Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/vVF3pTqa2KJdx2p8PlUWcXPESX4.roa
File: vVF3pTqa2KJdx2p8PlUWcXPESX4.roa (raw, json)
Hash identifier: 8smQRNWHO8FZtO5kA7zQSvtufSO4Sm4HtWZBhh9ooug=
Subject key identifier: BD:51:77:A5:3A:9A:D8:A2:5D:C7:6A:7C:3E:55:16:71:73:C4:49:7E
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 019EAC18DF78383D9DAC270FDA45D802CA65
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/vVF3pTqa2KJdx2p8PlUWcXPESX4.roa
Signing time: Tue 09 Jun 2026 11:16:11 +0000
ROA not before: Tue 09 Jun 2026 11:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199422
IP address blocks: 77.95.64.0/23 maxlen: 24
185.92.20.0/24 maxlen: 24
2a03:9180::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ac:18:df:78:38:3d:9d:ac:27:0f:da:45:d8:02:ca:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jun 9 11:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd5177a53a9ad8a25dc76a7c3e55167173c4497e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:6e:a6:fb:38:7d:21:db:b0:6e:dd:92:bf:
a6:97:b0:2e:52:3f:87:7b:86:15:8d:2a:27:f5:33:
d9:6c:97:48:8b:90:ca:07:39:c8:ba:d7:23:a5:48:
01:3f:7b:c4:e5:21:2a:54:eb:d3:71:24:86:61:31:
36:39:d7:dc:b3:29:a0:89:54:66:6e:7d:91:49:af:
6d:e8:23:0b:5d:2d:c7:c0:1d:fa:73:b1:23:7a:53:
a0:11:f2:06:db:21:87:de:4b:6b:b8:60:35:c1:45:
29:96:7e:59:10:3a:b7:d2:b5:d4:bd:33:24:4c:61:
8e:e5:3d:e2:80:cd:bc:23:45:08:83:42:ed:12:d4:
f3:58:2b:98:69:9f:7d:80:76:29:a0:0e:59:3f:ea:
b9:ab:31:37:90:be:dd:c4:00:71:db:11:46:12:e5:
39:14:2a:f8:1e:2c:c0:3e:7e:05:25:68:f7:10:6d:
ce:7f:05:4c:4d:96:c5:de:32:85:d7:30:09:42:4e:
98:65:c6:e0:cb:d1:3d:20:8d:05:a3:ea:43:7d:bd:
5f:9a:d4:f3:17:cd:d4:a4:52:56:4e:cf:20:4d:c1:
d1:84:f8:ae:06:b1:6e:6f:8f:4f:fe:b0:31:70:a8:
62:78:a8:03:0b:9f:92:b4:30:88:84:94:49:eb:58:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:77:A5:3A:9A:D8:A2:5D:C7:6A:7C:3E:55:16:71:73:C4:49:7E
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/vVF3pTqa2KJdx2p8PlUWcXPESX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.64.0/23
185.92.20.0/24
IPv6:
2a03:9180::/32
Signature Algorithm: sha256WithRSAEncryption
44:42:1b:a1:17:02:bc:9a:60:05:d5:4f:24:29:69:bd:b6:be:
e1:09:e6:78:06:57:9d:db:79:29:a3:d6:93:c6:b7:ce:d4:99:
72:fa:47:91:86:c4:17:13:77:65:c7:97:3b:aa:4d:8e:43:ec:
dd:37:40:49:45:4d:16:79:89:e1:d5:cd:35:57:b3:22:58:cb:
5b:a9:b9:6e:35:93:41:f3:86:2b:f1:3e:d5:87:84:6e:7c:17:
1d:ae:d4:19:2f:8c:75:e0:78:71:2f:8f:ef:e4:b5:96:d2:0e:
40:87:85:fc:57:02:89:2e:fa:f9:eb:68:0e:8f:ab:67:22:9a:
3a:30:a5:d9:7a:bd:23:5a:4e:f2:67:b1:70:d6:fe:ca:ce:ae:
76:ca:6d:1a:e5:69:a1:d1:09:4c:ef:c5:c0:cc:d0:36:a4:7e:
e4:e7:bc:26:86:1c:ce:3c:33:2e:de:cf:13:e2:0e:b8:64:68:
fd:ab:69:db:5a:c4:ee:42:50:30:c8:0b:5c:70:4b:53:d4:e6:
5f:c7:4a:3f:75:e0:a5:97:ec:39:ac:f5:44:be:f4:d9:ba:f8:
21:b3:a0:80:48:49:31:7f:49:78:0f:3d:a0:49:6c:91:5e:03:
04:30:97:05:91:48:f0:d2:31:a7:4c:8c:1a:80:ea:8d:ac:54:
02:95:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:56:40 2026 by rpki-client