Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/vUUgJIohg5SQneif_sUKDZs-FYo.roa
File: vUUgJIohg5SQneif_sUKDZs-FYo.roa (raw, json)
Hash identifier: O9F4ICaD35Dayn0PCg4Uohxoxcc4CWJ4HvxFQPiHF6g=
Subject key identifier: BD:45:20:24:8A:21:83:94:90:9D:E8:9F:FE:C5:0A:0D:9B:3E:15:8A
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 019C912721D4745CD6BB117E7E296D5C220C
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/vUUgJIohg5SQneif_sUKDZs-FYo.roa
Signing time: Tue 24 Feb 2026 19:36:26 +0000
ROA not before: Tue 24 Feb 2026 19:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210920
IP address blocks: 45.157.2.0/24 maxlen: 24
74.220.24.0/21 maxlen: 22
2a10:c882::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:27:21:d4:74:5c:d6:bb:11:7e:7e:29:6d:5c:22:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Feb 24 19:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd4520248a218394909de89ffec50a0d9b3e158a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d2:8d:8d:30:4d:07:73:df:be:83:61:12:5f:
7e:bd:e6:90:7f:b3:14:32:d5:69:4b:95:11:66:f2:
b0:99:fb:fa:ea:89:69:5b:fb:0f:d9:43:1c:ce:17:
a5:ef:8f:38:2a:ff:d6:6e:09:14:7d:a0:b6:be:75:
1f:38:25:cb:05:18:f6:a9:0c:a1:85:06:db:28:0e:
0e:e2:80:c2:01:c1:1f:9f:55:1d:f0:cc:47:39:9d:
ef:e8:6b:a7:24:02:1b:48:39:51:da:4e:af:a6:57:
ae:e4:7b:43:64:51:6a:7c:65:8e:33:f7:1b:ad:68:
c4:16:7b:b9:da:d8:ab:6a:3c:1a:79:30:e7:af:ef:
f9:ea:9e:0d:9b:8a:e4:73:bd:dc:e5:f2:10:cb:b0:
73:34:33:7c:f0:0f:ad:af:3f:b5:7b:53:b5:a7:7a:
a4:bf:f7:fd:8c:77:f6:53:f9:35:55:8f:6d:5b:34:
40:03:a1:e7:af:4e:65:7d:69:92:3d:0c:bf:a7:0b:
4d:01:f3:86:bf:d3:9a:0b:32:7d:59:55:c0:c0:23:
a6:6e:3c:f4:bc:43:8e:42:0d:c3:31:01:20:02:2f:
72:5b:fc:61:02:8c:33:5b:87:2e:f5:26:9d:f3:d0:
95:ff:18:5a:27:d7:e1:54:3e:d4:bd:7b:dd:17:bf:
ca:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:20:24:8A:21:83:94:90:9D:E8:9F:FE:C5:0A:0D:9B:3E:15:8A
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/vUUgJIohg5SQneif_sUKDZs-FYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.2.0/24
74.220.24.0/21
IPv6:
2a10:c882::/32
Signature Algorithm: sha256WithRSAEncryption
bb:2d:dd:2f:28:a6:9e:2a:1c:3a:90:7d:f8:79:1c:f4:95:87:
3b:79:43:87:6e:7f:5e:63:64:1f:db:9b:d4:f2:1f:6f:71:fe:
f1:2f:21:ff:14:a4:cb:20:97:3f:dc:f1:c9:62:81:37:89:97:
62:32:2d:4c:b3:1a:fd:c3:69:bf:f5:77:af:8d:b6:18:d4:7e:
7b:ff:76:01:73:58:ba:ab:34:89:62:57:41:c7:a8:d9:0a:35:
80:e1:8b:46:c4:f9:90:80:92:5f:e2:29:c2:cc:2d:88:43:05:
f7:91:6d:d3:75:11:c2:97:52:3e:d2:c9:42:bb:b1:7c:4b:b1:
a8:3e:03:da:8e:79:9e:95:36:32:a0:a8:eb:13:2f:1b:2c:6d:
44:9c:d3:48:0c:28:9f:4b:e4:5c:49:c9:a1:56:c1:29:2f:a3:
c8:79:0e:52:f3:0e:f8:1d:a7:f7:a6:f0:3a:02:29:49:0e:d2:
ee:e4:6a:fd:8f:1c:03:d5:5e:b6:54:f6:c2:64:24:e7:b9:65:
71:22:41:5e:64:a9:36:05:ea:03:a2:32:bd:a5:19:fc:22:73:
2d:58:5e:65:f4:d2:04:0a:16:0c:a2:8d:33:bd:4e:7a:ec:b6:
87:f5:0a:c3:f4:91:f9:7c:7f:88:f3:71:1c:a9:d8:e3:19:4c:
fe:6d:3f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:21:31 2026 by rpki-client