Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/vfsLQ40tt1u38U0WZHji9u7g47o.roa
File: vfsLQ40tt1u38U0WZHji9u7g47o.roa (raw, json)
Hash identifier: nxc6h9C4GbjCwYhSlO4Rmt1mT0f1Ks/V0yvcEZ1nYOE=
Subject key identifier: BD:FB:0B:43:8D:2D:B7:5B:B7:F1:4D:16:64:78:E2:F6:EE:E0:E3:BA
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A1637978199341845C0649D6FA49736212
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/vfsLQ40tt1u38U0WZHji9u7g47o.roa
Signing time: Thu 22 Oct 2026 11:57:47 +0000
ROA not before: Thu 22 Oct 2026 11:57:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47541
IP address blocks: 5.181.61.0/24 maxlen: 24
89.221.235.0/24 maxlen: 24
91.231.132.0/24 maxlen: 24
91.231.133.0/24 maxlen: 24
91.231.134.0/24 maxlen: 24
185.131.68.0/23 maxlen: 23
217.69.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:79:78:19:93:41:84:5c:06:49:d6:fa:49:73:62:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 11:57:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdfb0b438d2db75bb7f14d166478e2f6eee0e3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:18:5a:34:2b:b2:d7:19:a0:81:e6:46:11:
9b:fb:01:aa:28:d6:94:bd:4e:51:90:86:8d:3d:48:
42:60:0b:28:71:f0:a2:ce:4e:5a:d6:c6:28:16:d7:
1d:16:f1:c0:fe:b6:53:44:b1:20:0d:2c:b5:c1:90:
fb:92:40:a6:f7:20:f8:42:7b:1e:41:b1:e5:b7:e8:
9a:1c:82:73:0e:05:90:51:8e:dc:00:83:fb:0a:46:
43:c5:48:20:5e:e9:b4:44:d4:9a:93:5a:36:56:39:
32:10:15:b2:3d:17:e3:f0:ac:b8:24:b4:21:a9:00:
b8:5d:3e:94:3f:1c:dd:fb:ad:27:37:b8:4e:a1:0e:
7a:9e:4e:3d:60:75:d4:22:ed:4a:92:01:ee:1c:a2:
b5:60:c2:70:c7:df:20:63:36:99:3b:10:de:bd:a5:
e1:de:44:8b:b8:f0:b2:58:bc:47:85:ca:3e:10:19:
41:9a:e7:1a:0f:5c:c9:bf:ee:92:37:52:fb:59:b4:
e5:72:bf:0a:51:7f:33:35:0e:7d:6d:d3:cf:7b:b9:
d8:75:1d:dc:f0:4b:0c:a0:0a:87:29:8b:20:e7:1a:
b1:d7:02:cc:e0:41:99:e6:2d:a7:88:7d:82:be:98:
12:b3:a8:5f:c1:99:e7:d8:00:c3:a9:c0:22:93:4a:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FB:0B:43:8D:2D:B7:5B:B7:F1:4D:16:64:78:E2:F6:EE:E0:E3:BA
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/vfsLQ40tt1u38U0WZHji9u7g47o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.61.0/24
89.221.235.0/24
91.231.132.0-91.231.134.255
185.131.68.0/23
217.69.132.0/24
Signature Algorithm: sha256WithRSAEncryption
30:25:e9:45:ad:84:af:62:b6:d0:bf:90:61:89:43:2a:99:6c:
58:0e:1f:41:5e:0f:25:61:55:27:b8:6c:e4:70:df:c9:ce:cc:
53:d0:19:06:fa:d3:8c:52:2e:88:0e:9e:5c:6e:17:56:9d:fe:
de:35:95:fa:c7:d2:9c:2b:29:33:6d:51:c4:87:9c:44:67:8c:
70:c9:aa:16:f0:9b:b9:04:83:81:a9:bd:36:bf:f4:da:08:0b:
31:b2:a1:a8:f5:68:1d:bd:6d:3b:37:18:d5:a2:ff:33:08:8a:
ff:3e:6b:3e:c9:12:83:c1:bb:1d:6e:dd:af:a5:e4:68:d5:8a:
ad:0d:6b:c9:73:48:3a:6e:95:12:50:66:a8:f4:d1:66:63:05:
72:62:b9:57:13:a3:ce:f6:c9:e6:29:b5:ac:42:0e:02:c9:90:
da:70:cf:f7:24:56:0b:ba:39:cb:e3:41:df:f5:e0:5e:3a:9a:
cf:fe:cf:2b:f3:6f:ba:76:1d:43:0a:48:42:b6:bf:06:11:3b:
ce:be:73:2b:be:e0:6f:e5:c8:4f:e4:fd:9c:b7:eb:8b:75:bf:
34:91:d1:cf:83:77:9d:3d:6d:95:b7:fd:16:70:ce:72:b3:c1:
a7:a3:4d:c1:9e:87:33:b1:36:63:c1:6e:58:6c:72:f9:9b:6e:
2d:16:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:53 2026 by rpki-client