Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VaIXS3dcv7adN7bl6avoZay_G2Q.roa
File: VaIXS3dcv7adN7bl6avoZay_G2Q.roa (raw, json)
Hash identifier: BNu86kIWV8NUjvBeddynykf9V5ssJx5IRVKNJ/floQ0=
Subject key identifier: 55:A2:17:4B:77:5C:BF:B6:9D:37:B6:E5:E9:AB:E8:65:AC:BF:1B:64
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019C5769BB8D610C5AD2EBF6960FBF748085
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VaIXS3dcv7adN7bl6avoZay_G2Q.roa
Signing time: Fri 13 Feb 2026 14:31:12 +0000
ROA not before: Fri 13 Feb 2026 14:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213871
IP address blocks: 185.235.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:69:bb:8d:61:0c:5a:d2:eb:f6:96:0f:bf:74:80:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Feb 13 14:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55a2174b775cbfb69d37b6e5e9abe865acbf1b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:e4:9b:05:69:72:c0:da:ff:cb:fd:3a:ae:
17:45:7d:31:e7:08:76:dc:8e:61:58:8d:b0:d2:8c:
94:30:1d:f4:94:4e:c1:f5:95:95:04:c2:89:95:33:
45:f8:8d:97:c0:45:fc:66:1c:8a:c8:81:4b:e2:cc:
a3:dc:0d:bf:f2:5f:b4:ff:c6:0d:c8:df:61:ec:42:
f4:0c:22:d8:d0:45:1b:55:26:44:f8:15:62:29:90:
fb:6b:f6:1a:5a:41:df:6d:9f:de:df:29:e0:25:fe:
79:7f:3f:ea:ab:89:ad:f5:27:83:8f:93:e9:43:01:
a2:4b:99:c5:fb:3e:11:2a:90:f7:d0:35:0a:25:ef:
c0:1f:11:b5:9f:11:36:12:35:bb:63:9b:b0:87:a7:
4c:6f:95:9c:41:f1:fc:4b:fd:b8:e3:44:e7:f5:db:
2d:b5:b2:f3:3f:bf:30:aa:37:d5:0f:f7:14:f8:78:
61:b7:3a:77:bc:c6:48:90:e1:48:dc:bc:44:0c:7a:
0e:80:75:13:be:e4:36:f8:b8:da:b3:c1:98:e8:ca:
92:53:f9:0b:71:2c:44:a6:3c:13:fb:76:23:87:e5:
28:6a:c9:5c:a0:51:65:69:c5:78:a3:45:94:e0:c7:
c6:52:cb:24:e0:3d:a5:88:62:d6:23:31:92:98:08:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A2:17:4B:77:5C:BF:B6:9D:37:B6:E5:E9:AB:E8:65:AC:BF:1B:64
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/VaIXS3dcv7adN7bl6avoZay_G2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c8:1f:58:5a:77:0c:f3:48:74:cb:5e:0f:5c:5f:4e:c7:bc:
cb:16:21:e6:4d:30:f7:82:e5:55:59:1b:a8:11:7b:f0:c4:4b:
49:70:c6:2b:18:49:52:01:34:36:1b:94:8d:5a:48:7b:04:1a:
c9:f9:37:7e:8a:c1:fb:71:e5:55:77:40:5d:2c:b0:1f:4b:fa:
f2:e0:6d:97:16:10:ad:a9:9c:c5:99:1e:cf:8c:ef:32:cd:84:
de:69:a6:8d:1e:b5:40:da:98:f9:20:50:2f:8d:1c:e4:f4:e6:
58:32:cd:39:d3:79:ba:85:c4:90:9a:a1:31:d2:9a:5c:d4:c4:
9e:5f:50:a9:2d:06:50:57:44:c3:e7:b6:49:de:67:2b:99:b8:
54:c1:1a:91:f6:0c:e3:14:80:6a:35:85:96:e1:d5:b1:ab:3d:
cc:b1:27:1b:5b:6b:0a:0f:45:2d:35:c6:e4:2f:05:45:47:d0:
28:b1:86:7b:ab:ae:37:73:a3:28:3f:de:05:3f:3a:57:af:39:
d0:f7:17:75:39:15:64:b2:04:63:9b:ec:86:54:33:ce:a4:40:
c6:79:1a:d1:e6:0e:e6:f5:d0:79:9c:86:f6:b2:a3:98:b2:8e:
40:a7:b4:f1:6e:95:83:fe:e5:e3:14:35:d9:22:bc:23:ad:51:
e2:74:a7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:47:06 2026 by rpki-client