Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/Vr9ytmrCwbBqhUlYrq7bFaPmTqI.roa
File: Vr9ytmrCwbBqhUlYrq7bFaPmTqI.roa (raw, json)
Hash identifier: jg1K9QAoanry73mjJnp/KaVM7L5lfbgOuK03+5jC5lM=
Subject key identifier: 56:BF:72:B6:6A:C2:C1:B0:6A:85:49:58:AE:AE:DB:15:A3:E6:4E:A2
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019DB4C5FA48D2E7CF02C6FFBF17890AC97B
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/Vr9ytmrCwbBqhUlYrq7bFaPmTqI.roa
Signing time: Wed 22 Apr 2026 10:39:26 +0000
ROA not before: Wed 22 Apr 2026 10:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 84.247.75.0/24 maxlen: 24
84.247.113.0/24 maxlen: 24
89.149.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:c5:fa:48:d2:e7:cf:02:c6:ff:bf:17:89:0a:c9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Apr 22 10:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56bf72b66ac2c1b06a854958aeaedb15a3e64ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:d1:1f:c0:82:49:c4:8b:18:99:e8:00:46:
48:b9:3e:41:64:65:c6:69:80:07:dc:d6:e8:f2:50:
ce:17:eb:b5:55:66:d8:20:e8:19:2e:a2:60:e2:b6:
73:2d:11:1a:43:21:8c:da:6a:ff:19:82:98:02:91:
62:65:34:1e:e0:47:f4:0b:6f:0f:42:89:92:a3:07:
e8:31:07:29:09:68:6f:ca:02:e8:1d:96:ec:f9:35:
18:41:75:9c:14:18:0d:ef:d2:0c:7b:3d:65:b5:99:
e4:81:90:b1:43:bf:64:1d:5f:53:05:8c:4a:fa:d9:
96:19:8b:c5:64:d7:f0:74:fd:f5:b9:44:a9:ca:52:
5c:60:da:68:fa:ac:91:1f:e5:ad:2a:e2:f9:60:dd:
5c:4f:28:6c:c6:b7:2d:f4:71:f9:68:96:70:5c:1b:
ce:7a:5a:78:08:60:db:ea:50:3b:e8:1e:0a:9b:8d:
7a:43:d2:0f:22:6c:5e:64:c0:07:5a:df:50:9e:36:
1c:1f:d9:c1:7b:8b:69:30:60:f8:ed:2e:0b:f7:4a:
d1:90:b4:4e:12:2b:e0:7c:d4:30:f7:70:bf:54:a2:
02:be:8e:bd:32:b1:f1:2d:3b:05:93:f5:cc:e0:28:
77:e5:e5:8a:f3:df:39:13:a1:52:b7:30:c2:0b:9d:
6e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:72:B6:6A:C2:C1:B0:6A:85:49:58:AE:AE:DB:15:A3:E6:4E:A2
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/Vr9ytmrCwbBqhUlYrq7bFaPmTqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.75.0/24
84.247.113.0/24
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2f:08:68:a7:ef:75:9f:ae:1c:bd:b4:5d:3c:7b:bf:68:50:
40:d9:02:a6:f6:80:46:93:45:d2:00:19:47:15:40:2d:2a:ff:
29:a7:6f:8d:34:06:13:1a:57:cd:d2:e2:96:58:be:40:86:39:
8c:f8:e1:94:bf:00:bd:12:18:83:03:8a:98:87:eb:15:be:17:
a1:f4:60:25:0e:49:fb:f9:b2:70:c5:38:a7:da:a5:9d:af:3c:
21:b9:a1:bd:d7:c4:02:4c:47:b1:c0:89:a9:b9:e2:3d:31:66:
c8:7a:32:ec:25:cf:58:5d:bc:9d:0a:4e:03:58:4e:8f:77:47:
3e:99:ab:5d:f4:95:80:74:60:0a:bc:ee:bf:25:c5:5b:0e:2d:
13:b9:79:62:14:c6:2b:c4:6a:89:50:82:85:b6:57:40:d6:cd:
3e:de:a9:b1:ff:87:50:b3:60:55:de:64:9f:4b:0e:10:60:ad:
79:5b:31:0b:31:d2:99:66:2f:34:0d:ca:95:06:47:2c:fb:cd:
2f:7d:d9:6e:1a:07:9f:97:23:0b:8d:17:a4:2f:b5:f2:c8:5a:
c9:ef:08:19:22:d3:96:2c:e3:57:01:45:60:07:47:27:63:63:
7f:51:c5:22:39:03:0d:81:a5:fe:3e:6c:dd:70:60:e7:29:a1:
e1:8a:f6:80
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ20xfpI0ufPAsb/vxeJCsl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm
YzQ1ODIwHhcNMjYwNDIyMTAzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJmNzJiNjZhYzJjMWIwNmE4NTQ5NThhZWFlZGIxNWEzZTY0ZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIzRH8CCScSLGJnoAEZIuT5BZGXG
aYAH3Nbo8lDOF+u1VWbYIOgZLqJg4rZzLREaQyGM2mr/GYKYApFiZTQe4Ef0C28P
QomSowfoMQcpCWhvygLoHZbs+TUYQXWcFBgN79IMez1ltZnkgZCxQ79kHV9TBYxK
+tmWGYvFZNfwdP31uUSpylJcYNpo+qyRH+WtKuL5YN1cTyhsxrct9HH5aJZwXBvO
elp4CGDb6lA76B4Km416Q9IPImxeZMAHWt9QnjYcH9nBe4tpMGD47S4L90rRkLRO
EivgfNQw93C/VKICvo69MrHxLTsFk/XM4Ch35eWK8985E6FStzDCC51uEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFa/crZqwsGwaoVJWK6u2xWj5k6iMB8GA1UdIwQY
MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt
MjhhODQxZGEwYmZkLzEvVnI5eXRtckN3YkJxaFVsWXJxN2JGYVBtVHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk
LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVPdLAwQA
VPdxAwQAWZU/MA0GCSqGSIb3DQEBCwUAA4IBAQCbLwhop+91n64cvbRdPHu/aFBA
2QKm9oBGk0XSABlHFUAtKv8pp2+NNAYTGlfN0uKWWL5AhjmM+OGUvwC9EhiDA4qY
h+sVvheh9GAlDkn7+bJwxTin2qWdrzwhuaG918QCTEexwImpueI9MWbIejLsJc9Y
XbydCk4DWE6Pd0c+matd9JWAdGAKvO6/JcVbDi0TuXliFMYrxGqJUIKFtldA1s0+
3qmx/4dQs2BV3mSfSw4QYK15WzELMdKZZi80DcqVBkcs+80vfdluGgeflyMLjRek
L7XyyFrJ7wgZItOWLONXAUVgB0cnY2N/UcUiOQMNgaX+PmzdcGDnKaHhivaA
-----END CERTIFICATE-----
Generated at Mon Apr 27 15:44:38 2026 by rpki-client