Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VEFWlaDqtxitUUn9l5j3y7QwuUU.roa
File: VEFWlaDqtxitUUn9l5j3y7QwuUU.roa (raw, json)
Hash identifier: Elft+pSy+yfhQPbdU/aeYTy4VvZP/aHmafRuc1VdwOw=
Subject key identifier: 54:41:56:95:A0:EA:B7:18:AD:51:49:FD:97:98:F7:CB:B4:30:B9:45
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019D42AF9C0465E121B878A17A12D75CD724
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VEFWlaDqtxitUUn9l5j3y7QwuUU.roa
Signing time: Tue 31 Mar 2026 06:58:18 +0000
ROA not before: Tue 31 Mar 2026 06:58:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199914
IP address blocks: 81.180.202.0/23 maxlen: 23
194.176.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:af:9c:04:65:e1:21:b8:78:a1:7a:12:d7:5c:d7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 31 06:58:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54415695a0eab718ad5149fd9798f7cbb430b945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:14:f1:95:25:82:3d:30:ac:94:56:ed:f1:
49:70:ac:11:67:ef:58:1f:16:ae:11:d2:e5:3c:f1:
19:22:e7:db:65:67:af:a8:c8:98:66:f0:2f:0c:e0:
b1:ad:2b:11:ac:55:f5:4b:b3:06:ee:1d:05:aa:2b:
47:cc:ab:a8:13:d6:78:02:1d:13:4e:8e:1c:b8:6f:
41:fb:97:3f:e6:d8:81:e4:85:74:7b:73:d0:64:80:
cc:e0:39:ee:2a:be:60:0a:be:95:43:54:bc:79:99:
35:5f:ed:02:33:ef:10:46:9d:42:bf:5f:a6:59:21:
15:22:b5:a0:af:4a:80:ae:46:ac:81:11:a4:b8:ee:
8d:b2:4c:f2:3b:4a:d8:e3:3f:94:ed:8e:50:71:0e:
86:6e:0b:9c:5d:27:b4:a5:dd:97:cd:c5:c5:73:a9:
bb:55:5c:3d:c2:ea:5e:fe:68:d8:6b:fd:a0:e5:63:
7e:4b:d1:a4:0b:9c:80:4c:61:57:6b:c3:7a:66:c3:
e2:2b:0d:ae:05:4c:a2:ad:08:87:06:ba:1c:2e:56:
7a:4d:bd:ef:8d:82:40:d5:b8:aa:76:d4:0b:1e:fa:
f5:10:b3:04:38:2b:b6:6a:67:b5:15:2e:98:d9:e9:
09:22:92:94:c3:77:5b:3b:3a:de:5c:97:01:2d:40:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:56:95:A0:EA:B7:18:AD:51:49:FD:97:98:F7:CB:B4:30:B9:45
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/VEFWlaDqtxitUUn9l5j3y7QwuUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.202.0/23
194.176.184.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:02:a8:9c:88:f3:3a:60:e3:db:38:3a:9c:03:b9:30:0d:a2:
50:4a:41:28:91:03:04:7f:a7:51:22:78:80:47:04:86:aa:12:
17:b5:f2:23:e4:ea:31:64:89:50:8e:82:75:94:18:9a:95:d2:
fc:a6:9b:21:80:f7:02:55:a4:f8:0c:6e:5c:20:3b:b7:fc:12:
09:94:27:a9:37:1b:f8:56:49:65:a5:f7:a7:e3:4e:8a:24:01:
b1:e5:41:37:93:4c:ec:2a:ab:f4:20:03:52:99:08:55:61:99:
4d:96:f3:01:9d:5d:64:2d:b7:11:48:42:d3:4e:2d:ee:ce:73:
0e:3f:55:8e:22:81:10:4d:2c:5f:9b:a3:6b:a0:62:19:ea:a1:
c1:58:3f:6f:0f:23:48:9b:08:79:24:52:93:10:0a:a5:eb:1b:
49:14:8f:58:7a:25:64:e5:07:56:a7:fd:37:90:4d:b5:d5:b9:
75:8e:bf:99:06:72:2a:4a:f9:b4:b6:aa:16:63:40:cf:ce:e1:
10:74:7a:39:ce:c2:56:89:00:aa:e7:68:b9:34:69:c1:dd:16:
8e:ab:a7:f0:28:97:17:de:d3:28:c6:22:b1:9a:c2:f7:b6:bc:
76:3b:8e:ef:ae:cf:71:c8:2e:bb:21:31:3d:68:02:bb:78:08:
15:27:25:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:41 2026 by rpki-client