Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VO4hxX-ZShEI77bO19F5wQE1Fuk.roa
File: VO4hxX-ZShEI77bO19F5wQE1Fuk.roa (raw, json)
Hash identifier: yx7wsebV6OrIaO2hhXy0jP6P+RoaCtZd6OcjFQa4/lw=
Subject key identifier: 54:EE:21:C5:7F:99:4A:11:08:EF:B6:CE:D7:D1:79:C1:01:35:16:E9
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E82EF66B4AE22CE8967CBB6EAB8955C37
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VO4hxX-ZShEI77bO19F5wQE1Fuk.roa
Signing time: Mon 01 Jun 2026 11:26:27 +0000
ROA not before: Mon 01 Jun 2026 11:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 77.107.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:82:ef:66:b4:ae:22:ce:89:67:cb:b6:ea:b8:95:5c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 1 11:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54ee21c57f994a1108efb6ced7d179c1013516e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:5d:96:18:9f:9a:ec:3e:93:37:d1:30:09:
2d:3c:94:33:25:50:f6:4a:6d:6d:a1:af:7f:df:6a:
f9:28:d0:72:4c:12:24:a8:5f:b9:36:ce:0a:8f:02:
06:e3:df:06:1d:cc:3c:56:9b:03:8f:b1:5b:af:41:
f5:fb:92:e3:5b:61:9d:8d:61:e6:f0:f0:f0:48:ca:
b0:53:ab:8f:97:2b:1a:40:1b:fa:29:15:f2:25:5d:
ca:58:e3:a6:f6:d7:a0:96:05:68:7b:86:23:04:ff:
3a:c0:65:42:ae:2c:4b:9d:d1:38:c6:2e:8e:1e:5e:
34:04:49:90:d8:6e:41:8a:21:a9:5e:5c:c9:94:16:
b7:cd:cc:57:00:2e:72:76:7a:96:10:c0:5d:12:b0:
18:73:6e:c7:03:6f:b7:73:35:21:47:e7:d0:44:fd:
2e:fd:40:86:ef:6f:ac:42:0c:7d:48:05:07:23:00:
22:55:71:43:32:f3:f3:11:ae:b0:5a:58:8b:8d:30:
9f:e1:4b:fd:80:22:49:ca:21:27:0b:a7:57:ea:72:
2a:1c:49:a4:09:2f:50:58:e7:f4:eb:fa:49:fd:11:
ec:ce:18:46:6e:cc:75:24:d8:c5:33:c3:08:ab:c4:
96:a0:7d:94:6e:5a:3f:c0:d1:5a:76:fa:ed:7c:dd:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:EE:21:C5:7F:99:4A:11:08:EF:B6:CE:D7:D1:79:C1:01:35:16:E9
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VO4hxX-ZShEI77bO19F5wQE1Fuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.107.82.0/24
Signature Algorithm: sha256WithRSAEncryption
42:cf:e1:b3:0c:89:4e:71:9c:94:a5:fa:dc:65:3e:cf:a2:ca:
39:1f:97:b5:b3:f5:14:55:a8:86:95:36:15:31:22:b6:df:a9:
0d:5d:c0:ba:a7:96:08:b7:a8:61:9b:e5:d7:7e:4c:6c:04:61:
12:34:7e:6d:d7:55:88:72:4d:c7:df:6d:84:f8:a5:d9:1f:e1:
83:65:7b:ae:d1:7e:f8:91:84:32:83:bb:1f:cb:41:a4:b3:94:
45:f4:66:30:fc:2b:74:2c:b7:08:a3:81:b0:3f:de:d3:c4:d2:
9c:96:10:0d:e1:eb:20:c6:88:ee:09:ff:e4:3d:77:b9:81:64:
85:bd:d7:1e:32:86:9a:75:03:1c:28:de:c3:06:a1:79:c7:26:
7c:b9:db:6a:c5:ae:9d:ab:07:87:72:75:76:c2:7b:a6:78:eb:
72:86:5a:37:7f:6a:cd:b4:de:cb:e4:75:02:3c:8f:f6:d6:24:
62:42:74:fa:75:a4:24:71:23:0e:29:bb:fd:06:1f:06:29:64:
ac:b8:82:15:f3:fd:a5:58:c8:16:13:b4:1d:fb:60:c7:94:44:
5f:ab:7a:e5:df:a7:aa:60:a8:20:7d:25:38:39:6f:a9:da:a4:
84:a3:b5:14:5a:1e:fd:64:d0:87:d5:c2:ed:b5:61:f1:73:81:
fb:e2:51:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:17 2026 by rpki-client