Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/vvAS9xQ4blrJqR7WN3AfTcObXN8.roa
File: vvAS9xQ4blrJqR7WN3AfTcObXN8.roa (raw, json)
Hash identifier: F208KEMvJKdlZ+jcuDlm+2qvdNbgqUK3v59c2mw9kBE=
Subject key identifier: BE:F0:12:F7:14:38:6E:5A:C9:A9:1E:D6:37:70:1F:4D:C3:9B:5C:DF
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A12FCB0F0906C55537759828655934786B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/vvAS9xQ4blrJqR7WN3AfTcObXN8.roa
Signing time: Mon 12 Oct 2026 11:06:39 +0000
ROA not before: Mon 12 Oct 2026 11:06:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 89.191.120.0/22 maxlen: 22
91.123.64.0/22 maxlen: 22
159.148.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:cb:0f:09:06:c5:55:37:75:98:28:65:59:34:78:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 12 11:06:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bef012f714386e5ac9a91ed637701f4dc39b5cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:de:05:7c:af:1f:6e:80:d9:6d:35:21:30:c7:
13:bd:e5:8a:9c:a7:83:91:f9:57:a1:06:3e:fe:07:
30:7b:fb:15:68:69:5d:c5:21:99:c8:06:4c:39:73:
0e:c6:1a:48:f5:d4:e7:4f:52:35:c8:c6:bf:0d:95:
1a:25:34:fd:4f:53:df:63:16:0e:3a:31:9b:7e:63:
e4:c4:36:6c:a9:15:e9:9f:e8:37:ba:00:93:ff:5b:
96:3f:a5:c8:84:83:24:8f:50:4c:6b:fa:df:7d:72:
49:90:4d:1c:1d:15:aa:4a:d8:25:e5:ef:b1:d2:d6:
df:61:ff:49:3b:e3:ae:21:60:cf:d9:e4:3a:6a:71:
c1:d0:98:72:81:e2:fa:9b:67:23:56:c5:73:fd:d3:
eb:3b:c3:4d:ee:60:71:be:fa:e3:85:48:ba:22:bb:
43:d0:c0:02:01:23:9a:40:62:a9:1e:34:4b:96:27:
03:c0:53:c7:47:1c:71:bf:ff:06:06:88:7c:06:96:
75:0e:bd:24:7b:92:0e:b0:2e:77:e7:25:ca:0c:86:
40:3c:64:ea:8e:3d:2c:7b:c4:0f:e5:90:dd:c1:f0:
58:ce:92:74:cf:3a:d2:96:33:5c:de:34:9d:d0:32:
86:fe:3b:5b:e4:9d:c5:20:0f:b3:18:11:53:29:94:
dc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:12:F7:14:38:6E:5A:C9:A9:1E:D6:37:70:1F:4D:C3:9B:5C:DF
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/vvAS9xQ4blrJqR7WN3AfTcObXN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.120.0/22
91.123.64.0/22
159.148.131.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a3:e8:5e:eb:d8:e1:16:ba:ed:16:4a:9e:cf:9a:61:41:83:
16:41:19:bf:6c:44:21:ad:cc:f4:6d:15:f6:77:35:3e:08:e5:
9d:a7:90:db:54:77:85:7d:6d:40:60:c7:89:9a:66:8f:01:27:
de:a5:10:5e:71:42:91:54:f6:0b:ed:55:d2:ee:c8:21:9a:6e:
21:e0:02:af:a9:a4:c5:c4:1c:24:49:dd:0c:33:6c:23:6d:2c:
97:38:c8:5d:bb:b8:ca:ee:65:f9:63:aa:86:ad:32:df:3d:0a:
b0:86:61:71:74:a5:97:e1:cd:3f:8a:55:03:f5:6a:74:ce:6b:
05:b2:7a:89:36:cd:cc:aa:03:33:da:90:9c:e8:96:23:83:a1:
7d:ce:52:6d:dd:cd:d5:65:56:eb:d8:22:19:7f:ad:d3:2b:d5:
da:67:4d:ca:5b:ca:42:9c:79:31:7d:9a:c0:6f:6c:1a:8f:06:
f8:1f:a1:62:92:51:e2:b5:fa:fc:1e:1b:c9:01:2f:b1:c1:af:
57:cf:7f:97:b5:f3:78:28:6d:08:b6:93:b0:ab:f5:2b:3c:b0:
8c:ee:76:e1:10:f2:5b:4f:fe:7a:a3:ae:87:66:8d:e4:b8:73:
50:c6:31:6a:3c:d0:74:6a:0b:66:93:4f:e7:df:0c:51:96:06:
cd:3f:7a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:26 2026 by rpki-client