Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/vDiHP16-cXFlWyApH9ZCdUlLc3E.roa
File: vDiHP16-cXFlWyApH9ZCdUlLc3E.roa (raw, json)
Hash identifier: cViv56KkpnJ3IsP9f8W8Sd20/qRNV0RPHMPaI5H4hsc=
Subject key identifier: BC:38:87:3F:5E:BE:71:71:65:5B:20:29:1F:D6:42:75:49:4B:73:71
Certificate issuer: /CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Certificate serial: 01A072596377F7120AEA0ABEBFF649CBA79F
Authority key identifier: 73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/vDiHP16-cXFlWyApH9ZCdUlLc3E.roa
Signing time: Sat 05 Sep 2026 16:14:15 +0000
ROA not before: Sat 05 Sep 2026 16:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396362
IP address blocks: 92.243.84.0/24 maxlen: 32
176.223.109.0/24 maxlen: 32
2a0f:ea82::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:72:59:63:77:f7:12:0a:ea:0a:be:bf:f6:49:cb:a7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cf6ab31604599b82d54dd2f40fb2b22b29c21e
Validity
Not Before: Sep 5 16:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc38873f5ebe7171655b20291fd64275494b7371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:39:3c:44:b8:4e:b6:6f:ae:ae:fe:50:0c:
98:7c:a8:66:73:7d:9f:59:de:4b:f8:ff:f9:26:09:
c5:b8:94:67:1a:b8:03:82:bf:4a:6b:1e:7c:0f:f7:
35:c9:0f:a7:47:31:42:52:d7:41:6e:35:2c:f9:1e:
8f:04:1f:5c:aa:12:eb:d5:79:9f:b5:c1:b2:3a:c0:
0a:b5:2d:17:8f:c8:59:75:0d:4d:ab:db:fe:2d:d5:
64:2a:c8:24:41:87:e9:d6:8d:39:5a:b5:ab:a7:3d:
a2:f6:da:01:3b:a4:84:08:75:ac:34:f6:1c:00:39:
85:b1:22:aa:0c:be:54:0c:6e:c2:39:35:59:50:7d:
4b:e7:b7:f6:9c:55:84:d4:1b:1c:b7:9f:36:ec:5e:
c3:5e:7e:e8:41:f4:95:ab:c4:22:cd:d0:3b:21:bc:
0a:80:e4:14:66:9f:ba:7a:bf:82:06:61:09:aa:98:
df:8e:20:34:58:31:da:b2:d1:96:79:63:81:5c:3b:
79:8b:a4:36:e3:7f:f4:22:cd:14:44:0b:d6:66:95:
f6:f9:10:00:97:41:2f:07:9f:40:43:7a:20:18:b0:
b9:34:e4:c5:e8:f4:63:45:d3:44:05:9b:e9:a3:c8:
61:56:9b:be:fe:6a:03:61:16:70:54:45:99:4c:c6:
ad:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:38:87:3F:5E:BE:71:71:65:5B:20:29:1F:D6:42:75:49:4B:73:71
X509v3 Authority Key Identifier:
keyid:73:CF:6A:B3:16:04:59:9B:82:D5:4D:D2:F4:0F:B2:B2:2B:29:C2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c89qsxYEWZuC1U3S9A-ysispwh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/vDiHP16-cXFlWyApH9ZCdUlLc3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/c89qsxYEWZuC1U3S9A-ysispwh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.84.0/24
176.223.109.0/24
IPv6:
2a0f:ea82::/32
Signature Algorithm: sha256WithRSAEncryption
63:e9:d7:48:5c:9b:75:87:1b:01:e4:9c:36:5e:4c:a3:85:ef:
88:68:ab:74:6e:b5:85:7a:28:42:5b:30:e0:a4:d7:8a:01:9d:
3c:50:53:2e:6b:9a:bc:88:ad:34:a5:e1:d0:0c:e1:09:ca:23:
03:1a:28:ff:03:10:43:ea:fa:a1:5a:50:6c:74:85:88:cf:7e:
86:20:3f:8b:0b:51:e8:5b:0b:41:26:c6:24:84:a6:07:04:19:
8f:b4:6c:f2:02:fe:40:bf:de:38:94:1d:6b:a3:96:77:fb:09:
43:53:07:55:a6:72:42:bf:63:d9:5e:fd:8f:8a:a7:d2:19:ab:
e3:e3:e2:22:c5:d2:cf:9e:ba:f0:eb:3a:f5:fa:8c:f6:54:7b:
6b:dc:79:8d:75:1f:e3:b7:c9:df:3d:66:3b:22:e2:d5:de:09:
46:fe:f3:5a:f2:4d:3c:e4:86:92:de:dd:48:46:c0:1b:07:b7:
a7:f6:3c:de:61:f0:0f:32:11:8a:67:0f:0d:19:d8:1d:c9:a0:
45:e5:4d:38:34:4c:a1:12:15:b8:ea:f7:a7:2a:7c:f5:44:7d:
d5:4b:4b:43:c0:5f:93:dd:6f:34:b1:3e:22:ba:8f:10:06:47:
49:fe:2a:9b:f8:dd:90:7d:11:b1:bf:2f:32:57:28:33:db:47:
a2:3d:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:00 2026 by rpki-client