Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/5EED2rg7bPd6KHL1cmrVFenpHJk.roa
File: 5EED2rg7bPd6KHL1cmrVFenpHJk.roa (raw, json)
Hash identifier: mZKSwsjzWY7syhitlvb+bKoMm3FDsN5vBBLtF87ShRE=
Subject key identifier: E4:41:03:DA:B8:3B:6C:F7:7A:28:72:F5:72:6A:D5:15:E9:E9:1C:99
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 01A1280FA0999011CEC1867ADEB203897B79
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/5EED2rg7bPd6KHL1cmrVFenpHJk.roa
Signing time: Sat 10 Oct 2026 23:04:35 +0000
ROA not before: Sat 10 Oct 2026 23:04:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218664
IP address blocks: 95.85.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0f:a0:99:90:11:ce:c1:86:7a:de:b2:03:89:7b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Oct 10 23:04:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e44103dab83b6cf77a2872f5726ad515e9e91c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:61:32:19:c1:27:a9:30:31:5d:aa:d8:5b:
17:aa:2a:ec:32:15:17:1b:e7:83:94:1b:90:c3:9c:
64:40:82:0e:53:fd:bd:e4:12:37:74:f9:5a:55:f1:
6b:40:c5:39:65:43:d5:0f:85:82:cc:40:88:05:0b:
ae:d2:03:12:b8:9b:63:07:7e:3d:b4:61:86:95:38:
5b:42:d9:f8:15:97:79:dc:9f:bb:ac:58:8e:5a:66:
9f:1a:72:6b:f3:06:32:72:34:a0:9c:7f:04:01:6b:
fa:29:af:18:e2:08:58:85:e0:c6:e4:6c:4e:c2:51:
60:68:43:12:cf:52:c2:34:5f:bd:47:f3:0d:0b:f7:
e5:00:8a:69:4f:ed:11:f3:37:fe:b5:a8:3a:50:01:
4a:17:c7:9a:06:d0:e9:ed:60:d1:c9:2e:bb:c8:7b:
59:d2:8e:35:9c:aa:c4:eb:1d:a9:8f:61:b3:4e:aa:
01:ab:4b:47:e6:63:55:bc:f9:aa:cd:63:f0:e1:1f:
91:6b:d2:41:c5:47:dd:c5:14:e4:0e:74:e3:ef:b2:
91:50:56:df:0b:cb:c1:31:62:c5:ea:87:77:40:07:
0b:f2:99:8d:29:06:6c:e1:94:34:06:83:2c:89:0c:
c2:b5:e5:99:c6:47:0f:d1:08:81:c7:e3:2e:7f:c8:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:41:03:DA:B8:3B:6C:F7:7A:28:72:F5:72:6A:D5:15:E9:E9:1C:99
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/5EED2rg7bPd6KHL1cmrVFenpHJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
07:42:e9:db:5c:58:a3:b0:cb:ce:e2:27:1f:3f:b1:85:e5:28:
5e:2d:1e:5e:5a:39:a2:52:43:d9:a4:39:39:47:7f:30:b9:b2:
42:1b:31:02:ba:6a:ad:bf:06:61:0e:a5:3a:16:bf:ec:fd:54:
6c:f7:24:1a:6f:ae:5e:ce:c1:a3:a5:4d:23:7b:ce:f1:68:ca:
3b:e0:14:e8:17:7d:6a:bf:5e:c6:94:a0:fa:ef:5d:45:45:e3:
ef:9e:79:6a:d2:2a:ac:fd:49:ef:3d:0e:2e:4b:a5:7e:34:40:
63:8f:b5:8f:2b:52:e3:2f:73:84:64:69:e4:5a:6f:85:fe:a5:
30:96:4c:e7:09:5a:5a:a4:22:3f:a6:b7:75:55:0c:a6:26:90:
83:fc:3b:73:8b:e0:f8:e9:b4:af:e6:db:e5:c2:e7:d6:99:cf:
a4:dd:fb:bf:c3:ac:8a:52:f9:f6:43:a4:11:07:f5:05:49:13:
b9:dc:39:24:53:13:3b:26:42:e5:89:62:37:4f:7d:28:0c:81:
23:a7:93:a0:16:af:c2:44:0c:77:53:8d:f2:e3:90:5d:51:0f:
f8:9f:b4:e0:a3:2b:19:e6:62:9a:a7:b2:98:ef:17:e3:b7:87:
36:bc:e1:f2:7e:2e:fc:5d:af:e1:9e:0c:6e:69:e3:be:be:9e:
c2:49:73:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:46 2026 by rpki-client