Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VJYk1fh6ZmHUO1Jqu1si92MgvoU.roa
File: VJYk1fh6ZmHUO1Jqu1si92MgvoU.roa (raw, json)
Hash identifier: 2h+QYJQWV8fw/11Mw67t2evV+htfCWAkvqwWDRo0nWE=
Subject key identifier: 54:96:24:D5:F8:7A:66:61:D4:3B:52:6A:BB:5B:22:F7:63:20:BE:85
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690CC20BBD81595496F2CFCBA9DE42
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VJYk1fh6ZmHUO1Jqu1si92MgvoU.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215026
IP address blocks: 89.213.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:c2:0b:bd:81:59:54:96:f2:cf:cb:a9:de:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=549624d5f87a6661d43b526abb5b22f76320be85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:93:7a:45:f9:bf:d7:64:0f:c0:52:c5:17:
97:5a:50:09:ac:e9:2e:e2:33:bd:80:54:ee:19:6c:
ae:0c:fe:cc:bf:d5:78:c5:a5:4d:45:f5:1e:28:48:
90:97:72:35:16:ac:fd:a5:78:cf:a9:8f:30:c0:af:
9c:8a:58:32:1a:6c:97:9c:09:1f:34:40:d5:e2:11:
8d:8b:38:de:2b:5e:67:4d:76:9c:85:43:c8:e3:a6:
19:e5:2f:f3:dc:0e:d9:1a:39:5f:1e:95:c9:cf:e6:
a2:af:7e:e9:62:6a:53:fb:da:2d:8b:2d:6e:95:80:
4f:b0:50:5c:1a:45:de:72:20:d8:08:42:6c:75:d5:
83:80:c9:d9:c1:25:dd:43:c5:84:03:de:29:d0:ec:
5f:f0:8f:e0:b8:f3:4f:fd:b1:2a:37:e8:19:2c:a0:
4d:87:8a:50:f3:96:a0:ec:9e:7b:91:1a:bd:bb:57:
77:39:64:19:a3:11:53:05:a0:19:17:b5:25:72:85:
8d:b6:0d:59:89:6b:a1:3f:b1:68:f3:56:2e:74:b5:
95:2b:db:98:72:e6:e7:0a:b8:58:7c:c7:db:d6:69:
37:fb:43:13:74:0e:c1:a2:4f:a2:c5:d0:cd:01:d3:
ec:df:56:36:01:8e:f3:26:9e:21:87:c8:4e:ca:0b:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:24:D5:F8:7A:66:61:D4:3B:52:6A:BB:5B:22:F7:63:20:BE:85
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VJYk1fh6ZmHUO1Jqu1si92MgvoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.96.0/24
Signature Algorithm: sha256WithRSAEncryption
38:73:d1:1f:62:2c:9b:6d:e8:2f:ca:05:b0:8c:a3:75:9a:50:
ec:9e:79:e1:07:f7:75:b0:d5:e5:bd:e3:78:38:a4:3a:ca:9a:
72:4e:1d:10:1d:d5:85:7a:72:d6:52:a7:33:93:43:f5:f7:cb:
6d:c9:92:97:e6:4c:58:09:3c:0a:23:f8:d7:32:3c:1e:af:ee:
a7:c0:1b:b8:09:6f:47:be:4a:46:12:18:0e:94:d3:1f:e9:ed:
93:03:72:6f:84:87:78:15:ab:83:a7:57:86:9e:e1:9a:ee:d1:
53:bd:34:22:fd:d1:cf:43:fe:8b:77:08:9c:a6:86:25:5f:e7:
e0:ca:2c:c5:f5:fa:f6:ef:3c:93:89:29:75:75:3f:27:36:3a:
33:b3:8e:64:2c:fb:ae:47:c9:ce:2c:a6:8b:71:67:e1:24:9d:
27:c2:15:cf:21:c4:dc:d6:48:f4:57:c4:95:d8:7c:e4:1f:c0:
98:f1:78:77:71:17:68:6a:0a:65:d8:2d:b6:00:23:31:0f:66:
d2:7f:62:a0:68:c4:30:e3:23:ea:aa:37:79:84:35:b9:ac:dd:
63:9e:bf:47:4d:34:8a:9a:91:b5:15:aa:90:97:a6:db:fd:d2:
a1:25:3e:b8:5a:b6:7c:17:14:52:c1:95:0d:d3:0f:52:a6:6e:
e1:3c:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:22:41 2026 by rpki-client