Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/vSuybQCz3O_TwTJ8F2zSY2i4mk0.roa
File: vSuybQCz3O_TwTJ8F2zSY2i4mk0.roa (raw, json)
Hash identifier: pXN0taHTbSlWFeoaKh0Luyrryn2wSn3jH/I7mlt3zMg=
Subject key identifier: BD:2B:B2:6D:00:B3:DC:EF:D3:C1:32:7C:17:6C:D2:63:68:B8:9A:4D
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019FB17AF964C2044B38A7205CF0A421A96C
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/vSuybQCz3O_TwTJ8F2zSY2i4mk0.roa
Signing time: Thu 30 Jul 2026 05:24:14 +0000
ROA not before: Thu 30 Jul 2026 05:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 45.11.155.0/24 maxlen: 24
45.130.77.0/24 maxlen: 24
45.130.78.0/24 maxlen: 24
45.157.182.0/24 maxlen: 24
185.124.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b1:7a:f9:64:c2:04:4b:38:a7:20:5c:f0:a4:21:a9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jul 30 05:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd2bb26d00b3dcefd3c1327c176cd26368b89a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:55:5c:08:56:8d:52:3a:f3:d1:20:44:a9:
71:96:ac:29:5d:83:1a:b0:07:8a:da:c2:d1:fd:6f:
21:fe:8c:49:33:38:f9:60:78:ca:e0:42:7b:5a:bb:
a6:2b:d3:97:d0:10:31:13:7a:98:ce:8f:3f:9c:49:
d0:d5:d2:66:6c:b1:78:2f:bb:4d:05:05:11:f4:2f:
0c:27:b8:f0:ee:c3:2d:e2:54:aa:02:1e:a9:64:84:
bd:4d:6d:b0:7f:33:eb:d4:95:0e:c2:4a:dc:95:01:
b7:a1:3b:d5:90:21:e7:6c:d7:fa:0b:29:4e:fc:1f:
2f:f2:92:9a:fd:15:99:4b:ab:06:b8:c9:25:68:5c:
5a:93:71:a1:9b:cf:f0:1d:c1:90:1b:c4:90:4b:f8:
8d:23:1f:d0:81:31:d1:a6:d1:6b:51:5d:82:c6:96:
24:ac:f6:9f:e1:73:ea:00:51:80:85:43:ea:17:4e:
5f:5c:ff:51:43:48:f5:b8:48:9d:8a:ec:c8:2c:1d:
9c:5c:23:04:8a:33:74:09:57:3b:93:e1:b3:e8:0a:
b0:00:ed:21:f9:1c:94:17:30:e4:79:f8:61:0c:94:
4e:6a:aa:b8:2c:98:9a:db:3d:b1:9c:26:bd:6d:34:
f4:70:d2:8a:cd:4a:81:bb:d8:bc:1c:ed:65:4e:60:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:B2:6D:00:B3:DC:EF:D3:C1:32:7C:17:6C:D2:63:68:B8:9A:4D
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/vSuybQCz3O_TwTJ8F2zSY2i4mk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.155.0/24
45.130.77.0-45.130.78.255
45.157.182.0/24
185.124.241.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:90:ce:5c:e8:fb:00:48:67:17:b4:1d:8a:f0:bb:6d:75:bc:
05:c4:be:d5:de:95:54:c2:7b:97:2d:39:8f:a4:69:83:fd:b3:
b0:ca:49:a6:61:06:27:d5:fc:39:cc:7e:83:27:2d:16:ae:69:
0a:46:b2:b1:1e:37:1f:10:e0:3d:98:be:df:61:d4:76:03:d6:
0a:ce:1b:4c:ff:42:f6:a9:d7:7b:53:84:63:c8:40:02:e0:e1:
b6:4c:0f:ea:e0:f9:b9:c3:f1:6e:e8:24:6b:94:a7:05:14:ee:
6b:69:8c:e6:50:51:98:55:6e:5f:6f:62:fc:74:88:7e:42:a2:
bb:bc:d9:eb:8a:43:a1:04:65:dd:7e:07:2b:e3:72:7a:0c:ae:
5b:77:cd:80:bb:c8:a5:7b:cf:60:86:8f:a0:1c:0f:8c:a0:00:
80:3f:da:5a:f8:b5:10:bf:24:3d:0c:1b:45:4c:05:be:d4:cd:
f7:97:34:3b:6b:a0:03:a4:de:97:66:28:37:6b:3c:b6:39:8c:
69:ac:93:cd:fa:20:35:93:c0:b2:af:65:ab:7c:e2:1e:ff:d4:
b2:9f:e3:a4:0b:dd:78:23:94:2a:f1:bd:9c:2e:11:f3:45:6f:
a3:1e:b8:40:ed:d2:45:16:e1:c6:c1:f1:7e:40:69:64:be:c8:
d1:07:15:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:06 2026 by rpki-client