Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/VUpT56KVsmU47HgnJTmy6lm0l4I.roa
File: VUpT56KVsmU47HgnJTmy6lm0l4I.roa (raw, json)
Hash identifier: UuMxeUlJVpgtH5rpmgJ72Wviicqz3824+c0tpGqdkbE=
Subject key identifier: 55:4A:53:E7:A2:95:B2:65:38:EC:78:27:25:39:B2:EA:59:B4:97:82
Certificate issuer: /CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Certificate serial: 01A15975CBAADBE87ABBA07F1AAD3AAE535C
Authority key identifier: 35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/VUpT56KVsmU47HgnJTmy6lm0l4I.roa
Signing time: Tue 20 Oct 2026 13:17:34 +0000
ROA not before: Tue 20 Oct 2026 13:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49581
IP address blocks: 80.75.212.0/24 maxlen: 24
80.91.223.0/24 maxlen: 24
80.224.218.0/24 maxlen: 24
80.224.219.0/24 maxlen: 24
91.212.121.0/24 maxlen: 24
146.19.191.0/24 maxlen: 24
176.97.210.0/24 maxlen: 24
185.91.127.0/24 maxlen: 24
193.111.248.0/24 maxlen: 24
193.111.249.0/24 maxlen: 24
193.111.250.0/24 maxlen: 24
193.141.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:75:cb:aa:db:e8:7a:bb:a0:7f:1a:ad:3a:ae:53:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351c7b5607c536657fd5748f6f65b24ac12eb17d
Validity
Not Before: Oct 20 13:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=554a53e7a295b26538ec78272539b2ea59b49782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bb:77:ed:ef:6b:19:d4:4e:9c:d1:6d:ee:5a:
a2:c2:ad:1c:f5:c3:ec:3f:23:07:ec:78:e1:57:65:
2c:4d:a2:70:8a:2e:e6:c9:62:88:3c:08:e4:fe:f1:
40:77:2c:8e:1d:c6:1b:ca:70:e3:cf:50:17:b7:fe:
5d:77:ae:ac:31:08:5a:e4:87:4c:03:e7:22:63:85:
fd:8f:43:62:57:41:3d:20:18:36:6d:e5:2d:49:e2:
44:bf:5e:b8:b2:eb:4d:fb:4a:dc:7f:ee:53:e7:fa:
87:06:17:d2:33:2e:f0:27:b9:d1:09:2d:b0:ad:69:
c5:63:d6:64:84:5d:f5:9c:8b:97:f6:76:ee:50:26:
53:5e:dc:74:8d:e6:49:10:2b:27:36:91:08:b9:7d:
8e:bf:09:4c:c9:a1:06:e2:21:0c:b6:61:ac:79:50:
cd:97:b3:7d:fb:3a:1b:0c:ef:40:37:9f:2e:d8:31:
67:1a:bd:f0:96:68:f2:13:6b:29:18:fb:2e:f3:de:
43:07:14:c0:c2:4a:3a:f2:49:b5:6c:5f:04:41:1a:
4a:15:e9:98:88:27:7d:e5:0c:42:e3:b1:b2:cc:4c:
28:89:52:c4:33:ef:7f:b3:2e:89:2f:24:72:f3:20:
8c:b4:b5:db:dd:4c:90:d4:92:3a:94:4b:6e:6e:63:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4A:53:E7:A2:95:B2:65:38:EC:78:27:25:39:B2:EA:59:B4:97:82
X509v3 Authority Key Identifier:
keyid:35:1C:7B:56:07:C5:36:65:7F:D5:74:8F:6F:65:B2:4A:C1:2E:B1:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRx7VgfFNmV_1XSPb2WySsEusX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/VUpT56KVsmU47HgnJTmy6lm0l4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c1ff21-5ac2-4e50-936c-651707c91fd3/1/NRx7VgfFNmV_1XSPb2WySsEusX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.212.0/24
80.91.223.0/24
80.224.218.0/23
91.212.121.0/24
146.19.191.0/24
176.97.210.0/24
185.91.127.0/24
193.111.248.0-193.111.250.255
193.141.60.0/24
Signature Algorithm: sha256WithRSAEncryption
43:4c:bd:29:16:ec:fd:8f:e7:37:36:1b:9b:e2:df:9f:6a:9b:
ab:7f:0b:11:81:38:c5:43:be:f8:a2:76:51:c1:94:ff:bb:fd:
6b:b6:47:a0:ba:2d:1b:31:fe:a0:de:b5:d7:06:99:69:5b:54:
e6:32:64:fd:c1:98:1f:72:9e:0e:d4:21:b7:b3:c2:17:64:34:
43:7e:df:7d:42:45:63:16:20:d5:f3:5a:88:d8:33:9b:8e:17:
02:0d:0a:d6:85:2f:29:83:36:2e:5b:11:41:74:31:59:8a:1b:
a2:09:14:21:66:5a:c9:5b:c4:9a:8d:bc:9f:e2:69:55:42:2f:
35:67:8a:a7:3e:0b:9e:53:25:37:08:0b:e7:62:42:dc:f5:5d:
ab:33:de:e2:54:da:c9:63:da:96:67:10:7a:60:14:bf:fa:2f:
4d:fe:62:f4:5c:47:80:e6:1c:7c:d7:55:7f:c8:c7:57:fe:9a:
c5:48:58:a9:6e:b0:ed:b2:a7:a0:83:49:17:78:70:eb:2e:5f:
fb:c7:2e:aa:cb:a1:7a:2c:4a:8d:01:f6:65:47:cf:6b:85:19:
bc:86:cb:d0:c1:de:8f:e4:57:73:59:ef:7c:67:e6:bd:32:86:
de:69:f7:d5:b3:20:18:07:e5:88:8e:df:00:5e:0b:88:7a:b2:
f5:71:b0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:35:32 2026 by rpki-client