Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VGE1McKV1fObE1-qcqalIcbniqM.roa
File: VGE1McKV1fObE1-qcqalIcbniqM.roa (raw, json)
Hash identifier: eZC03RfnlRHK+KPGMyItH5RKFEP6Dc/vQtXvyRoCh6I=
Subject key identifier: 54:61:35:31:C2:95:D5:F3:9B:13:5F:AA:72:A6:A5:21:C6:E7:8A:A3
Certificate issuer: /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial: 019DB04469622A60980AD7F8163287DDD723
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VGE1McKV1fObE1-qcqalIcbniqM.roa
Signing time: Tue 21 Apr 2026 13:39:26 +0000
ROA not before: Tue 21 Apr 2026 13:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 45.132.248.0/22 maxlen: 24
46.247.244.0/23 maxlen: 24
46.247.246.0/23 maxlen: 24
79.132.144.0/23 maxlen: 24
79.132.150.0/23 maxlen: 24
79.132.152.0/23 maxlen: 24
79.132.154.0/23 maxlen: 24
79.132.156.0/23 maxlen: 24
85.112.210.0/23 maxlen: 24
86.105.90.0/23 maxlen: 24
86.107.248.0/21 maxlen: 24
86.107.254.0/23 maxlen: 24
89.43.156.0/22 maxlen: 24
185.183.63.0/24 maxlen: 24
185.223.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 13:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:44:69:62:2a:60:98:0a:d7:f8:16:32:87:dd:d7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Validity
Not Before: Apr 21 13:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54613531c295d5f39b135faa72a6a521c6e78aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:d8:ab:34:c3:ea:7d:4f:82:fe:5b:83:e5:
0e:1f:e6:19:8b:f4:35:61:8a:00:bc:52:91:27:e3:
e7:2e:32:fc:89:0b:cc:d6:e6:2c:bc:29:d2:f0:6c:
e1:91:75:77:b8:98:8c:76:a1:b4:ce:b8:92:65:ef:
e9:1b:8e:cd:2b:5a:e0:5d:e2:23:3d:eb:c5:fd:bd:
c2:8e:0b:43:64:d3:9f:70:e2:05:2f:94:ed:3d:36:
df:e3:52:75:8c:69:30:d8:cf:0a:0b:c1:16:8b:74:
67:06:d5:76:b6:8b:31:94:e3:cf:b9:5f:c9:49:74:
73:97:d3:cf:63:36:cc:24:8a:e3:a5:d9:b2:0e:d3:
eb:10:04:dd:4d:34:68:f2:47:8b:14:de:1b:c3:37:
bb:5d:01:48:cd:f6:bc:87:3f:81:4c:89:fc:18:b6:
a4:6c:ed:0a:a6:5c:8c:80:83:08:cd:36:ea:1a:47:
e9:9d:9e:97:8d:35:db:a0:36:9f:64:ba:62:d4:78:
8e:de:93:02:c2:17:7a:30:21:f3:87:33:fe:ca:7f:
ec:15:d6:02:8c:30:4e:f2:25:0e:4d:a6:70:32:de:
39:16:eb:73:2c:d3:63:46:9d:1b:db:b7:f6:8c:9d:
bd:bb:75:cf:c0:1c:f4:40:20:27:aa:ee:c0:af:29:
99:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:61:35:31:C2:95:D5:F3:9B:13:5F:AA:72:A6:A5:21:C6:E7:8A:A3
X509v3 Authority Key Identifier:
keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/VGE1McKV1fObE1-qcqalIcbniqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.248.0/22
46.247.244.0/22
79.132.144.0/23
79.132.150.0-79.132.157.255
85.112.210.0/23
86.105.90.0/23
86.107.248.0/21
89.43.156.0/22
185.183.63.0/24
185.223.148.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c2:a1:d7:b9:3f:98:27:40:06:cc:7c:d8:35:20:b0:00:cc:
06:3e:69:24:69:e0:ab:65:f6:df:0a:db:3a:29:96:03:e2:aa:
9b:3e:cd:d5:56:02:d4:16:86:b3:d0:dc:fe:59:33:98:27:a7:
f2:cc:f2:cf:10:5f:bd:e9:cf:38:5c:fc:d0:2f:e2:8e:ec:49:
71:a3:33:55:70:02:4c:f7:a4:1c:61:34:fe:bb:6a:61:36:6e:
48:fe:4a:c3:5c:40:aa:86:ca:9f:f1:c6:b6:0b:de:37:60:f7:
c9:1f:a0:58:29:73:af:86:a8:a5:41:5f:0d:c6:f3:f7:8b:f6:
1e:76:79:2a:b9:95:a0:68:96:0a:72:89:55:bc:3a:e2:7f:e7:
b5:c5:a5:9b:ac:46:48:39:3e:44:f8:ab:c1:46:8e:32:4d:76:
af:9b:6f:bd:d1:2c:11:a5:6b:9b:3e:2d:61:47:62:b8:b0:e7:
6d:08:a4:47:de:e5:2b:23:85:fb:3b:24:14:df:2a:c7:50:25:
86:fc:bf:a9:70:8d:f0:da:9b:ba:d2:2d:4f:34:65:74:f8:ce:
cf:53:e0:33:5e:4e:4f:5e:cb:35:2f:f9:af:eb:4e:b8:dd:d1:
17:0d:ae:3a:14:15:5e:f1:09:36:9e:6a:33:c2:56:6f:4d:3e:
85:fb:dc:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 21 18:01:02 2026 by rpki-client