Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/vfuime7XKLq_IMU4DAnX4Nx6jzE.roa
File: vfuime7XKLq_IMU4DAnX4Nx6jzE.roa (raw, json)
Hash identifier: kg5X5HNbnuBqdxjeSjsj/XEZpdxo6lTx2YGUed/0woM=
Subject key identifier: BD:FB:A2:99:EE:D7:28:BA:BF:20:C5:38:0C:09:D7:E0:DC:7A:8F:31
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A0C0879916C139D53D2C9A661D4D4E4FAF
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/vfuime7XKLq_IMU4DAnX4Nx6jzE.roa
Signing time: Sun 20 Sep 2026 20:35:07 +0000
ROA not before: Sun 20 Sep 2026 20:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210387
IP address blocks: 45.10.150.0/24 maxlen: 24
185.148.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:87:99:16:c1:39:d5:3d:2c:9a:66:1d:4d:4e:4f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Sep 20 20:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdfba299eed728babf20c5380c09d7e0dc7a8f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:86:fa:70:1c:6d:cf:ba:a5:d1:e9:5d:0b:2b:
2d:e7:0c:9a:59:72:5d:35:53:22:51:c6:47:2d:4e:
de:5d:f1:23:00:c0:77:f4:52:96:35:11:d7:a7:cd:
31:42:5b:90:82:86:4a:5a:9f:ed:9b:8d:8e:8c:f2:
8e:0e:b9:ae:64:d7:43:4b:66:46:21:62:21:33:ea:
b0:a7:33:87:a0:32:57:87:1c:02:29:fb:87:ed:9f:
ca:84:0c:88:bb:80:0b:9b:14:e1:78:70:a0:a1:38:
7f:d9:bf:91:0b:e3:28:b5:1a:c7:c8:4a:ea:2a:83:
3a:0e:1c:75:f0:96:a0:b0:52:3b:ba:c5:af:b5:7a:
2d:5a:e3:f3:b3:96:7a:87:1c:d9:d1:fe:7a:50:27:
af:8f:35:2a:c3:64:bc:a3:0a:9e:4f:4f:1b:b1:04:
c5:e0:5e:4b:bb:76:33:82:15:98:c0:bb:ad:a7:a0:
17:02:38:dc:66:6e:56:a1:04:2b:f0:1c:fa:7b:d4:
a6:ef:a5:00:9f:79:b4:fd:e7:d2:38:85:d0:88:c3:
73:86:f4:2d:a1:0f:37:b1:cc:1e:3a:40:43:dc:0f:
57:07:1e:59:34:14:01:c3:e8:be:4a:1d:8d:cc:d2:
a3:28:b6:75:af:f3:f8:a9:f8:47:37:b7:a9:2c:00:
3c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:A2:99:EE:D7:28:BA:BF:20:C5:38:0C:09:D7:E0:DC:7A:8F:31
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/vfuime7XKLq_IMU4DAnX4Nx6jzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.150.0/24
185.148.241.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4a:42:26:b5:53:e3:05:6c:c8:72:ea:83:a1:dc:e9:44:2f:
50:d7:02:a4:fc:ac:29:ae:29:76:f0:50:70:02:c3:40:ec:cb:
ca:c8:ac:61:e0:ea:69:ca:4f:26:40:fb:c4:80:17:09:4b:b1:
82:bb:48:1b:93:09:09:5e:19:fb:b7:b8:96:df:14:d3:c5:18:
db:56:f0:f2:42:cf:e5:61:d6:5a:c3:85:91:33:a1:bb:25:01:
42:9a:e3:25:d9:45:06:01:d9:77:1f:6f:16:27:11:62:15:e4:
b8:b3:23:03:33:c5:4f:ee:1c:70:8a:fe:55:8b:9b:e5:91:41:
1f:fa:86:fe:be:38:0a:b1:a1:4b:5d:0e:63:36:12:ad:04:98:
08:b8:39:03:ef:37:95:de:b7:8f:32:d4:4c:c9:a9:4b:0d:56:
9e:2e:6d:53:a7:6b:1c:08:ce:ca:98:3c:ec:3a:81:b1:eb:a8:
a2:16:12:2e:5b:80:82:7f:5c:00:ae:fe:a1:60:0c:25:0b:85:
65:85:04:5e:2b:5c:84:05:6c:01:06:78:f3:55:17:45:48:dd:
7a:33:27:76:b9:bd:8a:79:47:c8:1f:84:5d:4f:83:f0:c5:cc:
a5:c5:19:59:9c:73:28:45:d5:d1:07:af:d1:2e:0c:10:4e:a9:
64:07:c6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:29 2026 by rpki-client