Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vUdSiLjZF7EHhas6H8JvMEXrDO0.roa
File: vUdSiLjZF7EHhas6H8JvMEXrDO0.roa (raw, json)
Hash identifier: xXHMGfI0WvT4sPly5AFouyxtwwbMKOeakxXn5MdLxSc=
Subject key identifier: BD:47:52:88:B8:D9:17:B1:07:85:AB:3A:1F:C2:6F:30:45:EB:0C:ED
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0F40455CFA3980BFEE8A3814FE76DD6CC
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vUdSiLjZF7EHhas6H8JvMEXrDO0.roa
Signing time: Wed 30 Sep 2026 20:31:59 +0000
ROA not before: Wed 30 Sep 2026 20:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398698
IP address blocks: 95.164.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:04:55:cf:a3:98:0b:fe:e8:a3:81:4f:e7:6d:d6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 30 20:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd475288b8d917b10785ab3a1fc26f3045eb0ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bc:5e:d1:9c:f1:d7:bd:a4:5b:ed:f3:f9:44:
80:a3:84:95:18:72:95:0d:82:1d:f6:da:f1:93:a1:
67:90:a4:af:9e:2b:43:07:21:3b:51:ad:b3:a4:a3:
8b:ed:33:80:75:f9:9d:d1:2a:8f:e3:99:17:fa:49:
cb:19:24:7b:b9:30:f8:38:c3:77:07:7a:56:89:49:
61:ae:c6:62:40:3d:0a:c7:86:35:4e:12:f0:83:32:
70:37:08:4a:30:76:db:2f:18:52:2f:6d:59:e9:b6:
39:3d:90:6a:28:37:64:7b:93:e9:93:24:05:18:70:
ad:08:be:8e:20:25:ec:cb:55:fb:81:2e:00:2c:e2:
ea:a1:09:f2:5e:74:7e:d2:c4:27:65:ba:33:61:5a:
00:fd:68:5a:e4:ad:06:62:ec:a4:ce:d7:e0:14:e1:
bd:e1:14:63:89:fc:d2:93:23:cd:89:88:a4:c9:a2:
ec:14:c1:a4:08:58:cc:ae:fe:a8:7f:fc:50:c4:9f:
c5:30:05:94:a9:a3:e1:5d:f1:54:11:f3:21:45:77:
86:ee:0d:51:29:a7:b2:29:09:0f:51:cd:89:2f:08:
b1:d9:af:bd:ae:d4:62:f6:e4:42:a9:81:3e:d7:9f:
e9:ca:5c:49:fc:a3:6e:92:1c:65:7b:85:ba:b5:fe:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:47:52:88:B8:D9:17:B1:07:85:AB:3A:1F:C2:6F:30:45:EB:0C:ED
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vUdSiLjZF7EHhas6H8JvMEXrDO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.118.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7b:f2:23:d5:2a:d9:94:e9:e0:b9:94:32:16:2d:14:8e:30:
a6:74:6e:da:95:cb:81:b4:65:cb:a9:df:4c:7d:30:a4:4b:3b:
9d:75:e7:2a:2b:4c:71:9a:b1:eb:f4:d7:5a:a3:07:2e:14:7e:
ca:25:c4:bc:b6:f8:7c:6c:04:a7:4e:f5:c1:18:53:29:82:75:
2e:6f:e7:76:be:e6:50:5a:32:9d:39:ba:56:95:7c:3e:32:1c:
e7:2a:25:ef:4e:05:67:90:01:87:a6:9f:12:c6:ef:e6:06:09:
a9:24:5a:31:e8:01:c3:1a:39:39:39:29:67:e3:4e:67:d3:b4:
47:bf:9e:f1:bb:64:81:3e:2b:38:f1:49:b3:8f:94:82:3e:26:
84:26:54:db:93:13:f0:fd:d1:cd:94:cb:8d:a3:93:31:58:c1:
f4:cf:04:c3:84:4d:00:4e:cd:c2:fb:d4:67:60:98:0f:9c:b4:
00:9e:42:c3:38:7c:75:41:99:78:0c:2e:7b:1a:6e:d1:2c:d8:
53:43:07:b5:f9:85:0a:bb:d3:ca:b9:48:5d:65:1a:46:4b:41:
9e:7e:ee:fc:ce:28:5c:7b:78:af:72:49:5d:ed:71:64:f7:ba:
5b:ab:50:67:fc:14:bd:ab:a0:c8:74:2a:c9:51:c4:e3:2c:f4:
2e:99:73:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:37:06 2026 by rpki-client