Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vb0UJawueBPDSbOBzNOvp0J-K98.roa
File: Vb0UJawueBPDSbOBzNOvp0J-K98.roa (raw, json)
Hash identifier: GzlJABveEeOJVQqwvvs4fv0C97QRev+BHUFNk37yNKU=
Subject key identifier: 55:BD:14:25:AC:2E:78:13:C3:49:B3:81:CC:D3:AF:A7:42:7E:2B:DF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0E8A3F73F8417CB230E363E176B495A08
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vb0UJawueBPDSbOBzNOvp0J-K98.roa
Signing time: Mon 28 Sep 2026 15:30:54 +0000
ROA not before: Mon 28 Sep 2026 15:30:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214309
IP address blocks: 89.35.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 15:25:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:a3:f7:3f:84:17:cb:23:0e:36:3e:17:6b:49:5a:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 15:30:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55bd1425ac2e7813c349b381ccd3afa7427e2bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6b:dd:36:22:82:49:9d:fb:57:4b:2a:fd:38:
a8:c5:47:49:55:5a:a3:37:1c:f9:93:ef:0e:42:62:
64:33:62:72:90:ad:3d:3c:33:9a:6b:89:3a:0e:ea:
80:4a:d2:7f:6d:05:b9:0d:5e:a7:8c:af:d3:7b:79:
b0:3f:27:ef:91:b9:55:09:64:3c:db:9a:d6:46:0d:
f7:42:1a:9d:ab:9e:ce:43:e2:ed:b5:82:f5:ac:2f:
74:31:5d:d7:73:ba:78:eb:32:9b:67:8a:f7:a2:e4:
7e:e5:71:b4:fd:a3:d7:37:9a:ad:44:db:05:a3:5a:
c7:f9:89:5d:fb:dd:c3:94:85:58:d6:f8:eb:c7:51:
42:87:71:d5:f8:ae:bc:c3:f3:c4:af:b2:2a:3e:a7:
35:49:b4:81:e5:7f:1f:fc:77:a2:a2:12:12:20:09:
95:ae:19:34:48:0c:72:f9:20:40:09:78:a2:7a:73:
27:bb:40:f6:e1:af:ed:92:d9:4e:24:1a:67:c6:be:
33:cf:e5:f1:82:1b:ec:7e:c6:32:7f:b6:c4:df:f2:
2d:2b:f7:57:90:b0:63:f8:e7:03:9f:b1:1d:4a:86:
c1:61:48:34:e3:9a:64:d3:d4:4d:d5:cb:d8:d8:02:
bf:07:be:a3:9c:11:72:dc:c0:fa:02:04:ab:f0:35:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:14:25:AC:2E:78:13:C3:49:B3:81:CC:D3:AF:A7:42:7E:2B:DF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vb0UJawueBPDSbOBzNOvp0J-K98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.130.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:0d:af:7d:3e:d8:d4:4f:5b:aa:0e:be:fa:eb:0e:5c:5f:e5:
8f:39:eb:76:6a:f2:a2:1b:04:bf:48:09:38:58:76:70:77:c6:
eb:2a:44:ab:86:d4:f5:ab:cc:a2:7f:29:60:b0:2f:0d:c7:b7:
6a:69:09:30:87:c2:7d:b1:a1:d0:95:23:7c:b7:28:85:b0:72:
cb:3a:f3:d7:26:c3:a2:53:2e:ee:fe:18:e4:65:63:ba:b0:0e:
6e:d3:f0:85:e7:b4:33:77:7b:3c:a3:3a:ae:21:3a:c9:f2:7d:
2e:7a:4e:9d:07:3f:39:95:69:d6:bc:94:18:84:b3:0c:06:64:
f7:7e:58:54:d5:ee:aa:6a:db:e4:6b:be:9c:97:09:65:7a:62:
b0:07:85:50:25:e4:57:97:cd:7c:cf:f9:d2:06:d2:c9:66:ac:
56:eb:be:a2:84:01:01:23:74:f4:1c:04:41:9c:f6:d5:cd:21:
d0:59:71:da:a6:2f:02:a3:c7:91:e9:31:cd:bc:21:80:87:b4:
54:ca:8f:b8:cd:78:5d:49:fa:20:d4:f2:f6:b7:85:ea:92:20:
9b:8e:84:57:39:b1:d0:13:70:3b:3b:65:f4:02:3f:ce:7a:e2:
5e:10:e7:7c:85:a2:62:e3:07:9b:17:cc:b3:de:48:a7:e0:e4:
03:4b:4f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 01:19:49 2026 by rpki-client