Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/vLOjUUwtaa2X8-IAaOxu3DokPYs.roa
File: vLOjUUwtaa2X8-IAaOxu3DokPYs.roa (raw, json)
Hash identifier: Bd/6/C/bLXGN6G8sPVtzxe1SWgzPo0VD9bGAGFxwbq0=
Subject key identifier: BC:B3:A3:51:4C:2D:69:AD:97:F3:E2:00:68:EC:6E:DC:3A:24:3D:8B
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 019E22A7B5CA37B1C2DE1EB9D291CDA40229
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/vLOjUUwtaa2X8-IAaOxu3DokPYs.roa
Signing time: Wed 13 May 2026 18:44:36 +0000
ROA not before: Wed 13 May 2026 18:44:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.187.16.0/24 maxlen: 24
89.187.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:a7:b5:ca:37:b1:c2:de:1e:b9:d2:91:cd:a4:02:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: May 13 18:44:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcb3a3514c2d69ad97f3e20068ec6edc3a243d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:8b:2b:dc:49:b9:c6:3b:1c:f9:cb:02:08:
54:ef:99:f9:9b:0c:10:5c:0a:49:f7:72:8f:ba:f3:
47:ae:6d:aa:94:1a:9c:8d:83:d0:65:e0:ed:7a:c1:
14:a1:bb:4d:2a:b3:b4:14:2f:bc:98:72:d2:c1:37:
46:76:30:29:cd:35:e3:fe:db:4f:19:72:10:61:22:
8f:e4:d5:20:92:32:46:e8:83:18:28:0c:4f:d2:19:
d4:a0:2c:dd:33:84:da:35:b4:7e:85:57:9e:5b:a4:
02:a2:cc:70:28:84:ce:16:8e:ed:62:7a:25:1f:a9:
4c:c8:91:af:e1:03:34:88:bc:0e:75:68:2c:30:1c:
c0:7e:35:8e:a9:d9:aa:68:49:a2:3a:ab:49:61:ee:
ac:ee:50:e9:e3:30:9c:ce:db:c0:3e:9f:e5:28:45:
65:a8:32:cb:d9:d0:fc:7b:42:bd:9b:88:6a:a3:71:
16:54:e0:73:20:f7:05:4f:55:05:82:63:48:f9:20:
32:44:b0:aa:3a:d5:a2:54:23:72:a0:70:ef:f3:be:
86:54:36:f6:a2:e7:db:f4:f3:23:8d:0d:4d:f3:61:
3f:dc:1c:8b:53:be:19:25:e5:d4:f2:34:9d:04:e8:
d0:7f:c0:ed:cc:07:d2:e4:3a:05:c6:bb:1d:0b:11:
08:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:A3:51:4C:2D:69:AD:97:F3:E2:00:68:EC:6E:DC:3A:24:3D:8B
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/vLOjUUwtaa2X8-IAaOxu3DokPYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.16.0/24
89.187.30.0/24
Signature Algorithm: sha256WithRSAEncryption
30:0d:78:49:5c:d0:39:4f:71:07:06:a6:92:34:80:81:5c:e3:
a5:ae:83:f0:0e:4a:e8:3f:62:c4:e2:92:c9:8e:5c:0f:b8:f8:
d3:d1:42:b5:e0:81:21:92:6b:31:ae:aa:af:69:ec:81:3c:c8:
a2:87:b7:58:0d:38:c0:1e:e3:c9:9b:58:ce:04:2c:e8:d4:0b:
fe:39:48:10:c6:50:c5:2f:eb:e5:bf:d1:55:b3:c2:98:8a:27:
59:b6:42:9d:b5:c7:f3:59:9e:ee:72:5e:5c:5e:c4:d5:84:bf:
e7:a9:4e:6f:92:9b:5e:cd:02:b3:8d:6b:35:d3:ea:2e:a0:71:
22:ea:ae:c4:72:b6:43:f6:d0:2c:11:19:0e:7b:52:c5:79:51:
33:3e:20:41:18:d2:61:90:7d:f2:71:75:78:08:e9:5d:c7:ec:
e8:f5:7d:f7:54:cf:b6:89:3a:52:0a:3e:68:1c:4b:01:a2:f0:
24:f7:58:c3:a5:97:68:03:42:6c:24:f9:f3:47:99:da:fd:20:
54:b2:8c:48:68:a7:d7:d4:d0:cc:0b:12:21:33:48:94:e4:fb:
f1:d3:66:f7:f6:83:4f:73:81:ce:96:c2:12:09:f3:1b:dd:ea:
6e:9c:c2:fe:8e:3a:1f:d6:a8:2a:1e:6f:c1:11:c6:4f:ab:b2:
79:36:40:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4ip7XKN7HC3h650pHNpAIpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjYwNTEzMTg0NDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2IzYTM1MTRjMmQ2OWFkOTdmM2UyMDA2OGVjNmVkYzNhMjQzZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu6LK9xJucY7HPnLAghU75n5mwwQ
XApJ93KPuvNHrm2qlBqcjYPQZeDtesEUobtNKrO0FC+8mHLSwTdGdjApzTXj/ttP
GXIQYSKP5NUgkjJG6IMYKAxP0hnUoCzdM4TaNbR+hVeeW6QCosxwKITOFo7tYnol
H6lMyJGv4QM0iLwOdWgsMBzAfjWOqdmqaEmiOqtJYe6s7lDp4zCcztvAPp/lKEVl
qDLL2dD8e0K9m4hqo3EWVOBzIPcFT1UFgmNI+SAyRLCqOtWiVCNyoHDv876GVDb2
oufb9PMjjQ1N82E/3ByLU74ZJeXU8jSdBOjQf8DtzAfS5DoFxrsdCxEI+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLyzo1FMLWmtl/PiAGjsbtw6JD2LMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvdkxPalVVd3RhYTJYOC1JQWFPeHUzRG9rUFlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbsQAwQA
WbseMA0GCSqGSIb3DQEBCwUAA4IBAQAwDXhJXNA5T3EHBqaSNICBXOOlroPwDkro
P2LE4pLJjlwPuPjT0UK14IEhkmsxrqqvaeyBPMiih7dYDTjAHuPJm1jOBCzo1Av+
OUgQxlDFL+vlv9FVs8KYiidZtkKdtcfzWZ7ucl5cXsTVhL/nqU5vkptezQKzjWs1
0+ouoHEi6q7EcrZD9tAsERkOe1LFeVEzPiBBGNJhkH3ycXV4COldx+zo9X33VM+2
iTpSCj5oHEsBovAk91jDpZdoA0JsJPnzR5na/SBUsoxIaKfX1NDMCxIhM0iU5Pvx
02b39oNPc4HOlsISCfMb3epunML+jjof1qgqHm/BEcZPq7J5NkBX
-----END CERTIFICATE-----
Generated at Fri May 15 08:17:20 2026 by rpki-client