Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa
File: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (raw, json)
Hash identifier: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=
Subject key identifier: 17:6C:44:6D:E2:00:91:C0:0F:CA:1D:1E:DE:5B:63:FA:B8:FD:78:EC
Certificate issuer: /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial: 019EB036FB14FB365706C88ACA20CDE9D03D
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa
Signing time: Wed 10 Jun 2026 06:27:33 +0000
ROA not before: Wed 10 Jun 2026 06:27:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44112
IP address blocks: 31.177.82.0/23 maxlen: 24
77.222.32.0/24 maxlen: 24
77.222.35.0/24 maxlen: 24
77.222.36.0/22 maxlen: 24
77.222.40.0/21 maxlen: 24
77.222.48.0/20 maxlen: 24
77.222.48.0/23 maxlen: 24
80.93.52.0/24 maxlen: 24
80.93.60.0/22 maxlen: 24
168.222.140.0/23 maxlen: 23
168.222.202.0/23 maxlen: 23
2a02:408:7722::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:36:fb:14:fb:36:57:06:c8:8a:ca:20:cd:e9:d0:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Validity
Not Before: Jun 10 06:27:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=176c446de20091c00fca1d1ede5b63fab8fd78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2f:f7:d8:9a:a1:0c:96:55:a5:5a:a0:bf:f5:
a0:6a:07:cc:4c:61:93:f6:e6:26:23:6e:6f:20:03:
8b:93:72:df:8a:55:85:f2:5a:e5:7d:14:d5:bb:72:
bb:46:2a:bc:60:6d:59:77:54:22:14:d4:52:c5:68:
0e:e6:fd:7d:12:77:22:11:b7:a0:69:f5:0b:af:89:
be:45:7b:1e:cb:80:ee:f6:26:53:59:4b:87:bd:b6:
22:e7:8b:55:09:9b:68:92:24:08:fa:26:16:5b:d8:
23:97:d3:bd:f3:3e:c0:ef:1a:3a:df:41:91:9a:2c:
60:ff:34:13:fc:36:ce:cc:eb:68:dd:d7:10:e8:74:
25:ca:0e:bb:a4:57:2f:90:a5:c8:0e:b2:fc:0d:bf:
7c:2c:ad:c2:e1:a8:3b:e3:d3:fb:9c:04:13:73:0b:
13:12:fe:95:d7:66:30:03:cf:66:9d:8a:24:50:97:
8c:e3:4e:9a:4d:99:4c:23:ce:f8:b6:b3:24:a9:fe:
f5:c4:d7:32:4f:80:18:53:b0:f3:d7:53:2c:c5:1e:
d1:cb:4e:8c:30:0c:e5:a4:71:23:df:45:41:ee:24:
4d:4a:a8:3b:ac:dc:e6:dc:8f:12:ba:01:64:82:98:
a4:e4:92:18:2c:24:44:7e:b2:47:07:9a:77:11:e6:
75:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:44:6D:E2:00:91:C0:0F:CA:1D:1E:DE:5B:63:FA:B8:FD:78:EC
X509v3 Authority Key Identifier:
keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.82.0/23
77.222.32.0/24
77.222.35.0-77.222.63.255
80.93.52.0/24
80.93.60.0/22
168.222.140.0/23
168.222.202.0/23
IPv6:
2a02:408:7722::/48
Signature Algorithm: sha256WithRSAEncryption
7e:61:90:e3:02:98:4a:30:bf:fc:28:c8:d9:95:39:f9:0e:10:
e2:e4:58:d7:33:49:09:94:19:2f:83:b6:53:3e:30:a5:5c:6d:
e1:e4:86:f6:82:97:43:36:f7:db:ce:33:52:e8:52:c9:dd:94:
e1:dd:c1:6c:0d:2b:e3:c9:cd:6b:26:88:1d:6b:17:70:7e:c8:
de:7d:e5:f3:5d:7b:5b:a0:ec:fd:38:f1:33:ae:e6:c7:bf:0c:
b6:fe:1f:86:bb:06:21:2b:1b:cd:7d:0b:6f:b0:e2:d7:38:93:
77:0d:25:e4:18:2b:a5:c7:3a:94:7e:dd:cb:05:49:22:f6:83:
92:87:0e:09:c2:3b:4e:c6:67:17:ff:07:24:86:27:5b:a0:29:
9a:34:65:3b:1c:e4:3a:30:a6:33:30:98:b0:e8:69:c3:c3:a5:
fe:e3:98:c6:15:7b:eb:c8:0f:a1:98:dd:5c:23:6e:e4:f0:91:
22:c8:aa:e0:ac:16:18:27:35:a4:c5:37:c5:22:c7:1e:77:71:
37:83:f4:a9:8e:85:ce:9a:4e:cc:16:99:7d:25:e6:02:dd:5c:
bf:0e:77:ef:e5:f5:ff:e3:f2:55:b9:5a:2c:12:04:f5:4c:e4:
f5:aa:4b:64:a9:7a:01:e1:1c:a9:a8:4b:6b:97:d2:11:52:a5:
7c:46:46:21
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:52:36 2026 by rpki-client