Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/VqkPXAim399Lgu1GyCQGuOl6sF4.roa
File: VqkPXAim399Lgu1GyCQGuOl6sF4.roa (raw, json)
Hash identifier: YamfP1/Nh2RGvSHwsQesyL4V2NU4cfv5sboXH/GdBEc=
Subject key identifier: 56:A9:0F:5C:08:A6:DF:DF:4B:82:ED:46:C8:24:06:B8:E9:7A:B0:5E
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 01A16E4433D7C2255BE8916387363DE5091C
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/VqkPXAim399Lgu1GyCQGuOl6sF4.roa
Signing time: Sat 24 Oct 2026 14:15:25 +0000
ROA not before: Sat 24 Oct 2026 14:15:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197182
IP address blocks: 89.187.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:44:33:d7:c2:25:5b:e8:91:63:87:36:3d:e5:09:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Oct 24 14:15:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56a90f5c08a6dfdf4b82ed46c82406b8e97ab05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:cc:90:30:04:13:53:7d:15:28:3f:1c:b0:
3e:fa:b5:9f:8c:71:c4:30:b8:cc:0b:52:25:da:b8:
ef:ce:5b:ce:e0:92:1f:05:ee:1a:34:c0:81:06:e7:
70:3b:44:05:08:22:cd:e2:30:df:f2:58:b3:16:62:
a2:db:b0:56:32:29:b8:9d:20:48:96:9c:0a:e5:f2:
04:ee:95:0d:ab:64:1a:29:df:9f:f7:d7:c9:ae:c2:
46:54:c2:14:fc:0f:de:f4:bc:d3:26:9e:ac:dd:96:
cb:76:a3:e2:9c:b8:5c:25:3e:be:a8:f7:f9:19:c8:
d9:66:75:1f:15:90:23:d7:25:68:96:63:4b:13:46:
d4:c3:d2:f1:87:a9:7e:71:44:1f:bc:e2:71:39:a5:
40:ac:da:56:8a:eb:fc:f9:9e:f0:b2:71:5f:e1:45:
f9:32:f1:2b:3f:2d:b6:cd:ac:fa:e3:80:7c:19:ed:
2b:f5:c9:de:c8:3e:8d:81:c0:0f:02:21:9d:13:5b:
cf:df:97:26:db:7a:d6:33:3b:85:36:bc:63:de:ac:
05:4a:01:c8:ed:00:b6:ec:c7:b6:ea:70:99:af:b0:
ca:08:32:e0:a3:3b:92:92:aa:62:35:ee:7a:9b:f8:
1b:9f:82:e1:a7:d9:86:1d:41:49:1f:b0:37:68:f9:
ec:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A9:0F:5C:08:A6:DF:DF:4B:82:ED:46:C8:24:06:B8:E9:7A:B0:5E
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/VqkPXAim399Lgu1GyCQGuOl6sF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:97:13:63:3e:88:35:5c:2a:bf:61:75:cf:e3:a8:bb:ca:9d:
c8:7a:30:9d:87:74:5f:80:de:b3:c4:f0:45:15:2e:90:4a:6f:
e4:c2:ea:bc:08:35:98:a4:21:55:9d:39:f7:be:1c:d2:0e:a3:
e7:55:ae:02:d4:26:8f:08:52:f7:53:af:0d:97:57:f4:3a:fe:
92:51:18:99:98:13:5e:14:d6:d8:25:5f:09:ac:44:9f:49:56:
41:4c:11:a0:63:bd:c2:aa:bb:29:b7:a9:96:07:4f:be:dc:47:
a0:7a:b8:18:71:3e:88:c0:e3:b5:bf:4b:1e:ad:62:b7:6b:b1:
92:97:5e:f3:6a:66:d2:5e:d3:36:53:35:9f:24:59:e9:c5:96:
db:25:99:b4:59:ee:9f:b5:54:6c:2f:f3:35:31:1c:11:e5:65:
31:50:0f:ad:36:f9:6e:1a:c0:da:d0:71:35:26:7c:e0:3f:da:
6f:82:b0:ab:d2:9a:bd:f6:ad:04:44:02:84:8f:65:19:2a:cd:
ea:25:fc:b2:12:a0:db:9e:2f:3e:ee:e7:17:24:bd:6a:ff:42:
10:f2:ba:95:86:0e:b3:fe:00:20:26:92:45:36:c9:77:19:44:
b4:f0:48:d0:10:09:ba:b4:b0:dd:67:1f:84:8b:b4:63:7d:27:
4c:fe:b2:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFuRDPXwiVb6JFjhzY95QkcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjYyYWNlNjE1YjkwNmI0MmFiMjdmNGZiMWQyMDNkZjM2
ZDU0MzYwHhcNMjYxMDI0MTQxNTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmE5MGY1YzA4YTZkZmRmNGI4MmVkNDZjODI0MDZiOGU5N2FiMDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEPMkDAEE1N9FSg/HLA++rWfjHHE
MLjMC1Il2rjvzlvO4JIfBe4aNMCBBudwO0QFCCLN4jDf8lizFmKi27BWMim4nSBI
lpwK5fIE7pUNq2QaKd+f99fJrsJGVMIU/A/e9LzTJp6s3ZbLdqPinLhcJT6+qPf5
GcjZZnUfFZAj1yVolmNLE0bUw9Lxh6l+cUQfvOJxOaVArNpWiuv8+Z7wsnFf4UX5
MvErPy22zaz644B8Ge0r9cneyD6NgcAPAiGdE1vP35cm23rWMzuFNrxj3qwFSgHI
7QC27Me26nCZr7DKCDLgozuSkqpiNe56m/gbn4Lhp9mGHUFJH7A3aPnsXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFapD1wIpt/fS4LtRsgkBrjperBeMB8GA1UdIwQY
MBaAFFO2Ks5hW5BrQqsn9PsdID3zbVQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDIt
OTcyYTRjM2RjM2YzLzEvVnFrUFhBaW0zOTlMZ3UxR3lDUUd1T2w2c0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDItOTcyYTRjM2RjM2Yz
LzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbtTMA0G
CSqGSIb3DQEBCwUAA4IBAQCylxNjPog1XCq/YXXP46i7yp3IejCdh3RfgN6zxPBF
FS6QSm/kwuq8CDWYpCFVnTn3vhzSDqPnVa4C1CaPCFL3U68Nl1f0Ov6SURiZmBNe
FNbYJV8JrESfSVZBTBGgY73Cqrspt6mWB0++3EegergYcT6IwOO1v0serWK3a7GS
l17zambSXtM2UzWfJFnpxZbbJZm0We6ftVRsL/M1MRwR5WUxUA+tNvluGsDa0HE1
JnzgP9pvgrCr0pq99q0ERAKEj2UZKs3qJfyyEqDbni8+7ucXJL1q/0IQ8rqVhg6z
/gAgJpJFNsl3GUS08EjQEAm6tLDdZx+Ei7RjfSdM/rJV
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:25 2026 by rpki-client