Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VG0GC4KUUqR5qA7mFqAoDInLsoA.roa
File: VG0GC4KUUqR5qA7mFqAoDInLsoA.roa (raw, json)
Hash identifier: e5wGoxTz3ycUqudZWMVlmN3ImLoVB6OSWLzKFcWzlFs=
Subject key identifier: 54:6D:06:0B:82:94:52:A4:79:A8:0E:E6:16:A0:28:0C:89:CB:B2:80
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019D678DE6FC31B1F47ECC6E8C061EC55FCD
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VG0GC4KUUqR5qA7mFqAoDInLsoA.roa
Signing time: Tue 07 Apr 2026 10:47:26 +0000
ROA not before: Tue 07 Apr 2026 10:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199685
IP address blocks: 159.255.34.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:8d:e6:fc:31:b1:f4:7e:cc:6e:8c:06:1e:c5:5f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Apr 7 10:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546d060b829452a479a80ee616a0280c89cbb280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:04:f7:d5:d8:24:51:e5:34:c1:b5:a8:df:5d:
18:c0:00:3e:f5:03:76:43:13:9d:43:3b:ad:3b:a6:
00:ef:0d:6d:7c:81:38:85:27:e4:a5:95:f0:13:25:
41:f6:b0:df:f1:98:e8:cb:2d:7a:bb:5f:6f:de:a8:
ec:21:a8:35:49:e7:00:3c:a0:4e:4c:21:5b:12:37:
38:45:3e:65:03:56:28:98:7d:5f:bc:bb:b7:07:de:
ce:4b:db:9e:a6:88:28:b4:5c:e2:38:3e:fb:8d:c6:
c6:c6:23:c7:7c:9e:09:24:0c:b1:bf:d9:e8:d7:fc:
e6:3e:be:05:e6:0d:db:0c:a3:ca:b1:82:e0:49:8b:
ca:5f:79:54:45:31:d8:5f:c5:9a:7d:0a:3a:31:41:
3d:a7:32:5c:77:13:77:6f:cd:b5:f4:e3:ab:4b:76:
c7:53:30:5d:27:77:99:2a:69:f4:e7:1c:5c:df:08:
59:18:70:55:9d:c4:ec:98:28:78:21:f9:a4:ab:03:
f8:9f:10:6a:a3:28:94:94:d9:ba:0f:7a:47:9c:1b:
22:86:ce:4e:11:88:e2:f4:d6:83:2e:17:c2:05:d7:
b6:e1:28:bd:a6:0c:4d:30:72:94:6d:a8:49:d2:b1:
db:49:a8:74:40:37:4f:f3:6c:ed:30:25:33:44:29:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6D:06:0B:82:94:52:A4:79:A8:0E:E6:16:A0:28:0C:89:CB:B2:80
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VG0GC4KUUqR5qA7mFqAoDInLsoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.34.0/23
Signature Algorithm: sha256WithRSAEncryption
d3:ae:16:53:9b:32:e4:de:7d:b6:a1:09:40:c7:f5:b5:fd:01:
38:24:33:8f:06:d0:3e:d7:f1:1a:60:33:94:66:12:15:9a:2c:
89:41:97:3c:23:9e:19:0d:1f:2f:ad:2b:8d:60:c2:5c:cd:03:
ff:a4:3b:0e:32:ef:65:d2:06:29:c6:05:14:5b:df:9d:28:2f:
5b:03:a5:b9:96:a9:1e:12:ff:da:ee:73:5a:1e:81:79:65:59:
4e:0e:69:a3:a7:3b:c5:02:87:04:43:56:4a:fc:a2:da:78:6f:
b3:18:ec:ca:3e:10:62:48:18:5c:51:95:80:1f:b4:83:5f:70:
a6:c6:3a:02:f2:a4:48:29:ae:ad:84:6f:25:12:4a:f0:f8:9b:
c7:33:06:11:37:94:47:c3:b4:72:b2:67:83:c3:bd:38:23:fc:
86:cb:85:a9:0f:43:7f:ef:b8:c1:bb:af:0d:3a:fb:83:e1:57:
e5:5e:de:3b:ee:db:cb:7b:f4:88:e5:1a:af:dc:f2:86:3f:d4:
d9:49:4e:0c:ed:f2:95:f9:c6:e2:37:26:e6:14:f7:f0:0a:fb:
20:a0:f7:62:5b:71:d5:69:b6:c2:58:38:10:44:63:5b:79:69:
51:ea:51:82:80:4e:3d:b6:70:69:e6:05:d5:71:26:b5:3b:3f:
04:00:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:53 2026 by rpki-client