Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VpMtctHlbnQczmmR1utc_WEYI68.roa
File: VpMtctHlbnQczmmR1utc_WEYI68.roa (raw, json)
Hash identifier: tJ1U1/SnlGwYwCuigW91PcSyKYqFDa//y+dwHfGKkck=
Subject key identifier: 56:93:2D:72:D1:E5:6E:74:1C:CE:69:91:D6:EB:5C:FD:61:18:23:AF
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019F4A758B01CDF1F02243F2CE7CB066ECA2
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VpMtctHlbnQczmmR1utc_WEYI68.roa
Signing time: Fri 10 Jul 2026 05:17:24 +0000
ROA not before: Fri 10 Jul 2026 05:17:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 93.114.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 05:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4a:75:8b:01:cd:f1:f0:22:43:f2:ce:7c:b0:66:ec:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 10 05:17:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56932d72d1e56e741cce6991d6eb5cfd611823af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:67:7d:24:81:3f:d7:e1:9d:83:2e:66:7c:
55:e2:08:64:4b:b5:f9:74:c4:a1:81:a8:0e:7d:7c:
af:71:90:85:63:9e:20:37:cd:15:7c:62:6e:6a:b4:
46:40:74:52:f4:de:7b:5e:71:ca:2e:07:70:0e:f6:
1f:21:89:68:62:a8:d9:c7:11:22:02:c7:73:b7:b1:
0c:27:9e:d1:b2:40:be:e0:9f:14:9e:90:7e:e6:db:
04:3d:b6:02:db:59:88:a6:14:ba:a6:e4:ff:9d:52:
62:3e:27:5c:ac:29:61:73:48:bc:0a:ac:00:d3:cc:
d4:ff:97:10:bd:1a:c8:10:b3:cb:9f:ad:01:cd:87:
da:e5:6e:1e:4c:e5:3d:b3:e1:94:d3:a0:64:b7:da:
87:60:ef:66:9f:ca:cb:2a:3b:22:d3:2d:f9:9a:95:
ea:c5:7d:1b:ac:9b:3b:75:4c:c6:c8:d3:d3:6b:e2:
59:e5:dc:10:db:d4:5b:66:6c:10:53:a2:9c:9c:6b:
18:5a:b6:2d:19:e1:0b:15:5f:23:27:ce:07:0a:eb:
6b:56:01:e9:25:79:9b:29:4f:b4:ca:b4:15:cd:4e:
44:da:74:bf:23:67:0e:be:1c:ce:53:b1:d6:88:47:
13:79:df:09:2f:1a:09:fd:09:34:c8:11:1e:f4:38:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:2D:72:D1:E5:6E:74:1C:CE:69:91:D6:EB:5C:FD:61:18:23:AF
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VpMtctHlbnQczmmR1utc_WEYI68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.89.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ba:c7:43:83:80:a1:7f:c8:d1:4b:5c:4a:94:c2:47:14:38:
34:c7:08:bc:90:2c:44:67:71:c7:f4:01:7e:a9:6f:57:67:a3:
f4:b9:28:6e:27:72:6e:1b:ac:42:7d:52:08:e2:e3:17:9f:94:
8f:a0:6f:87:8b:52:bf:8c:60:ec:6c:46:32:d6:5b:03:f4:ea:
f4:1e:b4:b1:35:ac:3d:64:8b:89:e2:aa:64:f1:f6:6b:b2:f5:
3c:bc:9f:d5:43:f1:18:62:b3:ac:d2:7c:d0:ad:62:6c:26:4b:
e2:6a:78:6d:be:b0:01:f0:54:f9:77:2a:da:f4:c6:a2:29:33:
e8:cd:1b:aa:c3:29:25:05:d8:55:41:ed:bb:65:e1:3f:d9:b6:
42:f6:da:e5:da:fd:db:f8:a8:59:2d:5e:55:84:23:35:8e:d5:
ea:5b:77:5d:72:44:d9:27:47:a1:84:38:53:27:85:a4:c7:e0:
e9:ee:e9:12:19:cb:ee:4e:f1:34:68:4b:d8:a9:12:a4:11:d1:
11:ca:2c:21:c5:27:b3:f8:07:eb:30:29:6b:41:d3:36:3d:58:
76:da:f0:3c:9c:c9:0d:64:7e:be:18:92:17:ba:48:b9:c8:13:
94:a9:35:a8:30:a8:4e:b9:8d:89:40:ac:c5:34:f4:b8:54:08:
37:9b:03:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9KdYsBzfHwIkPyznywZuyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjYwNzEwMDUxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjkzMmQ3MmQxZTU2ZTc0MWNjZTY5OTFkNmViNWNmZDYxMTgyM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPZnfSSBP9fhnYMuZnxV4ghkS7X5
dMShgagOfXyvcZCFY54gN80VfGJuarRGQHRS9N57XnHKLgdwDvYfIYloYqjZxxEi
Asdzt7EMJ57RskC+4J8UnpB+5tsEPbYC21mIphS6puT/nVJiPidcrClhc0i8CqwA
08zU/5cQvRrIELPLn60BzYfa5W4eTOU9s+GU06Bkt9qHYO9mn8rLKjsi0y35mpXq
xX0brJs7dUzGyNPTa+JZ5dwQ29RbZmwQU6KcnGsYWrYtGeELFV8jJ84HCutrVgHp
JXmbKU+0yrQVzU5E2nS/I2cOvhzOU7HWiEcTed8JLxoJ/Qk0yBEe9DjqNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaTLXLR5W50HM5pkdbrXP1hGCOvMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVnBNdGN0SGxiblFjem1tUjF1dGNfV0VZSTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXJZMA0G
CSqGSIb3DQEBCwUAA4IBAQBRusdDg4Chf8jRS1xKlMJHFDg0xwi8kCxEZ3HH9AF+
qW9XZ6P0uShuJ3JuG6xCfVII4uMXn5SPoG+Hi1K/jGDsbEYy1lsD9Or0HrSxNaw9
ZIuJ4qpk8fZrsvU8vJ/VQ/EYYrOs0nzQrWJsJkvianhtvrAB8FT5dyra9MaiKTPo
zRuqwyklBdhVQe27ZeE/2bZC9trl2v3b+KhZLV5VhCM1jtXqW3ddckTZJ0ehhDhT
J4Wkx+Dp7ukSGcvuTvE0aEvYqRKkEdERyiwhxSez+AfrMClrQdM2PVh22vA8nMkN
ZH6+GJIXuki5yBOUqTWoMKhOuY2JQKzFNPS4VAg3mwO7
-----END CERTIFICATE-----
Generated at Fri Jul 10 15:30:23 2026 by rpki-client