Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Vr59DRujk9mwPsuAfTKbATRXnPk.roa
File: Vr59DRujk9mwPsuAfTKbATRXnPk.roa (raw, json)
Hash identifier: 7eaCvz8bA+7Ecd2zXMZzAl4Z6IYatYG19uP43h1+Mck=
Subject key identifier: 56:BE:7D:0D:1B:A3:93:D9:B0:3E:CB:80:7D:32:9B:01:34:57:9C:F9
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A038D2662E954009FFF6A4CF4D206A6891
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Vr59DRujk9mwPsuAfTKbATRXnPk.roa
Signing time: Tue 25 Aug 2026 12:08:27 +0000
ROA not before: Tue 25 Aug 2026 12:08:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 45.89.52.0/24 maxlen: 24
193.46.56.0/24 maxlen: 24
193.57.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:d2:66:2e:95:40:09:ff:f6:a4:cf:4d:20:6a:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Aug 25 12:08:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56be7d0d1ba393d9b03ecb807d329b0134579cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e8:8d:f4:35:58:03:6d:2a:f4:19:5a:80:2f:
74:3e:9f:15:ec:af:5e:a0:41:05:05:3d:49:55:da:
d3:76:fe:b2:8c:66:d9:07:68:07:fc:47:e7:43:71:
ec:cb:68:e8:9e:57:16:3d:82:65:b5:e8:77:74:dd:
fa:5d:4f:ce:6d:bb:cb:84:f8:11:21:91:77:9b:27:
77:c1:64:17:34:b7:c3:1d:53:09:9d:fd:87:25:9c:
66:79:44:34:b5:cc:bb:78:d3:ff:39:c1:23:a5:e1:
83:a1:f1:9c:60:c4:46:17:12:d5:1f:e3:cc:ef:06:
73:b5:f4:8e:07:e2:af:60:c4:92:ac:98:e6:6e:97:
f8:96:35:ae:1a:0d:1f:f7:ca:80:9e:bb:c3:8d:fc:
c9:54:19:cb:ee:4f:2f:fa:3e:73:b1:b7:01:5d:e2:
36:bb:dc:64:c5:99:82:33:02:b5:f9:f0:a9:61:43:
50:fe:b6:fd:87:b4:bc:e0:e1:95:b3:31:6c:75:f0:
94:bb:1d:1c:b5:d8:a9:e0:65:34:e0:5b:88:96:57:
d7:bf:ca:28:e9:a7:92:0d:cf:1a:fc:4e:4d:50:cf:
1d:4f:43:30:aa:4c:67:11:a6:31:54:a8:87:80:92:
31:4f:c2:58:c5:a6:c5:f9:23:52:fa:d7:87:0b:20:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:7D:0D:1B:A3:93:D9:B0:3E:CB:80:7D:32:9B:01:34:57:9C:F9
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/Vr59DRujk9mwPsuAfTKbATRXnPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.52.0/24
193.46.56.0/24
193.57.136.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:8e:87:69:94:35:c5:e2:c7:15:a3:3e:1d:13:45:7c:49:a2:
45:60:04:c4:3a:13:83:4f:52:c9:36:a9:ef:73:25:f1:24:8c:
b9:83:a5:e0:d4:85:03:74:29:8a:22:c7:1a:df:a3:0b:9c:2a:
57:94:63:3e:e5:c6:56:4d:6d:a2:7e:62:d7:65:d2:a4:cd:f6:
9f:18:b5:ad:7c:6a:1d:4a:10:21:41:20:d2:42:56:bf:7d:5f:
3f:3f:13:b4:7e:15:d6:f2:88:7e:bb:21:92:07:55:dc:60:90:
1e:27:0b:fa:e1:03:2e:eb:8c:53:ea:c0:57:91:0b:97:27:8a:
37:c6:5d:67:d0:65:50:76:21:09:25:6f:61:b4:b2:23:bc:e3:
24:fc:d7:55:06:9c:75:08:c3:8e:61:ea:59:87:df:9f:9a:07:
b1:16:a1:bf:7b:d5:1d:8a:cb:4d:d4:c9:62:d8:51:58:a4:af:
06:06:48:ea:9f:c2:de:8a:83:8c:1f:4f:df:b8:b1:73:d8:58:
f0:62:aa:96:18:06:2a:3a:ac:10:d4:83:4f:c2:27:ea:18:11:
68:8e:f5:dc:88:84:03:9c:c5:83:1d:b9:c2:bd:a5:a6:60:c4:
18:75:5b:c6:ae:2a:88:33:8b:c3:49:bf:17:7f:e9:84:a1:f7:
c8:ff:c0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:14 2026 by rpki-client