Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/VDJxcSoogm2NX_gndyWaoLeRWCY.roa
File: VDJxcSoogm2NX_gndyWaoLeRWCY.roa (raw, json)
Hash identifier: 5QaKzzG+towd16xk61jhkbdW2NlBmkEEAVzCVwuCpDk=
Subject key identifier: 54:32:71:71:2A:28:82:6D:8D:5F:F8:27:77:25:9A:A0:B7:91:58:26
Certificate issuer: /CN=642bab8459948b79747648e13e99b9d0a582506a
Certificate serial: 019D4D3275F8FB1535B38B64D47DCC009BD9
Authority key identifier: 64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/VDJxcSoogm2NX_gndyWaoLeRWCY.roa
Signing time: Thu 02 Apr 2026 07:57:25 +0000
ROA not before: Thu 02 Apr 2026 07:57:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34986
IP address blocks: 193.104.166.0/24 maxlen: 24
193.188.253.0/24 maxlen: 24
2001:67c:1794::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4d:32:75:f8:fb:15:35:b3:8b:64:d4:7d:cc:00:9b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642bab8459948b79747648e13e99b9d0a582506a
Validity
Not Before: Apr 2 07:57:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=543271712a28826d8d5ff82777259aa0b7915826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:af:b0:de:3b:60:0d:3c:bd:0f:bf:97:49:22:
e3:8d:2a:e9:48:8a:69:de:55:0b:92:b7:dc:b0:ab:
44:3e:96:89:7d:af:86:b4:7d:7f:e0:34:b9:59:63:
a0:07:78:50:06:c7:1b:fa:6b:c5:82:a9:2b:f7:fe:
e2:d0:8b:37:87:3f:03:0b:d0:c1:33:e8:d1:0b:cd:
bf:90:2c:c4:4b:e7:6c:55:6a:e1:af:d4:cb:7b:e2:
2b:fc:02:b1:0d:98:d0:ef:3b:ec:36:df:9c:c7:db:
b2:5f:9f:28:e0:d3:1a:61:38:18:8e:84:ad:cc:8a:
15:d8:b9:9d:90:51:38:ef:23:71:b5:e5:f1:5e:19:
00:c2:9a:8d:84:7d:18:a9:2d:d4:d5:59:3c:9d:cf:
ce:1f:01:86:8d:4d:cf:73:15:7e:d1:b0:30:df:bb:
53:1a:8c:2e:88:6e:0c:7e:31:1b:3b:99:27:0e:e9:
15:2d:55:6a:ed:25:ad:da:24:85:92:d0:1a:d9:79:
39:a1:f3:7e:9d:d3:18:ac:44:3b:5c:27:b8:50:ab:
42:27:4a:3a:91:2e:b6:73:05:29:83:4a:97:86:23:
98:6a:10:b8:86:b4:ae:0f:42:52:37:4d:03:35:b5:
c9:6c:eb:48:5d:f6:93:31:e7:7b:69:93:c7:ac:bd:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:32:71:71:2A:28:82:6D:8D:5F:F8:27:77:25:9A:A0:B7:91:58:26
X509v3 Authority Key Identifier:
keyid:64:2B:AB:84:59:94:8B:79:74:76:48:E1:3E:99:B9:D0:A5:82:50:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCurhFmUi3l0dkjhPpm50KWCUGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/VDJxcSoogm2NX_gndyWaoLeRWCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5ec30c-2aef-47ab-b0ec-5b15523bfcbb/1/ZCurhFmUi3l0dkjhPpm50KWCUGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.166.0/24
193.188.253.0/24
IPv6:
2001:67c:1794::/48
Signature Algorithm: sha256WithRSAEncryption
28:27:23:9d:f7:0f:74:8d:71:ca:cf:b1:3a:bd:01:19:39:9b:
ba:5f:b4:37:a4:65:0d:bb:f5:75:2a:e1:3f:e6:60:13:57:73:
43:3e:56:b4:fa:44:df:b6:6d:39:a6:15:d8:47:7c:59:69:07:
e5:1d:b3:ec:21:07:e4:ec:ab:2b:5e:5d:0b:70:54:bd:c9:20:
6c:5d:df:75:01:04:8d:7a:e6:24:8b:4a:b9:74:73:08:b6:ef:
c7:6f:59:c4:85:c9:44:da:3f:c1:55:68:59:13:25:86:62:25:
23:6b:84:65:b4:32:48:de:97:4e:e8:ea:19:ad:8b:14:ef:f9:
12:59:98:98:03:bb:a1:7d:ac:be:23:ab:63:18:91:bb:eb:c7:
52:d7:11:8d:b0:e1:96:b6:38:46:b1:13:76:42:d6:99:30:b5:
fd:f8:3f:e0:26:11:15:cd:10:37:07:a7:c5:50:65:66:8c:53:
f3:c8:25:6e:25:6b:55:68:fe:cd:c4:35:8c:0d:24:2b:9a:2a:
b8:ec:06:cc:65:d8:61:be:59:1e:1b:d1:b7:75:eb:52:76:b6:
2d:c2:f2:20:fc:6f:d0:2a:82:75:14:7e:f3:6f:81:78:bc:63:
d5:30:76:b2:5d:8f:30:3a:79:8e:b5:7c:12:e1:94:df:ec:16:
4b:fe:cc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:36 2026 by rpki-client