Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/VUVzIsl2dUtcnSNfIHkTqfutfSQ.roa
File: VUVzIsl2dUtcnSNfIHkTqfutfSQ.roa (raw, json)
Hash identifier: d5fE6EilmN9qcmtzXxi0Cpe76f+gYdzlmYovAB5cKL8=
Subject key identifier: 55:45:73:22:C9:76:75:4B:5C:9D:23:5F:20:79:13:A9:FB:AD:7D:24
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01A086165C42B03C9DBEF7E1FE9CC2325109
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/VUVzIsl2dUtcnSNfIHkTqfutfSQ.roa
Signing time: Wed 09 Sep 2026 12:13:27 +0000
ROA not before: Wed 09 Sep 2026 12:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 91.108.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:16:5c:42:b0:3c:9d:be:f7:e1:fe:9c:c2:32:51:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Sep 9 12:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55457322c976754b5c9d235f207913a9fbad7d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ad:23:bb:61:e0:32:b3:43:9f:01:66:84:6b:
98:02:12:44:d8:e1:f9:31:d6:30:5f:9c:8f:f7:17:
b2:f0:c7:36:cf:ef:c8:42:1a:49:c4:c9:84:62:a2:
ba:17:c0:5e:5f:4f:69:83:19:c3:08:f2:cf:7a:a4:
0b:5d:1d:c2:63:c1:37:5b:c2:6d:89:71:d5:e2:b1:
29:5e:36:43:cc:cd:fd:95:6c:35:25:6c:b2:3c:2c:
3e:fb:fa:ac:c3:ca:80:57:06:e0:8a:5b:f7:9e:5e:
d1:c5:09:98:74:9c:2a:9f:27:2a:d7:b7:32:4a:64:
24:0d:75:2a:0e:b1:86:4d:75:80:c0:7b:ba:3b:8e:
15:ba:26:47:cb:6f:73:9e:40:b8:55:f5:8d:72:25:
8d:e3:41:69:46:67:f6:8b:da:a6:b0:f6:50:6f:66:
47:74:49:b7:65:fd:02:42:99:f3:f9:6d:0d:29:a4:
97:a1:9e:13:dd:a2:5d:06:5d:84:65:6a:7b:e6:f7:
24:46:46:d7:38:89:45:31:ec:65:4b:18:60:f3:32:
b4:11:fa:20:f0:cb:d3:8c:b3:42:c8:2f:44:27:82:
c4:0a:97:ab:d1:48:a5:d4:87:d6:6c:3f:47:b9:c8:
60:c7:25:4b:c2:01:b5:f7:93:33:51:b3:22:5e:57:
bf:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:45:73:22:C9:76:75:4B:5C:9D:23:5F:20:79:13:A9:FB:AD:7D:24
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/VUVzIsl2dUtcnSNfIHkTqfutfSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.252.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5c:6e:e0:09:dc:a1:0e:43:f8:6f:22:31:45:be:ef:bb:85:
98:75:45:d6:d7:62:e0:0d:db:87:74:39:8b:82:b2:b2:51:5f:
10:8b:3d:1e:88:c7:d1:eb:cb:0b:0b:aa:33:6c:57:a7:b7:3c:
b7:b2:59:6b:ef:58:18:62:2d:ad:f2:a9:3e:06:a5:77:de:77:
07:44:04:ef:f0:57:94:4c:7d:6f:07:f7:0b:0f:5f:1b:37:1d:
37:98:af:45:19:9d:c7:95:e3:c9:93:9b:54:07:eb:77:97:9a:
0a:16:6d:9d:2c:c9:b8:ed:c2:2c:09:f1:5b:33:d6:3e:a9:ad:
5a:6e:50:04:d8:ab:d2:ae:5f:46:fd:64:33:53:d7:89:1c:4e:
38:ab:a0:6b:7e:ac:9b:4c:0a:53:95:dc:26:cb:dd:87:0b:b2:
e8:aa:e1:73:4a:2d:e0:a8:1f:2b:3c:ef:f3:b7:71:7b:35:91:
d8:05:1c:1d:d3:60:f3:b1:f9:51:74:d4:5c:5b:46:f0:8c:7d:
42:3b:38:ad:48:a7:d9:ce:db:0a:c1:20:f6:24:53:15:64:74:
c5:61:b6:60:77:f0:39:bb:de:d1:ad:e6:bb:13:fe:8e:a4:cb:
72:ea:6a:c1:f0:4e:12:a2:fa:53:c7:3b:a9:20:16:27:c3:33:
08:a9:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:18:10 2026 by rpki-client