Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Vq9OKIknUWl9dGKV29Hd9FHaiHE.roa
File: Vq9OKIknUWl9dGKV29Hd9FHaiHE.roa (raw, json)
Hash identifier: mBlfohkM1N7C5FSfo51wQ25M0oXeL7AfLNRvwgBBGf4=
Subject key identifier: 56:AF:4E:28:89:27:51:69:7D:74:62:95:DB:D1:DD:F4:51:DA:88:71
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019D29681099D82314D3A07FDCE3E1C145B2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Vq9OKIknUWl9dGKV29Hd9FHaiHE.roa
Signing time: Thu 26 Mar 2026 09:09:38 +0000
ROA not before: Thu 26 Mar 2026 09:09:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2856
IP address blocks: 79.132.64.0/24 maxlen: 24
79.132.65.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Apr 2026 23:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:68:10:99:d8:23:14:d3:a0:7f:dc:e3:e1:c1:45:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Mar 26 09:09:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56af4e28892751697d746295dbd1ddf451da8871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:28:3a:e3:39:86:64:c5:a9:93:0b:0e:a1:2d:
eb:c5:9d:b6:23:70:8c:44:d4:52:93:f2:e1:95:46:
27:35:58:94:ec:bb:d2:78:b8:df:b5:4e:2d:05:9b:
a4:5a:c3:2d:f9:dc:86:f5:e6:67:2b:62:01:61:5c:
75:c3:de:37:ab:ba:fa:d1:75:b9:6a:e5:43:03:23:
9d:31:7e:c9:99:fd:36:c8:60:94:c4:43:11:08:93:
04:3a:26:93:45:7b:5f:58:64:64:81:09:e7:65:9b:
8b:61:ef:da:05:60:22:fe:60:cc:e7:54:4f:4f:b3:
75:04:53:9b:7c:ba:6c:0f:1b:d0:fc:20:41:cb:25:
f0:64:e6:4d:57:7e:d3:9b:a2:2f:f8:73:36:07:d9:
6f:a4:4a:17:b8:cb:4f:e4:fd:d9:a1:52:d4:dd:94:
66:19:0c:4d:5a:e2:fa:18:f6:04:86:c7:8a:b4:3b:
67:10:b7:d0:a8:66:1b:53:45:a6:0c:aa:bd:af:c5:
af:10:6c:f9:5c:80:61:d1:de:bb:d9:e1:9f:0e:8f:
28:76:b5:5f:dc:49:d5:14:a0:ae:3c:13:ee:45:c6:
44:9b:d4:74:ed:9d:4a:9a:c8:3a:62:3b:d0:f7:70:
df:ba:51:94:e7:26:63:6e:95:a8:da:31:cd:23:da:
f7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:4E:28:89:27:51:69:7D:74:62:95:DB:D1:DD:F4:51:DA:88:71
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Vq9OKIknUWl9dGKV29Hd9FHaiHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.64.0/23
80.81.58.0/24
83.223.153.0-83.223.154.255
Signature Algorithm: sha256WithRSAEncryption
c8:32:1b:1e:e4:ae:44:b3:64:66:d4:9b:46:3f:b6:28:83:e6:
18:6a:b4:ca:ef:bb:2c:e7:6a:51:6b:89:15:80:eb:e5:09:74:
da:3e:4b:14:b2:df:d9:20:56:f8:34:5c:36:d8:ea:57:1b:33:
42:a3:cf:3f:e2:36:5c:92:ba:19:2a:66:d6:88:21:50:b2:a9:
4d:73:09:65:9a:94:19:6f:4a:74:04:4f:5e:9d:43:4c:16:16:
83:84:ce:0d:95:57:ae:1d:06:c8:aa:ac:57:7d:7e:4e:a2:a1:
a6:1f:cb:b1:44:ec:08:7f:37:f8:0a:af:63:76:6b:76:75:20:
b4:07:fc:84:e7:93:db:78:b0:be:64:99:20:f2:31:8d:5e:a4:
8d:66:83:f7:be:01:9f:ef:d2:96:44:82:8a:d8:57:28:50:03:
11:d4:fc:9f:d6:a7:31:3f:76:1b:83:2b:da:f8:0c:c1:63:ff:
be:92:fa:d6:57:12:70:67:2a:c5:e5:f0:02:65:9a:96:e1:1a:
01:d8:9e:f9:72:42:f7:47:a7:ef:a4:56:c1:40:b8:b7:09:0a:
c5:84:68:5b:6e:b8:5e:6d:d2:3c:06:e1:00:13:27:ef:5a:58:
9f:14:ad:c4:76:f5:75:fc:9c:49:4a:fb:d6:a2:25:1e:7b:eb:
c7:f8:56:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 08:53:50 2026 by rpki-client