Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/vZBnCj_Rj6Bre77KwEvIjegqxMU.roa
File: vZBnCj_Rj6Bre77KwEvIjegqxMU.roa (raw, json)
Hash identifier: V5r38A2//eRIQ5lvJICfTjj6dkZGzUmA8yVG4cyzLt0=
Subject key identifier: BD:90:67:0A:3F:D1:8F:A0:6B:7B:BE:CA:C0:4B:C8:8D:E8:2A:C4:C5
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019CD7A79ABADCDD8D40FBF5431983AAA845
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/vZBnCj_Rj6Bre77KwEvIjegqxMU.roa
Signing time: Tue 10 Mar 2026 12:10:11 +0000
ROA not before: Tue 10 Mar 2026 12:10:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57246
IP address blocks: 91.108.41.0/24 maxlen: 24
95.140.84.0/22 maxlen: 22
95.140.84.0/24 maxlen: 24
95.140.85.0/24 maxlen: 24
95.140.86.0/24 maxlen: 24
95.140.87.0/24 maxlen: 24
185.26.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:a7:9a:ba:dc:dd:8d:40:fb:f5:43:19:83:aa:a8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Mar 10 12:10:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd90670a3fd18fa06b7bbecac04bc88de82ac4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5e:94:2c:b3:f2:8e:45:45:3a:e3:4c:47:ad:
b7:34:6e:61:71:88:dc:f8:25:1f:d4:47:83:3f:ae:
bc:4d:b3:19:8b:7e:2a:d2:02:27:56:68:38:fc:83:
b7:44:cf:e7:45:0e:ed:63:63:c6:a2:2a:dd:08:0e:
d5:7f:19:be:52:8a:24:a6:57:62:bb:8f:35:63:15:
bd:fc:6c:ab:4b:66:61:b6:3b:ea:60:12:f3:68:5c:
a1:f5:c0:da:64:62:ad:e5:06:8e:1b:2d:1d:26:83:
60:5d:dc:86:89:20:03:9d:ec:a1:73:e8:3a:84:f1:
b3:e2:ad:52:39:36:b6:ba:1c:a8:9d:94:67:6f:01:
f8:ca:a9:f5:1d:7e:c5:8e:c0:9b:b9:ed:a2:0b:61:
fc:17:05:cd:bc:cc:26:83:cd:6b:62:6f:2c:54:5e:
d6:5a:49:32:52:51:53:e9:03:e6:c6:d7:04:55:96:
74:68:44:8e:ab:07:df:56:f5:c7:34:8f:46:e6:c8:
53:0f:de:65:88:b5:4e:ac:e2:5a:ed:fd:00:af:14:
45:86:57:bd:60:ff:8c:c4:fe:db:90:bb:85:8c:94:
5d:8f:0d:ed:f8:da:05:7c:b3:dd:f4:8d:cd:e1:71:
e9:e8:06:f8:f8:6b:f4:0c:ab:50:41:5c:14:e9:d1:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:90:67:0A:3F:D1:8F:A0:6B:7B:BE:CA:C0:4B:C8:8D:E8:2A:C4:C5
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/vZBnCj_Rj6Bre77KwEvIjegqxMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.41.0/24
95.140.84.0/22
185.26.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:b8:85:1a:44:16:1b:d2:fa:fa:60:41:37:a6:60:ce:da:f1:
0b:ba:61:34:39:2f:74:d3:1c:51:28:ce:c5:b8:62:db:91:c8:
51:f0:05:04:a7:68:8a:7b:6b:9f:fa:0a:7b:3d:0a:1a:7c:c6:
0c:09:01:53:1f:b6:e2:5e:fc:56:47:d3:59:9e:20:d5:f1:41:
27:d9:76:67:44:64:f3:0c:06:a2:5d:2c:1f:3b:bb:1a:f6:42:
11:fa:f7:5b:72:9a:30:5b:05:1d:38:76:48:72:be:3c:bb:d7:
72:05:ee:92:6d:5f:04:e7:26:71:42:49:0b:1c:ad:20:1b:21:
14:e7:a1:f0:ae:dc:16:3d:ec:77:24:0d:fe:85:a1:36:72:21:
69:01:58:46:59:18:fb:f4:4b:d6:d5:af:98:6e:bf:b1:4c:62:
09:bb:22:0f:c6:dd:03:f1:47:65:d3:01:f2:1d:6a:16:0a:c3:
93:a3:62:cc:0d:10:ba:27:33:fe:7c:8a:b5:aa:62:86:f0:ac:
f5:f0:6a:1a:23:5b:73:67:27:85:15:7f:7c:42:d7:40:cd:59:
74:ad:ea:f5:36:85:d0:d4:89:04:eb:a8:89:ae:1f:33:5f:07:
59:1b:ee:db:a7:ae:29:8f:02:f9:07:9e:09:49:29:57:04:a8:
27:34:74:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:50:39 2026 by rpki-client