Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VisxbCU2DSE-XBaCKk3We7yFE8E.roa
File: VisxbCU2DSE-XBaCKk3We7yFE8E.roa (raw, json)
Hash identifier: 08tYheUG72bZOaRh0pzt7Wwkfuh0S/+eEjL6V4s+kp0=
Subject key identifier: 56:2B:31:6C:25:36:0D:21:3E:5C:16:82:2A:4D:D6:7B:BC:85:13:C1
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019FB19A19E6BC0C2DC0DA3955DFC669D53A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VisxbCU2DSE-XBaCKk3We7yFE8E.roa
Signing time: Thu 30 Jul 2026 05:58:14 +0000
ROA not before: Thu 30 Jul 2026 05:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 45.88.224.0/24 maxlen: 24
91.212.216.0/24 maxlen: 24
194.69.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:9a:19:e6:bc:0c:2d:c0:da:39:55:df:c6:69:d5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jul 30 05:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=562b316c25360d213e5c16822a4dd67bbc8513c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:82:6d:fa:d2:96:ba:88:13:73:3b:23:9f:32:
f5:a1:02:e9:c0:7d:b0:81:8a:d7:0f:45:b9:eb:7e:
57:9b:be:ba:c6:92:f4:c3:1e:ea:a5:06:dc:80:af:
bb:92:b3:23:33:97:05:90:8a:94:e6:2e:70:af:72:
9c:66:4c:cc:d7:d3:c0:27:81:fd:ef:19:4b:5e:f3:
5e:29:19:29:34:94:7b:f3:0e:93:c0:b5:a5:f5:2f:
b1:c0:8d:ea:3e:fa:5d:53:3b:81:57:2f:00:ac:23:
ec:b6:39:fe:aa:f3:1f:9b:b1:a4:ba:94:cb:58:75:
a1:71:ea:10:90:1a:62:1c:42:e3:73:0f:dd:82:f7:
d0:08:e2:02:67:f2:27:6f:b6:25:d4:b8:49:d8:25:
31:1f:53:a6:96:1c:b4:53:bd:c1:fd:32:1b:af:74:
de:8c:62:c3:cb:9e:22:4c:37:91:5e:6e:4f:45:be:
d9:b5:0e:9e:ec:39:f9:42:b7:65:d0:6d:23:e2:35:
10:36:9c:cc:cc:db:63:09:c6:b1:19:3a:79:2b:f1:
5c:61:55:33:35:34:02:93:72:10:3c:28:48:00:1c:
dd:e4:6a:67:48:5f:85:f3:34:04:f5:3c:63:36:69:
e2:4e:57:74:06:32:7f:b9:ff:74:1c:05:20:41:9b:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:31:6C:25:36:0D:21:3E:5C:16:82:2A:4D:D6:7B:BC:85:13:C1
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VisxbCU2DSE-XBaCKk3We7yFE8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.224.0/24
91.212.216.0/24
194.69.163.0/24
Signature Algorithm: sha256WithRSAEncryption
28:c8:aa:27:6d:b9:80:15:3c:4d:93:5e:49:10:a0:7f:cb:fc:
7f:64:15:4a:5c:0a:fd:b1:4a:4b:f8:74:c6:24:92:3d:b5:04:
05:7b:e7:f7:b5:22:eb:a9:0e:91:1e:c2:f0:7c:2b:05:15:6b:
a0:bb:30:cb:fe:e2:7e:3a:68:1c:ff:e5:2a:35:ea:89:91:c2:
ee:dc:8b:79:41:bc:bb:34:19:5c:aa:76:95:81:63:ad:fc:bb:
f1:fd:50:5b:95:5e:b6:06:c7:76:16:c3:af:a2:94:33:26:4a:
0e:d0:70:e3:3e:8b:38:6d:a6:f9:12:9b:c8:e1:07:ab:ea:ab:
81:cf:98:7f:69:81:9d:25:7d:bf:bd:d6:2c:ce:39:6b:01:a6:
76:64:44:e3:d5:9f:d0:45:ec:e1:b5:7b:2a:49:ac:59:68:3b:
3f:bb:7d:57:27:72:8b:a5:f8:ae:f2:69:ca:3e:99:5d:b3:c4:
7b:f1:e3:11:38:94:cf:01:58:5b:3c:27:a7:ba:44:89:3d:ee:
f0:80:20:97:e2:19:39:da:fd:6b:85:67:00:39:62:d9:51:61:
9b:d1:12:d6:56:3b:f1:91:07:c3:2f:e5:dd:7e:db:24:53:49:
c9:92:27:ca:21:29:37:6a:2d:d7:10:5e:6e:2d:a8:c7:ea:9c:
4c:6a:b5:88
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+xmhnmvAwtwNo5Vd/GadU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNzMwMDU1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjJiMzE2YzI1MzYwZDIxM2U1YzE2ODIyYTRkZDY3YmJjODUxM2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoJt+tKWuogTczsjnzL1oQLpwH2w
gYrXD0W5635Xm766xpL0wx7qpQbcgK+7krMjM5cFkIqU5i5wr3KcZkzM19PAJ4H9
7xlLXvNeKRkpNJR78w6TwLWl9S+xwI3qPvpdUzuBVy8ArCPstjn+qvMfm7GkupTL
WHWhceoQkBpiHELjcw/dgvfQCOICZ/Inb7Yl1LhJ2CUxH1Omlhy0U73B/TIbr3Te
jGLDy54iTDeRXm5PRb7ZtQ6e7Dn5Qrdl0G0j4jUQNpzMzNtjCcaxGTp5K/FcYVUz
NTQCk3IQPChIABzd5GpnSF+F8zQE9TxjNmniTld0BjJ/uf90HAUgQZsdXQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFYrMWwlNg0hPlwWgipN1nu8hRPBMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvVmlzeGJDVTJEU0UtWEJhQ0trM1dlN3lGRThFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVjgAwQA
W9TYAwQAwkWjMA0GCSqGSIb3DQEBCwUAA4IBAQAoyKonbbmAFTxNk15JEKB/y/x/
ZBVKXAr9sUpL+HTGJJI9tQQFe+f3tSLrqQ6RHsLwfCsFFWuguzDL/uJ+Omgc/+Uq
NeqJkcLu3It5Qby7NBlcqnaVgWOt/Lvx/VBblV62Bsd2FsOvopQzJkoO0HDjPos4
bab5EpvI4Qer6quBz5h/aYGdJX2/vdYszjlrAaZ2ZETj1Z/QRezhtXsqSaxZaDs/
u31XJ3KLpfiu8mnKPplds8R78eMROJTPAVhbPCenukSJPe7wgCCX4hk52v1rhWcA
OWLZUWGb0RLWVjvxkQfDL+XdftskU0nJkifKISk3ai3XEF5uLajH6pxMarWI
-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:07 2026 by rpki-client