Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/vTbTYAIYT2eZUJb7TkwsnY2su-s.roa
File: vTbTYAIYT2eZUJb7TkwsnY2su-s.roa (raw, json)
Hash identifier: q1fiFZBvw+bZgutEKtCfyXhHllS8RfutEfOzQXScNMg=
Subject key identifier: BD:36:D3:60:02:18:4F:67:99:50:96:FB:4E:4C:2C:9D:8D:AC:BB:EB
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 019E6DB211A87452393E9A149F995CB97181
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/vTbTYAIYT2eZUJb7TkwsnY2su-s.roa
Signing time: Thu 28 May 2026 08:27:26 +0000
ROA not before: Thu 28 May 2026 08:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216016
IP address blocks: 217.23.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6d:b2:11:a8:74:52:39:3e:9a:14:9f:99:5c:b9:71:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: May 28 08:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd36d36002184f67995096fb4e4c2c9d8dacbbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5d:1b:4a:ed:5d:eb:8a:88:ab:57:d1:0e:1a:
50:fa:80:6b:c4:9a:f8:44:e6:31:69:f0:b5:1e:44:
27:d1:62:a6:d7:bf:f3:1d:b0:f2:50:59:4a:4e:19:
9e:dd:0c:68:d3:b7:db:37:10:d9:06:ef:01:ad:1f:
8d:1c:d4:40:30:45:fc:5b:4c:14:3e:a8:cb:24:61:
8b:51:92:0d:e2:87:ae:f4:62:c7:ef:9c:20:62:19:
84:e5:4d:f5:09:0a:08:7d:8d:5b:88:c4:7f:ed:7c:
36:58:94:97:8b:b2:7f:1f:31:31:9f:4b:5d:c7:82:
ea:7e:b3:c0:cc:f7:b9:ae:23:68:f4:1d:05:ef:82:
e8:77:34:46:99:84:68:98:94:fa:2c:1d:d7:b8:0e:
08:45:07:a4:b5:5d:09:a9:d9:82:59:62:1f:ab:db:
6e:7c:b2:0a:4e:fa:a7:d6:ff:1b:81:08:32:38:a3:
61:98:87:e6:31:29:55:ec:8e:3f:25:68:10:e9:a1:
ef:6d:e8:f2:79:b5:5a:ff:65:c6:b8:fd:f2:98:8f:
ba:8c:49:76:d0:5d:e2:4b:8b:2e:f5:2f:22:cb:c5:
8b:78:d4:d1:23:10:64:71:9f:98:bb:d4:66:59:23:
37:6f:c0:4c:b2:31:f8:6c:b4:47:80:85:8f:fa:cc:
ea:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:D3:60:02:18:4F:67:99:50:96:FB:4E:4C:2C:9D:8D:AC:BB:EB
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/vTbTYAIYT2eZUJb7TkwsnY2su-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.23.208.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:b6:7c:d3:1c:c9:3e:71:f9:01:34:39:68:17:74:81:1b:9b:
92:17:4e:42:b2:ee:f2:e5:64:4a:31:7d:55:0d:98:d4:4b:51:
73:45:50:a7:da:f4:4a:86:ff:cc:4d:3e:4b:82:9c:70:c3:30:
7b:bf:1f:9a:cb:0d:d1:c9:5f:17:d4:d6:57:2c:c9:98:ce:36:
dc:63:f4:e6:eb:28:3f:80:c3:95:18:77:ee:27:54:8a:2f:b0:
fc:08:99:87:b2:4e:db:ad:d5:5c:45:e2:36:8c:f3:75:3d:8b:
bf:81:5c:7b:74:b4:e7:eb:ce:3c:6a:93:bb:2b:a0:59:c0:8d:
92:51:9b:7e:ac:28:72:bb:db:26:d3:a7:da:11:f8:d8:bb:5e:
96:0f:d9:90:e8:23:68:de:4d:9a:c1:d3:c2:38:87:75:d2:c9:
8d:00:13:0d:7c:09:ac:fd:fd:47:6c:9a:b3:d3:5e:2e:cf:4e:
ee:9b:72:fc:61:a1:af:3a:2b:e4:41:d2:44:98:db:13:4f:dc:
4b:eb:e7:da:64:84:32:89:0d:57:f8:20:3b:77:e3:51:c5:61:
ff:11:a7:a9:54:0b:57:45:01:bf:b4:84:50:e6:e5:dd:95:c6:
3b:2b:d7:36:d1:bb:ad:15:c2:f9:f0:20:28:8e:7b:2f:0b:33:
ec:11:25:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:49:05 2026 by rpki-client