Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VfXzVnKaIUdZZtLZJxskfqB6yiU.roa
File: VfXzVnKaIUdZZtLZJxskfqB6yiU.roa (raw, json)
Hash identifier: B1SyPUuhE5U0jLPzZ7Qaz1E6O//d4VB7fzUFr47S4bk=
Subject key identifier: 55:F5:F3:56:72:9A:21:47:59:66:D2:D9:27:1B:24:7E:A0:7A:CA:25
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01A07748821610E943A678BD6262AD0994DD
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VfXzVnKaIUdZZtLZJxskfqB6yiU.roa
Signing time: Sun 06 Sep 2026 15:13:55 +0000
ROA not before: Sun 06 Sep 2026 15:13:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
82.115.0.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
103.25.85.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
178.173.232.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
195.96.135.0/24 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:48:82:16:10:e9:43:a6:78:bd:62:62:ad:09:94:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 6 15:13:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55f5f356729a21475966d2d9271b247ea07aca25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:df:f0:72:7e:c6:43:d1:7e:d1:f4:a7:9c:
f8:49:df:3e:3a:66:f8:24:4f:1b:47:7b:42:d0:f5:
b9:fc:30:0a:c0:9d:6e:bb:bd:2f:b7:2f:8c:83:0f:
c1:3b:b1:53:97:4f:7c:86:8f:c1:18:41:8b:c8:aa:
4f:5b:74:49:1b:fb:f0:83:5e:33:db:40:20:9f:ff:
1b:3d:6e:d3:97:58:1d:bd:b9:d3:3f:11:03:f1:4d:
e4:30:f2:a0:d2:f8:34:e0:66:9b:79:b4:34:13:a6:
7b:4c:4a:d8:3a:81:b2:38:e8:17:1b:d1:34:d8:e3:
0b:2a:db:67:45:c5:34:a3:1f:81:e7:20:c4:eb:03:
e1:50:ca:70:38:b5:91:94:19:5e:29:8d:ec:4b:f3:
1f:f1:97:60:49:18:55:7a:8e:11:c1:76:be:28:e1:
46:05:72:4a:d8:9e:b9:a1:5c:1b:29:4b:8f:9e:8b:
b2:2e:06:27:af:d4:df:1a:bf:ff:f3:41:d4:dd:e4:
29:c5:27:f2:57:41:42:e5:3b:99:47:de:62:70:60:
3c:fa:f0:2b:a4:0a:9a:8f:bd:d0:53:c3:86:68:3c:
8a:9c:37:86:f0:d2:2a:c3:d3:3e:40:d2:aa:e3:7b:
6c:86:b4:47:e3:23:0e:8b:7d:91:41:13:fe:9e:80:
74:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F5:F3:56:72:9A:21:47:59:66:D2:D9:27:1B:24:7E:A0:7A:CA:25
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/VfXzVnKaIUdZZtLZJxskfqB6yiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
82.115.0.0/24
82.115.9.0/24
89.251.10.0/24
103.25.85.0/24
159.255.32.0/21
178.173.232.0/24
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
195.96.135.0/24
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:f5:56:38:51:15:f0:67:40:69:16:64:ae:a2:2e:ba:18:7a:
85:27:0a:5d:94:81:8d:dd:5b:fe:4f:1e:03:b4:b1:e5:9e:74:
53:6b:e1:9c:cd:77:3d:35:7d:4c:aa:b7:ac:83:13:af:86:c5:
ec:7b:54:7c:cd:bf:e2:33:a3:6c:c4:c4:0a:18:f9:46:0f:66:
3c:e0:b9:9b:f3:75:55:0e:65:64:11:e9:09:4a:7a:81:51:e6:
4a:b4:c7:20:27:b7:73:a0:1d:0d:22:c4:f2:fb:7a:66:4a:c9:
52:57:9f:36:04:a0:fa:19:38:4d:e5:b0:d9:ff:70:8d:7d:80:
aa:09:62:ca:08:12:b3:ba:0a:86:45:31:67:ff:d0:56:fa:54:
43:f1:17:73:be:f7:bd:f2:46:d3:cc:37:b1:53:16:10:96:8c:
d5:41:82:d5:79:7b:09:14:65:91:08:f5:ca:70:91:0a:4f:4e:
61:ce:e4:3b:c7:b1:2f:62:12:12:79:60:f0:11:78:fb:31:7f:
47:9e:9b:3f:2d:15:4d:15:4c:22:05:10:f2:eb:cb:e9:4a:b0:
3c:42:1a:eb:60:1c:37:1e:9a:aa:ae:43:15:1c:1e:f0:08:59:
b6:69:50:d3:db:71:e9:42:fd:7e:70:59:1f:51:71:8d:62:2d:
f2:d6:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:09 2026 by rpki-client