Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/vsDkEDHGze175rfWuKRTPVMUAHI.roa
File: vsDkEDHGze175rfWuKRTPVMUAHI.roa (raw, json)
Hash identifier: 76MebX9O3+9C+jklAcOQPfKM01KbF6NsCvF61TJBNeE=
Subject key identifier: BE:C0:E4:10:31:C6:CD:ED:7B:E6:B7:D6:B8:A4:53:3D:53:14:00:72
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 01A15F865CC495975EB3DCC92BA4D93CAAEE
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/vsDkEDHGze175rfWuKRTPVMUAHI.roa
Signing time: Wed 21 Oct 2026 17:33:23 +0000
ROA not before: Wed 21 Oct 2026 17:33:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 84.247.114.0/24 maxlen: 24
89.149.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:86:5c:c4:95:97:5e:b3:dc:c9:2b:a4:d9:3c:aa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Oct 21 17:33:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bec0e41031c6cded7be6b7d6b8a4533d53140072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:24:01:c0:fa:3c:c0:81:60:5e:97:ed:76:09:
84:03:ce:e9:ca:08:85:fa:1d:de:ef:f4:be:36:9a:
dd:80:c8:a0:df:54:76:11:a9:32:1f:1d:b2:33:fe:
3e:91:c7:9e:79:e0:42:62:e0:1c:39:6a:4b:a1:56:
f4:96:c4:84:fe:e9:14:35:41:5c:00:a6:0f:7b:a1:
ad:ff:4c:4a:cc:5d:fb:5b:58:06:25:f4:9b:61:bc:
85:2a:83:c1:8e:c4:a4:44:3f:7e:0e:ab:62:88:04:
bb:2f:de:fd:c9:6d:f7:cf:8a:9c:f4:a9:42:ac:48:
0d:2d:a1:0e:6f:be:23:be:77:09:06:81:b7:f9:25:
d3:77:dd:00:07:f8:40:e7:1f:13:32:3c:42:a5:7b:
24:a6:fd:f5:80:a9:ca:af:9a:20:08:ee:f8:af:45:
92:d8:67:27:db:7c:1d:ef:8b:04:1e:03:8b:68:16:
94:b0:a7:02:b4:dd:1c:ae:f6:58:5d:20:07:22:5c:
83:1d:86:b8:94:70:bd:88:c5:cb:38:01:2d:1c:23:
a4:4b:71:88:46:0c:f1:41:76:6d:f0:cb:10:f3:56:
ab:0b:db:62:e3:18:02:c3:75:32:a9:d9:a5:8a:65:
66:53:b9:cc:0b:95:8e:08:c0:c2:9a:06:1e:96:63:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C0:E4:10:31:C6:CD:ED:7B:E6:B7:D6:B8:A4:53:3D:53:14:00:72
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/vsDkEDHGze175rfWuKRTPVMUAHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.114.0/24
89.149.63.0/24
Signature Algorithm: sha256WithRSAEncryption
22:21:da:a8:f2:36:92:e1:3f:f1:dc:60:87:56:d0:78:7b:4f:
e0:d1:e3:47:23:ce:95:36:ae:02:7a:85:ee:b9:5c:c9:26:4b:
73:87:d9:5e:29:43:58:9c:d6:17:b9:8e:26:7e:fd:c1:72:60:
97:87:dd:56:90:63:68:d4:4a:bb:ca:ee:c2:17:72:59:4a:78:
9c:55:48:12:d5:2a:79:6f:c5:5c:83:ab:3e:21:6c:cb:cf:bb:
65:5b:81:b8:47:dc:e4:e8:82:3c:27:b0:f6:dc:42:df:aa:e8:
78:77:ed:e0:10:0d:a7:ee:31:16:c4:c5:fd:ee:41:86:06:af:
74:90:ff:7c:8f:48:fb:88:9e:e7:55:1e:8d:0b:fa:55:dc:67:
76:cd:60:1b:f2:de:ce:21:6b:54:be:cd:8d:e8:ed:ad:f8:1c:
52:26:c1:ca:55:be:d7:70:6e:7a:d6:14:9a:21:f5:39:01:25:
2d:86:37:17:0e:88:db:90:b6:7b:e3:15:21:67:f4:43:ce:cd:
54:2f:60:cb:6f:11:7d:74:08:55:92:2e:5d:b1:a5:cf:f2:99:
44:69:c8:98:f1:82:21:6d:4f:74:8a:1f:03:af:79:43:a2:a1:
a1:47:33:61:3d:82:b4:c9:ed:31:97:84:cb:f9:8e:53:9a:b1:
8d:52:c6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:03:28 2026 by rpki-client