Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/VLfBjAP_TBr7n12k6Mnw46vKWVw.roa
File: VLfBjAP_TBr7n12k6Mnw46vKWVw.roa (raw, json)
Hash identifier: 5sCaLtr3UO2MAoasULrj5neiPX3Qw/ZoG4kANf2b0Nk=
Subject key identifier: 54:B7:C1:8C:03:FF:4C:1A:FB:9F:5D:A4:E8:C9:F0:E3:AB:CA:59:5C
Certificate issuer: /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial: 01A06D1C84B4D0BB8033C0C3B666A6160617
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/VLfBjAP_TBr7n12k6Mnw46vKWVw.roa
Signing time: Fri 04 Sep 2026 15:49:40 +0000
ROA not before: Fri 04 Sep 2026 15:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 81.17.160.0/21 maxlen: 24
81.17.168.0/21 maxlen: 24
109.238.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:1c:84:b4:d0:bb:80:33:c0:c3:b6:66:a6:16:06:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
Validity
Not Before: Sep 4 15:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54b7c18c03ff4c1afb9f5da4e8c9f0e3abca595c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:d4:1f:0c:c8:ba:b4:c4:e4:cb:f9:d9:69:
e3:34:39:a1:76:b0:53:49:4f:13:bb:b7:4b:66:4f:
6f:e6:10:33:1e:45:18:67:5e:61:e0:03:5d:96:2e:
05:8b:ff:33:cf:55:71:39:e8:b3:a7:14:1b:01:c8:
08:39:aa:c1:93:7a:63:e4:d7:62:0f:d5:02:6e:fd:
ac:99:08:d3:bf:56:37:24:09:54:92:a0:e0:b0:8e:
18:47:b2:62:03:21:da:19:85:cc:2a:c9:6c:65:9b:
e0:a4:8f:f8:de:e9:4c:3c:fd:42:93:ec:a2:90:e3:
aa:7e:73:1b:fb:f2:17:70:dc:0c:da:de:f9:be:ce:
da:39:fa:ee:f8:ff:bf:0e:19:1a:e6:4a:a5:47:d1:
2b:99:60:db:3d:a2:3d:0f:e7:99:2e:b7:8e:67:0e:
0f:d6:31:f7:e2:b8:5d:0f:e0:51:3b:f2:51:b7:f5:
94:34:23:60:30:99:0b:42:0f:7c:d4:13:3a:fd:9c:
15:e7:5b:56:91:b6:7d:d7:79:9c:0f:87:20:57:f3:
87:af:1e:7c:1b:e5:6f:ac:d6:ae:dc:90:2c:a7:e2:
56:46:70:20:1b:73:7f:1d:3a:14:bc:48:b8:2d:4e:
85:20:24:48:0d:ce:e2:4b:9c:ed:89:d0:15:96:79:
1f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:B7:C1:8C:03:FF:4C:1A:FB:9F:5D:A4:E8:C9:F0:E3:AB:CA:59:5C
X509v3 Authority Key Identifier:
keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/VLfBjAP_TBr7n12k6Mnw46vKWVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.17.160.0/20
109.238.160.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:c0:2d:be:2c:d9:76:d4:8c:5b:b6:ae:b9:fc:dc:ad:6b:e4:
62:9f:66:4f:35:46:fc:74:40:ba:ee:92:c2:8d:1a:28:8e:8d:
d3:8b:83:80:51:3b:8c:59:8c:c9:8e:46:23:1e:d5:4f:74:b2:
54:18:8b:40:57:bc:83:fd:f4:59:b7:d4:eb:cd:df:93:13:5c:
0e:4d:50:4b:a3:a6:4a:6d:37:4a:c6:fa:fb:dd:42:48:89:cf:
b0:32:6c:d7:ca:3e:2e:af:f8:f1:31:6e:eb:b9:66:5b:c7:bf:
8f:f8:be:02:7b:19:34:21:56:13:1b:bd:6a:65:15:4c:aa:95:
ba:1d:95:cd:77:c6:55:18:79:82:bf:22:3c:ad:a8:84:80:d1:
5f:9a:68:69:e1:54:4e:92:79:3f:dd:f6:6f:88:78:e6:86:aa:
32:c0:bb:67:0c:d1:c7:5f:75:95:11:82:47:bb:83:28:46:ff:
ae:25:d0:cb:ba:45:2a:d4:cc:c3:fa:38:0e:a4:44:be:9f:e6:
25:d7:1e:aa:9a:7c:d0:ba:ec:33:64:a8:8e:a2:80:90:5c:83:
df:72:85:5c:b9:48:24:4e:a3:a5:99:a4:17:73:93:20:3a:6c:
2f:e2:dd:ea:0a:2b:79:ab:80:22:80:c8:1f:31:21:39:e7:04:
97:1a:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:28 2026 by rpki-client