Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/viaTLB-wvz89NlDaK_C89z0aRy8.roa
File: viaTLB-wvz89NlDaK_C89z0aRy8.roa (raw, json)
Hash identifier: i8ARw6uGEv+n3vy9u4wlE+M8ikSqSdnJV9hSzBnylew=
Subject key identifier: BE:26:93:2C:1F:B0:BF:3F:3D:36:50:DA:2B:F0:BC:F7:3D:1A:47:2F
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 01A12AD17FE27DEEE96D7A40906611DFDC62
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/viaTLB-wvz89NlDaK_C89z0aRy8.roa
Signing time: Sun 11 Oct 2026 11:55:35 +0000
ROA not before: Sun 11 Oct 2026 11:55:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210387
IP address blocks: 185.148.241.0/24 maxlen: 24
185.169.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d1:7f:e2:7d:ee:e9:6d:7a:40:90:66:11:df:dc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 11 11:55:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be26932c1fb0bf3f3d3650da2bf0bcf73d1a472f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:bd:a2:cf:33:60:46:ca:39:59:4c:3f:09:
58:09:40:b0:e0:da:6d:d9:3e:c9:b1:8a:ab:2e:57:
d7:df:8c:e1:84:16:0d:67:a6:0f:7a:d9:de:91:57:
2a:66:42:34:e6:82:8b:59:8f:8d:36:e9:ef:9b:8e:
10:07:a0:fe:a6:8e:c0:06:f9:6f:41:d7:eb:a2:dc:
13:a2:4f:a3:59:75:d3:76:59:24:32:5b:55:b7:40:
0c:4c:a2:64:66:9b:97:6e:dc:ec:e1:78:b5:90:d6:
1b:47:e0:c2:a0:87:3c:72:26:09:11:53:7e:ec:7a:
90:c2:2e:11:b6:a0:a7:77:e7:80:40:aa:b9:df:19:
4a:ff:a6:c7:56:d4:d4:ba:c2:4d:ca:6e:6a:ae:e4:
1f:89:11:22:e1:49:3c:e9:35:12:23:7f:95:56:40:
e3:85:0c:12:1f:b5:84:71:79:08:a6:8b:92:26:f0:
5f:e8:95:08:af:52:b6:54:87:73:5e:34:50:6a:ae:
0d:69:a4:4e:ba:49:4a:76:87:f5:66:e3:92:ef:f9:
48:40:d9:17:5d:f5:38:53:73:0e:ca:8b:0f:13:03:
4c:d1:3a:ab:82:d2:bf:e6:9d:d9:58:8c:71:33:57:
d0:b1:f5:20:9e:35:4e:a9:85:78:8a:20:b5:af:d4:
03:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:26:93:2C:1F:B0:BF:3F:3D:36:50:DA:2B:F0:BC:F7:3D:1A:47:2F
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/viaTLB-wvz89NlDaK_C89z0aRy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.241.0/24
185.169.181.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f1:a4:68:55:21:5a:3c:ae:56:97:62:db:5d:92:ae:57:cb:
50:f5:c3:b0:98:17:50:43:f0:26:c4:91:f3:7f:72:c2:dc:5c:
d7:51:65:9e:0d:31:3e:c6:76:f1:9b:37:5e:b0:37:06:79:97:
ef:f5:46:31:3f:9d:5a:47:0d:29:da:3c:0c:a2:7c:9f:ec:3c:
6e:76:3f:08:45:d6:3e:9d:94:e9:de:bc:b6:06:05:69:16:7b:
67:b2:18:ee:19:24:ad:65:8d:98:c8:af:da:5e:41:d6:a3:29:
a2:e2:7a:88:47:2d:57:8b:56:35:73:7e:5c:ee:33:d9:53:5f:
6c:42:81:44:ae:2b:ad:43:d0:e6:6e:d9:d1:c4:94:16:ad:8f:
4d:01:55:79:ad:62:1a:3b:ec:7a:b4:e0:d9:b1:7c:e7:63:4e:
a6:f9:e1:47:67:9e:ff:70:9f:1e:54:d7:0c:fb:1a:15:a0:c1:
89:a8:c0:56:19:f5:cd:58:88:ca:f0:47:ef:26:38:9f:bd:48:
99:f6:ed:c7:27:f8:0f:1a:57:e5:cc:3e:42:6a:d7:fb:19:8b:
6e:92:8f:3a:97:47:8c:42:41:46:62:38:63:85:4a:77:18:b9:
ae:c3:94:c9:19:51:14:e2:8d:a5:35:0c:ee:70:95:c9:65:6e:
b5:89:1c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:33:39 2026 by rpki-client