Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/VbKJonlhe1F5DkNoQxo7uZm3120.roa
File: VbKJonlhe1F5DkNoQxo7uZm3120.roa (raw, json)
Hash identifier: GBv6fwxw0ftuofIeqMxid8GFdyjI4W6j2/qOfqs8Jmo=
Subject key identifier: 55:B2:89:A2:79:61:7B:51:79:0E:43:68:43:1A:3B:B9:99:B7:D7:6D
Certificate issuer: /CN=83de67d35120f58feb42f1742975246e3e86858c
Certificate serial: 019FF53221C7C87CE496E32FBF40FACB8A4B
Authority key identifier: 83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/VbKJonlhe1F5DkNoQxo7uZm3120.roa
Signing time: Wed 12 Aug 2026 08:58:51 +0000
ROA not before: Wed 12 Aug 2026 08:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28753
IP address blocks: 185.14.48.0/24 maxlen: 24
185.14.49.0/24 maxlen: 24
185.14.50.0/24 maxlen: 24
185.14.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:32:21:c7:c8:7c:e4:96:e3:2f:bf:40:fa:cb:8a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83de67d35120f58feb42f1742975246e3e86858c
Validity
Not Before: Aug 12 08:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55b289a279617b51790e4368431a3bb999b7d76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:18:10:6d:61:8d:f5:d0:28:0f:ee:3a:d2:
da:5d:fb:fc:8f:d0:a9:1d:60:2b:73:e9:68:03:68:
c4:f0:5a:c0:18:c8:2e:36:a8:bf:65:9f:05:03:52:
de:91:0f:db:1b:22:cb:36:6a:e2:09:0d:8f:8c:3e:
60:62:6a:1d:bf:27:c0:6a:a8:5f:bf:b3:ff:e1:eb:
7f:7c:12:a4:26:90:e7:46:89:50:8c:86:e8:82:aa:
66:c7:6e:61:d1:70:a8:21:06:63:9e:c5:fb:77:1b:
36:b8:92:f4:48:b2:b7:cf:61:4f:38:b8:25:f7:f2:
d9:b6:50:3a:57:5c:25:e4:33:94:1e:75:ff:bf:ae:
23:4c:65:c6:8a:46:0c:2f:b6:38:de:e3:d8:19:6d:
29:e4:1e:3e:a3:f8:55:dd:8a:63:5a:ab:92:9f:95:
2d:e5:2a:9b:0a:59:98:37:33:22:34:8a:22:db:2d:
24:5b:84:f9:e1:8d:8b:d5:7e:f9:b7:35:7b:26:bf:
9e:33:ac:d1:1d:5a:d3:28:0a:72:06:8c:1e:d6:37:
e4:e4:ec:1c:70:74:89:b5:87:3d:04:5e:60:4b:ba:
f3:57:fb:00:3b:37:2b:1f:9f:5c:25:67:dc:f0:f5:
2b:40:16:d0:c7:88:e4:31:79:fd:10:d0:3e:6c:a4:
80:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B2:89:A2:79:61:7B:51:79:0E:43:68:43:1A:3B:B9:99:B7:D7:6D
X509v3 Authority Key Identifier:
keyid:83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/VbKJonlhe1F5DkNoQxo7uZm3120.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.48.0/22
Signature Algorithm: sha256WithRSAEncryption
76:87:81:81:c1:a0:8a:71:8d:44:4d:44:64:16:c7:11:90:e9:
af:cd:a1:69:4f:71:3d:db:0c:8f:f2:32:f6:7e:75:42:0d:5b:
37:b8:e0:94:57:1b:be:80:6a:13:22:96:4b:21:0e:b1:51:64:
4f:79:b9:30:69:cc:43:4d:4d:1f:d6:c9:4b:cd:97:d7:a1:1d:
2e:f1:a7:c0:5d:c6:6d:e4:be:11:60:09:d0:7a:f1:35:5c:7f:
e6:2a:e9:5c:84:ee:4b:da:ae:88:80:13:66:6b:59:8e:80:6e:
88:fd:8b:dc:48:00:7e:2d:b7:72:b2:8e:57:24:45:f4:c1:06:
8c:c1:1c:21:a3:35:be:0f:a8:c4:a4:e1:13:64:f4:9d:79:88:
61:3f:cd:24:e6:ec:2a:8f:0a:2e:8c:e2:6e:48:8f:96:cf:aa:
b3:f9:4c:9b:0b:b3:aa:f6:31:57:2b:58:8c:06:d5:cc:ac:6e:
24:37:a6:dc:b9:83:b0:fe:86:0a:5c:10:f9:08:7b:1f:9f:79:
10:17:e3:6d:e5:28:57:48:55:36:0f:63:ba:72:50:8c:0b:da:
95:4d:0f:91:a1:29:3e:9a:5e:41:d7:21:18:83:ff:c4:07:19:
36:0d:b6:a0:1a:15:de:ba:66:e2:53:9f:f0:bc:6c:a2:6e:99:
65:72:cb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 19:10:52 2026 by rpki-client