Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VTgNMO9yXhWxX2h_xEHsS72cNeQ.roa
File: VTgNMO9yXhWxX2h_xEHsS72cNeQ.roa (raw, json)
Hash identifier: Lch6GqJWHMaF60bMYURSBtpbZrLfbvGwGsioZtIqJXU=
Subject key identifier: 55:38:0D:30:EF:72:5E:15:B1:5F:68:7F:C4:41:EC:4B:BD:9C:35:E4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A09A41F53AC4290C96FA8B0E8B2FEADABA
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VTgNMO9yXhWxX2h_xEHsS72cNeQ.roa
Signing time: Sun 13 Sep 2026 10:13:28 +0000
ROA not before: Sun 13 Sep 2026 10:13:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45090
IP address blocks: 87.83.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:41:f5:3a:c4:29:0c:96:fa:8b:0e:8b:2f:ea:da:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 13 10:13:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55380d30ef725e15b15f687fc441ec4bbd9c35e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:99:07:97:01:51:59:58:54:83:57:21:2f:
b1:f8:a4:29:a8:7e:ae:db:7c:e8:32:f8:e3:4e:cf:
b4:80:07:d1:a3:98:69:49:28:69:41:f2:49:43:59:
e5:3b:37:f1:53:22:65:1c:34:4e:2b:13:28:66:0d:
f0:28:57:35:10:a5:f8:d0:03:2b:1c:b9:e2:96:0c:
8b:aa:70:32:38:eb:66:b0:a7:b8:35:9e:2d:70:d3:
01:f1:7b:ee:56:39:92:76:4e:90:fc:c3:2a:e5:41:
37:73:e2:97:07:18:5e:d7:ba:56:ef:cb:c5:0c:0b:
68:80:f5:9f:e9:ad:55:44:57:7c:99:aa:ed:6d:0c:
44:72:2a:33:6b:46:ac:61:96:93:b5:fd:98:80:f3:
72:3b:5f:be:de:bb:9d:1d:a8:dc:6c:7d:c1:56:5c:
58:7f:e2:e7:ca:bf:2c:aa:9e:a4:f6:ac:63:d3:55:
38:c9:c1:de:91:c0:11:30:b9:0f:84:4b:0f:a0:57:
69:0b:de:86:15:0f:57:61:e6:6d:88:60:9c:47:ca:
47:77:f1:87:8b:5c:a6:91:90:8b:6d:03:b1:31:0b:
fc:34:89:b9:44:86:fd:20:ce:b2:d7:58:36:bd:a8:
1b:10:ca:fb:c9:40:53:a5:28:58:df:d6:dd:4a:13:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:0D:30:EF:72:5E:15:B1:5F:68:7F:C4:41:EC:4B:BD:9C:35:E4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VTgNMO9yXhWxX2h_xEHsS72cNeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.83.216.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:14:20:af:7e:15:40:20:b6:3b:5f:6a:a8:dd:b3:7f:53:c1:
06:e2:56:3d:16:7b:23:7f:55:34:e6:b5:97:a8:07:17:4d:e1:
0a:13:63:74:ec:41:8e:77:88:eb:e4:2d:67:e3:1e:64:ae:78:
86:0e:97:05:16:c4:e2:8f:1c:ea:61:d1:9a:73:a0:0a:63:5d:
75:ec:a2:65:dd:f7:98:22:6b:86:94:31:76:89:81:a4:66:8d:
b1:06:2f:53:b9:89:05:7f:c4:4d:f3:da:ae:52:9a:c3:a0:8b:
90:a3:75:4c:5c:b9:d2:3c:26:7a:57:20:9e:19:e8:db:11:bd:
77:9e:09:74:78:5c:0b:89:20:98:d1:1b:f5:01:eb:79:ee:96:
e7:ac:33:9a:53:75:7c:d4:d3:44:2d:75:72:e9:82:c9:ba:ff:
1f:f3:a1:22:d0:83:88:cf:ec:5d:77:1f:d7:1a:ed:c9:34:74:
a2:a5:56:f9:7d:f5:84:e3:08:35:1c:4f:76:37:26:4e:22:1c:
11:78:4d:6f:bd:ad:8d:81:d4:16:c9:21:20:9b:33:76:92:8b:
bc:30:ca:20:f3:16:8f:db:ff:4d:0e:c9:f6:50:bd:08:09:bd:
54:be:41:b5:09:9f:ed:55:0b:ac:33:51:fe:37:10:2c:d4:6b:
48:9f:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:55 2026 by rpki-client