Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Vt_o83jeAXwgrEV6QfNyihxJdG0.roa
File: Vt_o83jeAXwgrEV6QfNyihxJdG0.roa (raw, json)
Hash identifier: Fgpr0tl2Jx7B2BNewOwkF0HNqx/3fOLm+uiSmIq6TZQ=
Subject key identifier: 56:DF:E8:F3:78:DE:01:7C:20:AC:45:7A:41:F3:72:8A:1C:49:74:6D
Certificate issuer: /CN=918fa640f83c482ac95ac905174b5237d768379b
Certificate serial: 019F23690217F410B20F839B85CD84DB4660
Authority key identifier: 91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Vt_o83jeAXwgrEV6QfNyihxJdG0.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200818
IP address blocks: 5.183.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:17:f4:10:b2:0f:83:9b:85:cd:84:db:46:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918fa640f83c482ac95ac905174b5237d768379b
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56dfe8f378de017c20ac457a41f3728a1c49746d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:c2:0b:70:8d:38:c6:7d:48:6f:1f:f3:b3:
98:92:ad:cb:ef:be:05:3f:e7:72:e2:83:39:ae:99:
b5:fd:4a:73:d4:40:7e:29:5a:95:5a:65:f9:ab:63:
ed:a7:6a:c3:cd:94:db:d7:2e:a7:04:a6:29:9f:69:
21:12:0d:83:41:3c:b1:cf:d4:fd:a0:8f:50:85:dd:
2a:70:7e:11:de:31:0e:db:28:a7:0d:d9:6a:81:74:
a8:40:05:66:c5:12:37:d6:15:de:5f:7e:5e:ad:cd:
0e:61:12:f5:39:59:94:4b:47:88:9b:44:cd:07:b5:
3f:a8:e2:40:8d:aa:57:6e:33:4b:c5:ad:32:d3:bd:
43:6c:9e:25:f9:40:7d:0b:f9:2f:f6:e7:c2:ad:47:
5a:f2:29:e9:3f:47:16:40:22:5c:00:48:ae:2e:cc:
af:00:9d:33:f2:fd:26:86:7f:9b:0c:b4:3f:31:77:
40:40:61:37:71:84:eb:7c:03:21:fb:11:24:a3:85:
f9:ef:ed:68:9c:ee:7a:3b:45:4b:16:67:c9:7e:31:
87:cf:3b:d9:aa:1e:65:7f:7b:02:14:b5:4c:0c:e3:
ed:37:1d:aa:d5:b8:f1:75:aa:5c:84:fb:d9:bc:d9:
eb:d1:b9:80:f7:b3:33:f0:05:bd:4a:99:3a:33:9a:
6d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:E8:F3:78:DE:01:7C:20:AC:45:7A:41:F3:72:8A:1C:49:74:6D
X509v3 Authority Key Identifier:
keyid:91:8F:A6:40:F8:3C:48:2A:C9:5A:C9:05:17:4B:52:37:D7:68:37:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY-mQPg8SCrJWskFF0tSN9doN5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Vt_o83jeAXwgrEV6QfNyihxJdG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/kY-mQPg8SCrJWskFF0tSN9doN5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.108.0/24
Signature Algorithm: sha256WithRSAEncryption
73:c3:88:af:38:cc:93:4c:0e:8b:6c:0c:f9:fc:6b:bb:38:b9:
98:ce:6c:73:5d:eb:cd:15:b4:5e:6c:7b:9f:9d:4b:7d:89:7b:
b6:d6:5a:d1:89:4d:8c:6b:91:78:51:42:71:78:7d:ad:7c:ff:
05:f7:16:b7:76:86:f1:d2:8a:3d:6e:71:d1:ad:6e:0e:e1:69:
18:48:2a:0e:fe:d1:67:dc:f0:48:1f:5c:db:91:57:f4:a0:8a:
3e:4f:a8:e9:91:d2:79:e6:8c:c7:45:c8:3e:4e:ab:11:42:d6:
c3:e5:ed:9c:e7:94:0d:66:c9:9f:cf:c8:df:80:2d:30:a2:a5:
d9:b7:09:5f:16:79:78:11:24:f2:67:97:05:18:32:fa:b7:b6:
1e:c4:bc:9c:e5:a2:d6:49:44:2a:c6:41:e6:3f:0c:1a:cf:55:
53:84:62:02:7f:d9:0e:07:4a:54:41:a6:69:2b:53:5e:c0:73:
e5:d9:70:6a:b6:8c:d2:82:ff:4d:96:65:88:5a:74:4d:2c:48:
60:be:39:55:0c:bb:29:18:65:7c:9d:d5:fb:07:09:29:6c:e0:
03:5b:94:1d:c5:08:01:a9:b6:f4:6a:bd:a7:0d:1b:2c:92:ea:
51:20:aa:cb:08:ff:55:31:4f:e8:6d:5e:f5:9f:15:4a:f7:96:
ba:59:e3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:13:42 2026 by rpki-client