Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa
File: VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa (raw, json)
Hash identifier: 2cduIqBhGdf+BQ9zIXwABKUp5BhlSqCikGKIR7rcdp8=
Subject key identifier: 55:5C:DD:4F:C8:BC:21:CD:26:24:3D:0C:72:7E:D0:4B:34:D5:AA:A8
Certificate issuer: /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial: 019EA84E6548E358B18D423860991ABEF218
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa
Signing time: Mon 08 Jun 2026 17:36:10 +0000
ROA not before: Mon 08 Jun 2026 17:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46606
IP address blocks: 5.100.152.0/21 maxlen: 24
185.195.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:4e:65:48:e3:58:b1:8d:42:38:60:99:1a:be:f2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Validity
Not Before: Jun 8 17:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=555cdd4fc8bc21cd26243d0c727ed04b34d5aaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:58:d4:c5:21:35:cb:0c:35:b4:05:37:c7:
bc:9c:58:ea:87:2a:79:51:d1:8a:1a:f4:4d:2d:6c:
e6:71:5d:d4:d5:30:13:5e:55:2d:f0:d1:be:66:48:
dc:2a:be:b0:80:c0:93:b9:c8:3b:6f:88:d5:15:24:
6e:77:90:eb:ad:9b:d0:a3:27:b5:1d:04:f2:4d:61:
34:6d:6e:ec:2c:06:ab:37:6d:70:05:8f:bd:d2:8a:
aa:65:a5:d2:d4:75:30:63:3e:e7:6d:f3:aa:c6:46:
42:38:f3:38:68:9a:e7:f4:1b:47:f9:d8:7f:3d:a4:
7d:4f:52:fb:ef:e4:18:d2:ef:39:9f:f0:2b:4a:cc:
41:82:c3:ba:e5:a9:c6:58:c1:a1:46:d0:9f:f8:ad:
41:91:12:a6:ff:91:c8:36:e8:02:79:fb:c4:36:e5:
2f:31:37:c3:87:fb:61:73:42:be:28:08:a8:a4:84:
1c:1f:6f:c8:52:81:92:11:d4:8d:1d:f7:2e:8a:77:
f7:40:93:fc:84:bf:eb:d0:18:98:ac:76:13:f3:8b:
68:7b:3f:85:5c:f1:e3:0c:aa:03:dc:64:a5:b7:44:
c7:5e:24:b9:b5:6b:1a:1a:0b:c8:f4:e2:31:2b:6f:
e7:50:ad:0b:08:ed:07:99:aa:2e:a2:89:5f:af:12:
1e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:DD:4F:C8:BC:21:CD:26:24:3D:0C:72:7E:D0:4B:34:D5:AA:A8
X509v3 Authority Key Identifier:
keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/VVzdT8i8Ic0mJD0Mcn7QSzTVqqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.152.0/21
185.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ae:f7:34:a8:a8:c6:22:8a:f3:30:f1:3b:ff:c9:9d:87:47:
a3:84:a0:ec:82:d4:d2:52:70:c5:d7:54:cb:f2:ab:a1:8a:27:
1b:24:d5:65:b8:f3:21:86:da:6c:9b:a6:83:a6:6d:4d:11:2b:
32:2d:32:7d:b0:45:9c:66:79:d3:74:2d:d9:5a:c5:7b:21:03:
ea:f6:b0:b6:12:cf:df:75:7d:62:84:3c:e4:05:9c:0b:3b:da:
37:18:a8:f0:6e:84:41:66:73:2f:9c:a3:eb:45:65:03:4a:f2:
6a:10:98:c0:56:f2:a9:d2:d7:3a:4b:4a:d1:f6:15:6b:45:5b:
2c:91:4a:f4:8e:65:89:14:62:bd:c3:03:84:88:a6:6f:d9:2c:
76:40:75:0d:94:d1:67:e7:48:30:23:e3:47:28:a6:ee:4f:7f:
10:24:59:5f:a3:bb:a9:ab:01:78:e4:81:be:08:dd:09:5c:60:
5f:0b:68:12:9f:c9:7c:4c:f2:8b:93:e1:f5:79:a5:47:1b:60:
84:77:d1:fd:67:36:df:a3:dd:e2:ce:c6:67:a0:2a:7d:fd:65:
a7:6d:ee:09:7e:54:ff:f6:6d:8a:7e:70:40:6f:11:4a:0a:74:
e9:91:f2:a0:ea:95:5c:44:ee:7b:31:69:ac:ad:1d:a4:6e:1a:
9c:c9:98:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:34 2026 by rpki-client