Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VBclDv8P55vPZ0mKSZ5z5U3kHHg.roa
File: VBclDv8P55vPZ0mKSZ5z5U3kHHg.roa (raw, json)
Hash identifier: prpHKu+Fy4DoYrWLe+tvqMk6u2BPIgPzNP4avw0JqF0=
Subject key identifier: 54:17:25:0E:FF:0F:E7:9B:CF:67:49:8A:49:9E:73:E5:4D:E4:1C:78
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019DDF048B5ABF7CD83295377663FF106E16
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VBclDv8P55vPZ0mKSZ5z5U3kHHg.roa
Signing time: Thu 30 Apr 2026 15:31:50 +0000
ROA not before: Thu 30 Apr 2026 15:31:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.253.45.0/24 maxlen: 24
45.8.195.0/24 maxlen: 24
45.8.197.0/24 maxlen: 24
45.8.198.0/24 maxlen: 24
45.9.6.0/24 maxlen: 24
45.66.152.0/24 maxlen: 24
45.66.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:04:8b:5a:bf:7c:d8:32:95:37:76:63:ff:10:6e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 30 15:31:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5417250eff0fe79bcf67498a499e73e54de41c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:b5:43:59:c6:63:6d:fa:9b:ef:a7:e7:10:
86:bb:97:f5:44:7a:fe:f0:17:e9:25:0c:ba:46:97:
19:ab:1c:3a:ce:1f:39:1a:0c:c8:a3:c5:dc:99:a9:
49:6e:8a:2c:94:50:bc:6d:9f:34:b1:8e:da:1e:a1:
9f:9f:2f:a7:fe:13:52:cc:d8:39:9c:dc:fb:ec:1a:
16:50:5e:e0:4c:6c:42:70:18:2d:29:e6:a5:37:45:
0e:dd:b7:96:ca:94:75:b2:97:57:29:aa:98:6a:9e:
e7:2e:ca:a7:e2:ea:22:ed:3c:50:72:7b:8b:78:a2:
c1:7f:e0:4a:95:21:76:fe:4c:2a:12:cb:3d:97:9e:
f0:59:65:06:fc:b4:b3:d5:86:c6:95:cc:70:91:1a:
c1:d4:ac:5b:4f:bc:7c:ca:e2:d5:16:75:d8:3b:76:
2d:a4:36:24:f2:9b:b7:2a:15:ae:0e:01:9c:a2:ea:
8a:c4:c3:57:a4:1f:73:6b:c7:15:13:51:4d:12:e9:
0f:a9:27:2d:ac:10:24:99:0e:d3:14:97:ca:bf:1b:
c7:25:04:b9:b9:14:af:a9:42:68:6f:9f:e1:1a:75:
af:f9:df:65:98:3e:9e:1e:07:4a:60:64:36:1c:3c:
03:77:f8:86:a3:5a:e9:40:ba:b3:89:bb:3e:dd:e0:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:25:0E:FF:0F:E7:9B:CF:67:49:8A:49:9E:73:E5:4D:E4:1C:78
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VBclDv8P55vPZ0mKSZ5z5U3kHHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.45.0/24
45.8.195.0/24
45.8.197.0-45.8.198.255
45.9.6.0/24
45.66.152.0/24
45.66.154.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:e9:97:f5:c6:8e:06:c2:ac:5a:ca:85:8f:c0:5f:c1:56:98:
42:b8:96:9b:fc:21:ae:d9:28:ae:d8:5b:a1:e3:c2:5c:ad:1b:
0b:b6:66:47:15:d3:ff:2e:da:ef:e5:a4:1a:c1:e5:e5:8a:98:
57:dd:1c:4e:a2:1c:5c:57:43:46:0d:8c:8c:ff:30:4a:cb:ba:
1b:a4:0b:92:0c:b2:6c:79:1f:86:77:10:d2:f6:f8:d0:9d:17:
da:52:11:51:3c:35:f8:12:94:d2:22:db:03:b4:c7:f2:d0:42:
46:72:33:4d:85:31:2a:91:c1:07:a8:24:7b:14:87:48:8a:12:
7a:83:ff:18:56:f1:19:ba:51:97:d6:e1:d2:24:6c:ac:c2:7b:
c5:e7:5d:00:17:04:e9:8f:05:4f:1b:bc:60:34:ed:cf:55:f0:
4d:dc:a7:83:05:01:05:33:f9:a0:66:62:7f:8f:8c:25:e1:31:
f5:29:1a:fb:98:d9:46:44:08:3f:0a:11:bf:fd:86:87:72:58:
08:33:b9:e1:a9:59:5d:a9:bd:fb:75:22:27:c1:32:59:c4:9c:
ef:24:89:31:a4:6b:f6:56:06:e3:f8:bb:ad:11:80:ab:6e:5b:
21:7b:a4:8b:78:31:f5:fc:a9:5b:f4:e8:0f:ab:0c:8d:fc:36:
03:0f:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:22 2026 by rpki-client