Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/VI1RqKQ9FUKeH02MRHEork21o40.roa
File: VI1RqKQ9FUKeH02MRHEork21o40.roa (raw, json)
Hash identifier: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=
Subject key identifier: 54:8D:51:A8:A4:3D:15:42:9E:1F:4D:8C:44:71:28:AE:4D:B5:A3:8D
Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial: 019EAC8C3A32A29CB8DF61CEA6C4C2F66F0B
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/VI1RqKQ9FUKeH02MRHEork21o40.roa
Signing time: Tue 09 Jun 2026 13:22:11 +0000
ROA not before: Tue 09 Jun 2026 13:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401881
IP address blocks: 185.18.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:8c:3a:32:a2:9c:b8:df:61:ce:a6:c4:c2:f6:6f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
Validity
Not Before: Jun 9 13:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=548d51a8a43d15429e1f4d8c447128ae4db5a38d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:81:d1:5f:6d:6f:41:2a:89:72:a6:ad:f8:
29:9b:45:0a:50:77:fb:60:9d:8b:5b:6e:c3:e3:90:
9b:8b:db:2e:7f:ec:00:54:c8:37:3a:e1:0b:15:1c:
25:c9:5c:8e:2a:27:b5:43:3a:b1:6e:f1:3b:fc:bb:
1f:2c:b3:06:78:60:7b:77:cf:15:7a:15:32:00:41:
50:e2:7a:41:bb:3b:e7:d4:13:7b:8f:7c:9b:4e:16:
d7:9c:0d:4c:bb:a0:16:8b:2b:7e:a2:15:eb:4c:da:
69:3a:92:1b:f1:dd:d4:b7:24:f3:1f:78:24:d1:32:
cb:63:39:ce:62:b0:df:b5:ba:75:1b:96:6d:61:ff:
1d:25:0d:73:c6:bb:fe:09:60:8c:c2:6e:cc:37:c4:
4d:04:9e:32:ed:96:05:a4:3a:87:50:fb:72:9b:cd:
e5:b5:28:d2:00:bd:e1:b3:e2:63:91:95:cf:0f:be:
b3:2e:b2:e0:93:da:11:00:c4:c4:6d:a3:71:27:58:
06:ad:04:d2:2a:72:12:5a:5c:e9:62:82:a7:29:df:
be:a6:89:1d:51:75:69:d5:80:02:9f:be:44:8c:eb:
fe:08:c1:4c:e1:e3:fb:37:a0:ed:ba:e1:9f:2c:cd:
6a:fd:5f:77:5d:45:dd:9a:28:f1:76:49:a8:1a:d6:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8D:51:A8:A4:3D:15:42:9E:1F:4D:8C:44:71:28:AE:4D:B5:A3:8D
X509v3 Authority Key Identifier:
keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/VI1RqKQ9FUKeH02MRHEork21o40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.123.0/24
Signature Algorithm: sha256WithRSAEncryption
44:22:79:ed:cb:52:00:49:3f:a1:b6:c5:92:d4:ae:ff:d5:83:
96:f9:f1:86:8f:26:b6:00:e6:09:76:60:79:97:73:cd:dd:2c:
7b:eb:1d:95:8d:54:a8:9f:85:5f:f7:27:ac:ec:60:f7:dc:fd:
4f:62:f7:df:d6:99:11:82:a7:f3:ee:74:24:81:2e:f3:7e:8f:
35:37:87:e6:f0:49:1a:d8:18:7f:3a:b1:6e:97:5a:ef:8b:f5:
86:a8:37:b9:17:ce:76:47:50:ea:06:95:07:03:12:98:57:85:
50:62:f5:2e:96:d7:4c:ee:5d:ef:c4:0f:e9:9e:9c:9f:78:b6:
b4:c0:a4:44:76:e4:22:7d:ed:8b:a8:3a:46:4c:33:db:c1:17:
03:28:82:27:28:ea:e0:6a:cd:a5:7d:01:90:f8:0e:32:b4:65:
7e:a6:be:91:5d:5a:5e:eb:76:7e:25:ea:bc:d5:86:1d:ea:35:
1a:3d:98:36:28:0d:ac:52:ed:f0:31:34:14:80:39:7a:28:64:
30:13:08:be:11:b3:8f:d6:a8:81:e8:73:9f:4c:b7:4c:5e:81:
0c:42:4b:13:1f:df:3d:82:c9:e4:39:15:82:64:ac:e1:36:d0:
a3:76:d7:c9:2b:00:9b:04:37:15:ba:62:8b:2f:81:69:c7:ab:
52:94:dd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:55:34 2026 by rpki-client