Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/VTN6n6FtGPxCemN0UNbtEx7n56w.roa
File: VTN6n6FtGPxCemN0UNbtEx7n56w.roa (raw, json)
Hash identifier: o324uv1/L4w63ttuNkk3XBB2C7/i691z16tsQUxopJQ=
Subject key identifier: 55:33:7A:9F:A1:6D:18:FC:42:7A:63:74:50:D6:ED:13:1E:E7:E7:AC
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 01A1AAE1FF9866F425EAFD0540696466EA3B
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/VTN6n6FtGPxCemN0UNbtEx7n56w.roa
Signing time: Thu 05 Nov 2026 08:45:00 +0000
ROA not before: Thu 05 Nov 2026 08:45:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36184
IP address blocks: 194.126.150.0/23 maxlen: 24
217.10.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:e1:ff:98:66:f4:25:ea:fd:05:40:69:64:66:ea:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Nov 5 08:45:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55337a9fa16d18fc427a637450d6ed131ee7e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:ba:74:f1:28:cd:5c:d2:fc:ce:53:bb:d2:
91:38:d6:a8:a3:aa:42:5e:07:62:6f:33:b1:b0:fa:
ec:29:3e:af:02:b8:3e:f7:54:3d:64:1a:9e:ee:d6:
b3:b5:f7:80:a8:f6:ae:1c:ec:24:d0:a8:ed:57:42:
97:6f:4a:0c:a4:a5:6d:51:12:ab:3a:9d:b0:9b:a5:
de:b6:67:20:a0:0b:7c:69:9d:82:f6:3b:08:93:9c:
36:0c:f7:52:27:dc:45:94:d2:af:d5:69:ec:72:f9:
6a:cb:10:e5:32:3c:6f:b5:db:7f:ef:d4:75:f1:e1:
89:69:2b:1e:54:2c:34:d4:b9:46:91:b0:c1:e7:4b:
34:97:9a:e4:4f:e8:20:3b:b9:dd:f0:f3:00:ca:78:
73:8e:71:e6:7a:6a:4a:93:7e:4a:71:d8:1f:91:98:
f0:f2:32:a5:1c:e7:98:1e:3a:51:34:f2:8c:de:18:
4b:04:8c:ac:5e:fc:ea:da:28:f6:60:62:ad:11:72:
e8:cb:a3:ca:b4:80:16:db:b6:76:a0:3b:47:f3:d4:
29:c0:bf:d3:43:b5:43:2a:b6:95:20:59:ac:05:0e:
5c:f2:ac:4e:51:b4:87:2e:09:53:b6:30:16:c9:e2:
23:31:10:48:39:4a:03:30:f8:7a:57:c5:b7:f1:44:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:33:7A:9F:A1:6D:18:FC:42:7A:63:74:50:D6:ED:13:1E:E7:E7:AC
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/VTN6n6FtGPxCemN0UNbtEx7n56w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.150.0/23
217.10.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5b:58:c6:14:e4:92:87:97:55:e1:17:14:e8:0e:f4:63:4e:
ed:f2:36:49:65:34:0f:ba:e5:f0:a5:cd:7f:90:41:4d:e9:66:
23:de:41:f8:d6:ff:eb:9b:23:2b:9f:72:4d:bd:69:64:76:22:
6e:54:8a:46:80:8d:85:14:88:74:34:0e:9a:05:89:96:41:7a:
54:17:8e:92:9c:9f:dd:a7:0a:25:56:f6:ce:5c:e4:38:d9:fb:
12:59:0d:68:01:dc:cc:50:8c:d0:4a:62:33:66:2b:df:2e:cd:
0a:ec:bc:75:19:7a:17:1e:37:6b:04:b6:48:5f:3a:69:74:ba:
9e:67:21:92:80:35:71:40:89:1a:41:bc:5b:e4:ae:f5:ee:1b:
5d:e9:7b:48:b2:7f:ed:7c:4c:e1:41:fc:8c:ec:76:89:90:b3:
68:ec:97:47:56:fb:20:9b:c2:7c:0a:fb:06:20:ea:e4:87:e5:
1d:df:8e:1f:f2:7b:33:41:7e:ca:29:5d:2c:f1:d9:a4:5d:7f:
b5:81:ca:92:f4:80:45:26:03:65:13:23:a4:b6:9e:c8:17:92:
c3:30:da:5a:1c:62:f6:72:c1:3e:9b:8b:2c:b1:9d:29:2c:70:
cc:61:d2:79:ec:49:48:c2:c4:7e:54:1a:a6:4d:b0:2a:18:24:
df:2b:ad:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:43:57 2026 by rpki-client