Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa
File: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (raw, json)
Hash identifier: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=
Subject key identifier: BD:FF:1E:6C:B2:E1:3F:BA:12:F1:39:2E:3A:C4:A3:DB:F5:9D:80:B9
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 019C894ACDF6A35A587F7D8542EE1FA692BC
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa
Signing time: Mon 23 Feb 2026 06:58:26 +0000
ROA not before: Mon 23 Feb 2026 06:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202297
IP address blocks: 45.139.224.0/22 maxlen: 24
2001:678:aa4::/48 maxlen: 48
2001:678:aa8::/48 maxlen: 48
2a04:ff07::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:4a:cd:f6:a3:5a:58:7f:7d:85:42:ee:1f:a6:92:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Feb 23 06:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdff1e6cb2e13fba12f1392e3ac4a3dbf59d80b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:d4:b2:49:14:c4:e0:a3:9e:ec:92:fe:1c:
3c:d7:a0:c3:b2:23:de:00:ec:ba:cb:3a:33:6c:fa:
56:92:82:05:19:cf:80:cf:82:9c:1e:f2:6c:ee:b7:
e0:e4:3a:8b:95:9b:9a:e6:9f:62:1d:46:53:13:36:
bb:d0:46:3b:ad:20:ab:0b:81:8d:4c:0f:62:70:c7:
71:91:20:f6:c6:3a:1c:56:0f:eb:e5:0a:3e:b7:85:
46:7f:4b:ef:30:24:c7:63:f8:6a:ef:5b:be:e0:4d:
a5:ec:48:c9:be:64:e6:84:cb:92:f0:c5:6f:94:72:
1d:38:4a:25:26:b2:e1:df:c4:d9:9f:d4:94:27:aa:
bb:75:23:e6:37:6b:3b:fb:46:3a:98:da:83:aa:dc:
05:68:2e:0e:26:fe:db:ca:99:6d:7e:16:24:61:a8:
60:50:49:4a:f8:55:64:58:d3:08:23:20:22:45:36:
81:0f:22:ae:e8:78:f1:03:7a:cc:17:be:04:32:a8:
e2:3f:9d:18:62:5d:65:76:8b:0b:44:81:4a:7a:ac:
32:4c:91:85:31:3d:7b:e4:4a:be:61:ed:6c:73:b5:
e5:58:a1:87:2c:fc:e4:0d:57:21:9c:33:a7:65:5e:
3d:44:d1:3d:3d:a4:1c:ae:f4:f2:98:b0:21:d6:c6:
a7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FF:1E:6C:B2:E1:3F:BA:12:F1:39:2E:3A:C4:A3:DB:F5:9D:80:B9
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.224.0/22
IPv6:
2001:678:aa4::/48
2001:678:aa8::/48
2a04:ff07::/32
Signature Algorithm: sha256WithRSAEncryption
1f:69:5c:45:9d:5c:c0:ef:37:67:a1:ca:4a:7e:05:e8:a6:84:
4a:f2:a1:dd:da:3a:15:34:ad:24:31:8f:bc:fa:b4:28:7f:4e:
c9:67:e3:b8:12:c4:75:23:1d:eb:98:98:58:ba:2f:27:03:79:
49:6f:72:6b:f9:ad:4e:8e:bf:44:30:d7:62:37:6e:4f:04:fd:
cd:20:c8:9f:d3:8b:be:67:08:9f:ca:ea:3e:67:c5:37:67:d9:
4f:67:c5:a0:97:41:11:5c:d3:76:cf:af:1d:ac:2d:15:f5:cc:
4d:f3:89:15:0a:cf:fa:0d:74:2b:91:40:5c:ce:9a:3b:a4:ae:
2b:f3:90:5e:b8:6e:a5:31:4f:db:07:c5:b2:0a:95:c4:b3:a7:
40:21:5f:52:31:4a:50:7a:91:96:26:57:c1:03:e5:f7:0e:1e:
16:c3:9d:1b:e5:08:ce:36:04:cf:0e:ca:ad:ca:23:e3:5d:f7:
7a:e9:84:3a:6b:88:a4:ad:57:7a:8c:fe:d8:f7:93:70:d5:4d:
5a:52:05:40:bb:66:2a:29:62:13:29:44:0c:17:ec:5d:93:e7:
a8:21:7d:2f:3d:de:bd:34:1f:86:cb:6e:4e:86:d7:0b:a3:f1:
d4:b0:b2:d6:2e:3d:ca:79:2e:1a:7a:8d:5f:6a:ce:0b:3b:84:
e9:7e:b5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:44 2026 by rpki-client