Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/VbqiHUDK1PIJEBaiJhDeoeoYjew.roa
File: VbqiHUDK1PIJEBaiJhDeoeoYjew.roa (raw, json)
Hash identifier: mP4P1oW2SG0ormQVw+tYX5EdF4Ukm8CJp18u6atyrdU=
Subject key identifier: 55:BA:A2:1D:40:CA:D4:F2:09:10:16:A2:26:10:DE:A1:EA:18:8D:EC
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 01A0E8993C7E5F29F6123622BD1FC0525F34
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/VbqiHUDK1PIJEBaiJhDeoeoYjew.roa
Signing time: Mon 28 Sep 2026 15:19:11 +0000
ROA not before: Mon 28 Sep 2026 15:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 91.216.155.0/24 maxlen: 24
91.217.90.0/24 maxlen: 24
91.226.212.0/24 maxlen: 24
91.226.213.0/24 maxlen: 24
176.111.44.0/24 maxlen: 24
193.169.86.0/24 maxlen: 24
193.203.50.0/23 maxlen: 23
193.203.50.0/24 maxlen: 24
193.203.51.0/24 maxlen: 24
195.211.40.0/23 maxlen: 23
2a13:f580::/48 maxlen: 48
2a13:f580:5::/48 maxlen: 48
2a13:f580:6::/48 maxlen: 48
2a13:f580:7::/48 maxlen: 48
2a13:f580:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:99:3c:7e:5f:29:f6:12:36:22:bd:1f:c0:52:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Sep 28 15:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55baa21d40cad4f2091016a22610dea1ea188dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:f2:60:0a:ba:73:f2:23:60:80:9a:5d:cd:
26:1a:5e:6c:ca:0a:5c:ab:34:15:1f:6a:89:60:c9:
3e:f9:c7:67:38:c1:93:b5:ed:03:97:5f:38:1d:56:
e9:21:3e:a1:3c:a7:8e:82:30:14:3c:ac:4d:0d:f2:
89:c0:08:f9:d4:33:76:ef:ff:18:ea:c6:d9:81:b4:
0b:ee:cb:ce:48:24:54:3d:3d:ff:72:df:ae:a5:13:
83:40:6a:39:bc:3b:88:68:50:0c:07:4f:59:89:f7:
ed:ee:ea:0e:ff:01:34:48:38:e0:16:f6:57:12:3c:
0c:ac:0b:9d:72:ed:aa:cc:08:8b:fe:3c:c4:d2:4e:
f6:01:7b:29:ee:19:46:7c:5d:78:94:c0:5b:7e:c6:
90:7f:37:8f:1d:48:7f:cf:c3:80:b2:55:14:a4:a0:
00:80:65:fa:20:4e:ba:34:b6:d1:c7:df:02:4c:68:
61:72:6e:3a:87:45:c2:fe:f9:dc:9e:2e:74:76:81:
a7:88:5d:a2:c5:53:00:6f:a4:a2:a9:12:12:2c:4d:
ad:01:84:19:08:b9:80:29:4a:8b:52:20:eb:78:06:
6f:8c:1f:80:43:a6:57:6c:ef:e3:9e:e1:42:03:eb:
22:ee:f8:03:2d:c1:de:cd:89:33:e6:08:40:4c:c8:
75:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:A2:1D:40:CA:D4:F2:09:10:16:A2:26:10:DE:A1:EA:18:8D:EC
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/VbqiHUDK1PIJEBaiJhDeoeoYjew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.155.0/24
91.217.90.0/24
91.226.212.0/23
176.111.44.0/24
193.169.86.0/24
193.203.50.0/23
195.211.40.0/23
IPv6:
2a13:f580::/48
2a13:f580:5::-2a13:f580:8:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:61:f0:98:14:df:c5:65:f7:57:25:28:e6:c6:5d:1d:9d:9a:
04:ef:e0:b7:67:64:28:b9:94:72:8d:a7:34:1f:df:57:4f:cd:
24:a7:57:4f:e0:b2:07:90:d8:69:e7:4f:0d:90:05:fb:23:69:
9c:76:80:81:d3:e2:bf:08:c3:4c:7b:45:31:d0:72:0f:c9:66:
3b:b8:ab:d8:9e:81:02:36:3a:68:2c:41:e0:57:a0:88:c5:96:
1c:8e:44:aa:4b:ff:34:1c:04:ed:9a:b2:ce:cd:da:bb:48:9a:
86:3b:60:77:96:21:44:3b:9a:64:df:7c:29:3b:e3:c2:51:1d:
d7:c3:1e:c0:ec:4f:57:a2:9f:6e:d6:3b:6d:6a:32:e8:0e:c1:
c4:00:66:47:a7:1f:eb:83:7a:de:07:bd:f8:11:3c:b3:49:6a:
8d:e4:39:9e:86:14:98:9f:05:e2:51:d4:f9:d2:06:5b:0f:2a:
f1:ad:0f:7a:db:d2:68:0d:13:c9:27:44:a6:2e:a4:b7:40:ce:
83:1a:1b:0a:30:89:d4:00:f6:f4:c0:00:20:bf:dd:c2:22:8e:
ad:89:47:80:2e:2d:e0:49:81:58:5c:b6:6e:ea:38:68:78:41:
4a:31:43:bb:fb:1a:9d:4b:dd:7e:42:af:48:5d:1d:ef:f8:24:
6b:e2:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:18:40 2026 by rpki-client