f0:22:b8:1e:0d:c1:39:f2:6d:76:b0:e0:73:41:7b:
7f:38:e4:5f:48:64:85:72:b5:08:44:25:66:57:1c:
7f:36:e9:ea:c0:59:9a:9d:d7:c1:e7:d3:36:0c:b2:
4b:72:19:a5:9a:26:68:5b:42:4d:19:24:1a:2d:8a:
cb:c4:b5:3c:2a:6f:39:c3:a5:da:5a:09:e8:bd:c3:
8a:c3:5f:17:21:bc:02:aa:2d:2f:09:d5:f1:a8:7c:
66:50:19:36:1f:83:82:07:cd:12:7b:54:70:ec:97:
6f:41:a6:1b:53:0f:38:5d:be:36:7f:c8:0f:16:c8:
ed:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:50:4B:1D:70:5F:24:F6:D7:A6:A8:02:B6:AD:69:E1:E6:63:62:9F
X509v3 Authority Key Identifier:
keyid:5B:61:1A:3C:FA:E9:51:76:4C:F9:66:9A:06:8D:4C:E7:4F:A6:19:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2EaPPrpUXZM-WaaBo1M50-mGag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/vVBLHXBfJPbXpqgCtq1p4eZjYp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/702302-3d53-4e43-9d5c-28bb2de58ac4/1/W2EaPPrpUXZM-WaaBo1M50-mGag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6f:98:5c:19:1a:45:7c:5e:9c:30:ff:d9:bf:d6:a7:89:bc:
4f:29:2f:23:d5:54:9b:58:67:60:8d:3f:ad:c8:9e:80:4c:b8:
a7:3c:6d:89:e2:19:e8:a2:c0:0c:d0:06:82:af:18:2c:c0:7a:
80:ef:3f:fb:d9:7b:46:4c:5c:53:a4:6f:58:c5:a9:e0:ae:8b:
7a:81:9e:b0:df:b6:c8:3d:c0:09:1c:56:e9:09:38:96:14:0a:
7d:34:d7:bf:dd:f7:e3:c0:b8:bd:92:83:79:5f:66:99:57:c9:
b0:69:46:4f:ae:eb:fa:fb:57:c6:a4:06:17:3f:52:b7:60:89:
a0:7e:7d:f8:47:6b:99:c6:0e:cd:ad:33:16:4f:2e:ef:a0:a5:
69:35:72:c4:55:5a:17:c6:e9:4d:b6:38:a9:fd:7b:e0:93:89:
ce:2f:42:a3:16:6e:91:19:f2:5e:e2:c3:1c:f1:f1:77:7d:4c:
a8:8c:6a:de:a1:42:00:cb:a3:e3:54:65:62:90:34:73:8f:b5:
27:7a:ef:30:f0:58:26:a4:ed:36:fb:ef:a2:dd:ab:2f:87:ff:
c6:5d:ad:c0:39:be:29:99:4d:6d:63:75:57:cf:63:81:b9:31:
c2:0f:47:b3:5e:2c:8b:a9:6a:47:be:53:93:1d:33:a1:a7:e9:
1d:b8:21:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:12:54 2026 by rpki-client