Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vuToqFlvETAJWXnKlyV9pU8244M.roa
File: vuToqFlvETAJWXnKlyV9pU8244M.roa (raw, json)
Hash identifier: Fvnwkr1gFbkf92nLVXotpBVX587ysM9P4vYktP0kcaU=
Subject key identifier: BE:E4:E8:A8:59:6F:11:30:09:59:79:CA:97:25:7D:A5:4F:36:E3:83
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019E412F6017BE6627958099CCBAF312317C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vuToqFlvETAJWXnKlyV9pU8244M.roa
Signing time: Tue 19 May 2026 17:01:24 +0000
ROA not before: Tue 19 May 2026 17:01:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207177
IP address blocks: 45.86.17.0/24 maxlen: 24
45.86.18.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:41:2f:60:17:be:66:27:95:80:99:cc:ba:f3:12:31:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 19 17:01:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bee4e8a8596f1130095979ca97257da54f36e383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:38:89:f8:11:ed:08:0e:7d:78:51:10:ef:fd:
9d:df:af:5d:b2:44:a9:51:b7:22:0b:4d:be:a7:9f:
61:38:b6:07:2e:03:ab:5a:83:b6:0f:39:46:f8:41:
7e:16:85:8e:22:ca:43:2d:72:38:0c:e5:2a:a9:4a:
db:7c:18:83:38:9f:e9:38:e9:ed:ab:82:72:1a:a4:
25:b7:6f:14:9b:2b:94:85:c8:04:c7:8f:89:9e:7a:
4f:67:11:fb:49:35:dc:01:11:05:a8:9a:47:8d:73:
05:e4:ba:13:ba:c9:fb:d2:b3:d8:40:09:60:0c:ef:
67:c2:1d:77:80:e9:26:43:24:fd:11:51:bb:9c:81:
a2:4b:ca:df:26:4f:b7:3c:25:98:aa:76:26:36:5c:
62:4e:e7:f2:1a:7f:ed:45:67:f4:54:b8:40:6c:54:
78:21:1b:82:e0:cc:9f:75:e3:2b:2c:1b:92:bf:07:
35:10:cc:04:e4:a9:8e:f7:de:45:eb:f1:35:ce:bc:
a8:75:57:99:ac:55:0b:aa:18:65:52:b2:02:07:8a:
3b:22:bd:e9:79:5c:11:92:6d:98:bd:ac:57:b9:9e:
58:1d:40:7a:f4:9a:10:51:94:64:92:44:80:f4:b3:
db:9d:e7:09:7e:8f:de:14:29:8d:23:06:a1:de:2d:
ff:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:E8:A8:59:6F:11:30:09:59:79:CA:97:25:7D:A5:4F:36:E3:83
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/vuToqFlvETAJWXnKlyV9pU8244M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.17.0-45.86.18.255
171.22.52.0/22
Signature Algorithm: sha256WithRSAEncryption
90:5e:ef:d6:6a:75:f5:1f:f9:f5:9b:d6:dc:d9:be:21:a2:c3:
12:e5:11:9c:16:c1:98:30:83:98:78:c3:a8:08:89:81:85:62:
51:26:e9:74:08:91:fc:1b:f4:7e:71:9f:51:b7:d5:0f:f1:96:
12:af:e2:7c:80:f7:e7:dc:be:06:0b:59:29:70:e3:e1:fd:b9:
ee:df:2e:bd:3c:e8:ec:0f:28:38:36:bc:23:79:cd:33:00:f2:
33:04:d6:d9:3e:98:a6:77:1d:32:bf:47:51:66:59:68:62:2a:
5d:3b:fa:cc:8b:4c:b2:d1:15:6c:fe:6f:67:8f:af:32:68:a6:
6d:22:0b:c7:c8:d4:4f:50:c8:14:17:1c:6b:b8:2e:ce:ca:57:
e3:d5:6a:96:18:43:80:e8:7a:64:6a:37:a5:67:ba:93:ed:2c:
4b:cb:68:c6:03:f4:23:1f:f5:1b:05:38:d3:00:bf:20:28:34:
f7:73:25:14:d3:1e:92:1a:c4:28:ce:1b:64:4e:dc:3b:38:9f:
02:be:d2:ea:e2:67:54:aa:dc:c9:c5:87:7f:92:cd:4d:ff:6f:
5c:a9:b5:ae:10:6b:cb:f4:1a:df:f9:ad:f7:31:85:39:8e:4c:
37:27:e7:62:aa:f3:07:82:8b:df:c4:1b:44:44:87:b9:f9:13:
04:12:9e:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:41 2026 by rpki-client