Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/vpfwIrst8D-mUhYikydHJdbxWYU.roa
File: vpfwIrst8D-mUhYikydHJdbxWYU.roa (raw, json)
Hash identifier: cDSlaXYAliFmFBD60YnB9lxqeC0VbURWwjdvKxvvUyo=
Subject key identifier: BE:97:F0:22:BB:2D:F0:3F:A6:52:16:22:93:27:47:25:D6:F1:59:85
Certificate issuer: /CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Certificate serial: 01A0CDE5D7BD9001B49DB1A81943D67BC793
Authority key identifier: 1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/vpfwIrst8D-mUhYikydHJdbxWYU.roa
Signing time: Wed 23 Sep 2026 10:53:07 +0000
ROA not before: Wed 23 Sep 2026 10:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30150
IP address blocks: 185.125.104.0/24 maxlen: 24
185.125.106.0/24 maxlen: 24
2a0c:e340::/32 maxlen: 32
2a0c:e340:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:e5:d7:bd:90:01:b4:9d:b1:a8:19:43:d6:7b:c7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b554378bbf6da649cfd607166f65c7c4f76d656
Validity
Not Before: Sep 23 10:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be97f022bb2df03fa652162293274725d6f15985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:15:73:61:d5:0b:d4:5f:e3:2c:84:bb:c7:
d8:6f:3f:13:2b:41:aa:ad:97:91:aa:65:41:25:56:
c9:7e:bc:f4:bd:62:0e:e4:bb:29:79:93:c0:1e:3a:
de:8d:fa:01:5c:96:a2:43:d5:14:46:a8:75:13:06:
3a:cd:b4:4a:b0:47:e5:a3:1c:ee:a2:b9:b5:0b:43:
8a:0a:11:df:36:9b:0a:7e:7e:33:f6:0a:a8:7a:65:
e5:89:e4:6d:32:40:74:08:66:a9:5f:ff:8d:68:e8:
4a:e2:ee:10:b1:21:d6:b4:bc:86:b4:bb:2c:c2:e7:
11:b4:8c:48:fe:e4:9c:60:5c:6a:7e:fb:ca:8c:b0:
d4:33:9f:f5:6a:ba:fb:c6:d8:cd:00:0a:85:82:2e:
15:b0:65:b4:a2:23:c0:c1:24:17:7e:94:ae:24:5a:
4b:cd:82:70:4e:2a:bd:0e:d0:5f:75:4c:d9:e9:af:
9f:7f:dc:87:a8:e1:0c:e1:3a:09:29:93:e2:61:04:
62:1f:9a:70:4f:8e:a4:f2:3d:e2:06:d3:87:74:d3:
b8:8b:fe:38:ca:bf:e9:9e:8f:a1:e1:dc:ea:e5:2b:
e0:aa:d4:c7:dc:f1:76:c0:a5:45:2a:95:35:01:eb:
ba:54:55:df:2a:49:c1:85:46:37:1d:e6:5a:8b:e3:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:F0:22:BB:2D:F0:3F:A6:52:16:22:93:27:47:25:D6:F1:59:85
X509v3 Authority Key Identifier:
keyid:1B:55:43:78:BB:F6:DA:64:9C:FD:60:71:66:F6:5C:7C:4F:76:D6:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1VDeLv22mSc_WBxZvZcfE921lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/vpfwIrst8D-mUhYikydHJdbxWYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/37e6bc-3bb6-4025-9067-ee14382b1bbb/1/G1VDeLv22mSc_WBxZvZcfE921lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.104.0/24
185.125.106.0/24
IPv6:
2a0c:e340::/32
Signature Algorithm: sha256WithRSAEncryption
65:38:90:2e:e2:04:21:2e:be:88:36:ab:0a:da:38:96:ef:74:
ed:9e:1d:17:00:25:21:68:8f:fb:07:46:c1:aa:9a:62:ac:ed:
da:0e:c6:a7:f8:d9:e5:4a:58:6a:d3:8e:9f:1a:5a:cc:73:ad:
3e:45:56:b0:17:4f:b3:4c:69:15:3f:a5:5f:55:f4:24:64:82:
8e:25:3c:9f:70:11:9f:4a:5c:1f:01:18:ed:93:57:41:fb:dc:
1e:6e:29:fe:77:64:f9:07:70:44:c4:4d:a3:40:7d:97:a9:01:
c4:9f:f4:3d:b2:c2:af:ae:1e:c6:1f:2f:f5:85:50:85:7d:5e:
53:81:dc:91:76:77:85:36:48:e4:21:79:54:fe:ff:0d:b6:3e:
45:71:96:8c:4e:06:33:b7:69:9b:51:50:a4:ac:86:7a:0b:43:
2d:7d:18:e9:29:91:5b:ff:f4:7a:6c:84:5b:26:81:9a:1a:c9:
70:75:c2:98:d6:83:52:2c:5d:32:da:08:83:83:05:d6:29:f2:
43:31:8d:91:a7:1a:62:cb:73:31:63:7f:ed:b9:f6:e1:22:45:
93:d5:e7:9d:4d:ed:b0:65:e5:60:2f:c5:f9:81:88:50:f3:b8:
b9:b3:c9:bd:71:98:e3:3c:a9:80:34:f6:5a:17:1f:e8:bc:16:
6f:92:ad:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:27:11 2026 by rpki-client