Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VskWPQPOKR8aG38kpaX_YIoM4O8.roa
File: VskWPQPOKR8aG38kpaX_YIoM4O8.roa (raw, json)
Hash identifier: x1bMwzyWjtvrnT4POG35m/wYGorF9NU+5xiiUeBnA6M=
Subject key identifier: 56:C9:16:3D:03:CE:29:1F:1A:1B:7F:24:A5:A5:FF:60:8A:0C:E0:EF
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 01A0864F60E2E87FF764C20184CFC00E53B4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VskWPQPOKR8aG38kpaX_YIoM4O8.roa
Signing time: Wed 09 Sep 2026 13:15:44 +0000
ROA not before: Wed 09 Sep 2026 13:15:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198709
IP address blocks: 195.136.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:4f:60:e2:e8:7f:f7:64:c2:01:84:cf:c0:0e:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Sep 9 13:15:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c9163d03ce291f1a1b7f24a5a5ff608a0ce0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:8d:cf:31:8a:85:c8:10:5e:19:34:c4:27:
37:38:59:7b:50:b3:4c:fb:f6:3c:1f:77:8c:ec:74:
20:9f:9f:b0:0a:17:6a:0b:57:28:3a:6b:dc:f7:33:
7a:37:2e:10:8f:93:71:1c:4e:cf:1d:a4:d2:9a:50:
2b:3b:4a:71:1f:ca:49:2e:7e:98:fc:67:3e:8a:31:
57:90:a7:1d:37:36:92:82:a0:89:ca:e2:87:fe:25:
21:03:dd:6e:25:bb:24:06:29:58:c0:65:87:0f:fa:
06:6a:c8:25:24:8d:aa:30:ca:da:16:50:d6:c3:1b:
a4:10:41:68:e0:3e:88:f6:bc:52:e6:2f:15:42:72:
8d:71:24:d3:7c:f8:51:91:eb:0b:a8:40:20:dd:2f:
58:ac:ff:7e:f6:9d:bb:76:6f:41:0d:0b:f6:1b:53:
df:fd:e8:7d:e9:46:9c:7c:98:dd:a4:57:cc:7e:b4:
a7:6f:a5:df:e8:64:86:de:ed:dc:77:19:8f:c2:f4:
c8:53:17:6a:b6:60:6b:fd:f1:e1:39:d3:78:91:ea:
a6:d6:ed:94:74:0c:30:eb:cb:c9:8f:ae:b1:7d:8a:
69:58:fc:a7:8f:47:be:27:fe:6e:55:dc:72:cd:e3:
eb:ce:08:b7:d7:e9:d5:62:48:94:7b:dd:de:4b:4e:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C9:16:3D:03:CE:29:1F:1A:1B:7F:24:A5:A5:FF:60:8A:0C:E0:EF
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VskWPQPOKR8aG38kpaX_YIoM4O8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.136.24.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7b:13:19:9b:fa:7e:a9:1a:6a:59:d1:6a:d1:a9:ef:7b:41:
fc:ae:b3:3b:16:dd:d8:93:48:4d:10:17:fb:62:53:2e:d0:c0:
bf:3e:8c:10:bc:4b:d3:ef:b9:98:2c:3a:d8:57:e5:2e:b0:a5:
fc:44:8a:a1:49:f2:3b:1f:11:9c:2b:f9:42:a8:58:b1:4c:e7:
f9:fe:de:e7:17:1d:5e:eb:aa:c2:f9:18:10:68:d5:f9:51:68:
53:48:c1:79:fb:f0:0a:04:15:20:3c:20:d5:61:bd:8c:a1:84:
7f:02:86:55:a4:9c:df:9f:9f:64:eb:1c:06:b1:0a:8e:29:53:
05:d4:5a:51:e9:17:35:c5:f8:6d:82:85:e4:f5:23:62:a5:7e:
c1:44:30:b6:f5:7f:75:9b:d8:bb:64:0a:1c:26:6f:49:b9:8a:
10:a0:23:5f:e9:38:41:43:98:6e:2f:4a:c3:8f:7c:bd:9c:04:
bf:c3:b0:fd:76:70:8d:3e:57:0a:fb:3d:e4:85:73:4e:ea:36:
7c:66:5f:75:a2:aa:5f:e0:32:cd:f9:aa:d3:13:e9:65:31:b2:
7d:36:dc:ba:f1:9f:96:d7:db:c3:08:2c:c7:de:a6:d7:3a:ee:
ef:a6:7b:01:92:b0:0f:cb:de:46:25:ee:75:c8:ef:31:f2:de:
7f:8b:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:57:09 2026 by rpki-client