Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/VTXP2YiwzSV9vXA0rbSUdcqK9nU.roa
File: VTXP2YiwzSV9vXA0rbSUdcqK9nU.roa (raw, json)
Hash identifier: 6PLpiz3quSPpSuhj5ThEN3LZ+VImxKC5MTupvkiSL40=
Subject key identifier: 55:35:CF:D9:88:B0:CD:25:7D:BD:70:34:AD:B4:94:75:CA:8A:F6:75
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019C9AE15E4DF7356805E4CD571A657D1731
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/VTXP2YiwzSV9vXA0rbSUdcqK9nU.roa
Signing time: Thu 26 Feb 2026 16:56:26 +0000
ROA not before: Thu 26 Feb 2026 16:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207767
IP address blocks: 176.119.209.0/24 maxlen: 24
185.90.44.0/22 maxlen: 24
185.254.219.0/24 maxlen: 24
2a0f:ffc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:e1:5e:4d:f7:35:68:05:e4:cd:57:1a:65:7d:17:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Feb 26 16:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5535cfd988b0cd257dbd7034adb49475ca8af675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:ed:47:b3:d6:60:00:e8:4e:f5:da:db:1c:
94:d8:93:8a:92:09:26:4d:2c:24:f5:25:b6:ad:7f:
9d:6b:55:89:5a:41:8a:bd:b1:10:2d:61:ff:58:67:
5b:7e:a3:1b:3d:46:3b:a2:59:27:87:00:72:f9:eb:
ed:ce:df:cb:a7:ff:ce:11:cb:a9:05:01:70:1b:1f:
cc:67:18:b1:85:8e:89:fb:ea:f4:78:a2:89:6a:e3:
68:b3:38:90:41:0a:01:dc:18:6d:7a:c2:db:1f:66:
d7:02:d6:27:4f:71:19:93:8e:b1:08:fd:b4:c1:cd:
08:11:a5:88:fd:a7:16:4b:00:82:ba:0e:ac:64:8b:
c6:5a:0c:78:ac:51:89:65:dd:ac:d3:8a:4e:95:5c:
e0:ac:fa:cb:3c:08:9f:70:71:cb:b3:29:eb:e8:65:
69:7f:83:c9:83:85:fa:74:f2:a0:2a:4e:71:be:6c:
d4:a1:ce:54:51:43:84:cc:73:e9:35:6e:b6:05:b2:
04:64:b2:e0:26:e3:eb:d4:9e:45:f7:9a:bf:7f:ee:
de:5e:4e:3b:fc:14:39:8b:af:2a:7b:d0:01:23:aa:
30:a6:12:87:16:26:ae:99:ea:45:91:b0:74:e7:a1:
3a:76:75:85:f6:34:13:0f:e8:db:1e:b6:27:40:e6:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:CF:D9:88:B0:CD:25:7D:BD:70:34:AD:B4:94:75:CA:8A:F6:75
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/VTXP2YiwzSV9vXA0rbSUdcqK9nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.209.0/24
185.90.44.0/22
185.254.219.0/24
IPv6:
2a0f:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:be:ad:3a:65:b4:0b:34:63:ea:3e:35:95:3b:2a:d0:e9:34:
01:c3:e2:54:dc:f9:48:ef:28:ea:73:78:68:c6:0b:e0:34:85:
ae:7b:b9:20:5c:76:9e:4d:3e:1b:cb:53:db:a6:1f:5c:ac:d5:
24:a1:e1:1e:ec:31:45:a4:d8:43:47:59:6c:5f:8a:8b:50:e8:
d1:8b:62:f8:7e:b4:7c:4a:e4:21:74:1f:7d:78:c5:e1:0c:93:
46:3c:a7:56:6c:79:7d:61:16:ab:e1:52:02:75:45:4b:a1:63:
00:cb:6d:47:c3:73:a9:47:ee:8a:0b:74:a1:f7:b9:48:3d:85:
67:ec:13:2f:4a:d6:6e:58:c1:c1:2b:b0:42:e2:16:39:18:b7:
05:6a:96:2b:6b:e1:26:90:61:8d:8b:4d:d9:79:d3:80:ca:6d:
5c:db:f1:b4:01:ee:32:65:c0:12:bc:c9:05:9b:84:bc:45:f7:
b1:dc:58:de:b0:bf:4c:fb:13:0d:c4:05:79:34:da:96:67:05:
d2:97:80:f6:44:c7:4e:ab:fd:81:3e:b8:a6:d2:8e:02:de:3f:
5c:08:9a:81:a3:6b:7f:b1:be:ab:b5:30:a5:43:10:fb:9b:17:
a1:e3:f6:45:42:78:fe:51:3d:a2:37:93:c4:bf:7a:fe:19:7e:
eb:76:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:50 2026 by rpki-client