Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/rVEW-7Sd0ZIE76co3m5-HgCbA7w.roa
File: rVEW-7Sd0ZIE76co3m5-HgCbA7w.roa (raw, json)
Hash identifier: PU2NpzzbSSnNZq8qpaqz/4g6cJyXRS2ckAK4Ohoe6zg=
Subject key identifier: AD:51:16:FB:B4:9D:D1:92:04:EF:A7:28:DE:6E:7E:1E:00:9B:03:BC
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 019FEB17C51A7DB0B266081D3D29D47B734B
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/rVEW-7Sd0ZIE76co3m5-HgCbA7w.roa
Signing time: Mon 10 Aug 2026 09:53:51 +0000
ROA not before: Mon 10 Aug 2026 09:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 79.110.4.0/22 maxlen: 22
94.231.229.0/24 maxlen: 24
94.231.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 09:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:17:c5:1a:7d:b0:b2:66:08:1d:3d:29:d4:7b:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Aug 10 09:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad5116fbb49dd19204efa728de6e7e1e009b03bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:36:7e:93:85:96:e1:a5:36:ac:3c:10:1b:c7:
0c:57:ad:b6:5e:9f:62:a5:46:2b:04:f4:9d:a1:d3:
30:70:89:89:43:6e:0b:b6:7f:98:d1:18:32:0e:48:
85:24:ca:1c:31:79:a3:df:ed:4e:b0:57:13:4e:8f:
87:74:6d:55:88:8d:a6:a1:bc:33:f4:14:c1:71:67:
9c:e3:05:91:03:01:ee:ff:f8:ef:22:07:ad:8b:4d:
23:d6:24:27:f4:00:5c:34:28:ca:6d:ad:4b:78:fb:
3c:e4:55:db:db:da:59:25:7d:d0:2d:b0:d0:ea:23:
2d:67:c3:bf:fd:43:6a:fd:f6:d1:64:44:47:fd:ca:
0d:64:28:e9:20:1b:72:60:73:30:c8:73:38:59:3b:
48:dc:aa:57:d7:c3:d1:d9:ec:92:9b:9d:70:e0:69:
32:85:ee:0b:f2:b3:d5:3d:89:7a:7c:43:d9:c4:db:
1f:30:6e:50:86:55:1b:69:35:1b:d4:18:c2:d4:09:
5b:85:73:00:2a:eb:7e:4d:1d:d1:72:52:e6:97:45:
14:3f:6e:4a:60:78:dc:40:83:d0:24:b8:ed:5f:19:
6b:60:97:72:5a:3e:6f:12:ef:8c:e8:d6:a2:d5:9d:
3b:6a:b1:3c:8f:47:e4:f5:5e:bb:8d:37:31:d6:53:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:16:FB:B4:9D:D1:92:04:EF:A7:28:DE:6E:7E:1E:00:9B:03:BC
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/rVEW-7Sd0ZIE76co3m5-HgCbA7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.4.0/22
94.231.229.0/24
94.231.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:69:02:8f:1e:0a:68:b0:25:30:b9:41:6b:da:1a:80:7b:18:
c5:9a:0d:2c:97:27:c4:0b:df:44:6e:06:a1:7b:54:5a:82:38:
f7:71:da:96:19:e9:b3:1c:fa:b8:60:eb:c3:3d:38:c0:d0:16:
d2:97:5b:2f:da:b5:79:2d:1e:6a:15:5c:e8:d6:f1:f7:1b:c9:
e4:95:f9:0a:09:86:a7:f3:96:a2:7b:bf:14:9e:d2:f1:5b:33:
d9:87:56:7f:f1:70:23:25:6e:22:64:9f:e4:30:52:80:e6:f4:
82:24:71:eb:62:ce:bf:d8:58:47:2a:bf:66:93:44:86:ea:9b:
56:19:af:55:b1:f4:87:54:88:ca:c6:17:e0:14:46:5d:ed:d5:
91:35:27:c1:c2:6f:f1:58:21:90:7d:9c:c6:99:c5:d3:51:20:
6c:cf:15:1f:d9:74:ff:63:27:d2:6c:ce:4a:b8:15:71:69:fe:
9d:e5:3d:7c:ec:cb:d4:8e:36:78:3c:64:3c:02:b1:6b:67:94:
c4:ef:03:30:ff:a3:2f:53:18:49:99:c0:d5:a6:91:01:ef:5c:
96:0d:43:8d:48:ee:da:fd:35:e4:05:be:00:c5:d4:19:ab:91:
2e:9c:f1:70:f8:09:ae:da:a2:0d:4c:c0:70:09:e1:da:27:0b:
c0:5f:ae:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:56 2026 by rpki-client