Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/vQ-Lx9U6AaoOxx1W7PkgR1T2els.roa
File: vQ-Lx9U6AaoOxx1W7PkgR1T2els.roa (raw, json)
Hash identifier: dvq3nMYKxZcaUWmZIkjfiHEirkM9uloqYvXhV3tjixY=
Subject key identifier: BD:0F:8B:C7:D5:3A:01:AA:0E:C7:1D:56:EC:F9:20:47:54:F6:7A:5B
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 019F952715B2C32237FD55855E31B176DD9B
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/vQ-Lx9U6AaoOxx1W7PkgR1T2els.roa
Signing time: Fri 24 Jul 2026 17:23:14 +0000
ROA not before: Fri 24 Jul 2026 17:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214208
IP address blocks: 89.44.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:27:15:b2:c3:22:37:fd:55:85:5e:31:b1:76:dd:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Jul 24 17:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0f8bc7d53a01aa0ec71d56ecf9204754f67a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f9:02:d8:04:d0:12:d1:e2:0f:a9:cc:03:65:
be:9f:92:70:9d:4a:87:67:2d:3b:b7:ad:4a:d0:6a:
c6:5a:c1:7d:33:8c:c5:99:da:14:9a:90:84:be:b1:
74:a2:4d:f6:99:c1:2d:d4:74:44:e4:1a:17:67:fa:
8c:0f:2d:bf:66:e3:2f:9a:1e:bb:48:e8:bc:5d:9e:
ed:2b:92:5c:fc:92:64:8a:09:6f:59:f2:fd:4e:07:
e1:0c:6e:c3:4d:74:95:b1:d3:9c:7e:1a:68:36:38:
22:e9:a6:f1:03:06:9d:ae:14:79:ed:a4:6a:42:13:
e6:0e:e7:28:11:80:97:77:6d:d7:b4:d1:2f:3d:75:
c3:d3:04:a2:fd:9b:bc:bf:a0:a3:ef:dd:19:b0:86:
3d:84:5c:3f:99:c8:e7:0a:d5:87:17:86:02:32:6c:
07:9a:ba:ca:aa:84:c4:e8:4f:17:63:0d:e3:02:3c:
bb:96:49:db:de:79:84:92:b9:7f:f2:d3:7d:d3:3b:
6b:3e:b9:7c:cb:1a:23:6e:4e:55:2c:d1:61:e2:ad:
85:70:0f:e4:61:b1:3e:d3:d6:f1:55:ff:4a:45:5e:
8d:8c:0a:18:1f:f0:c1:63:18:be:81:0f:dc:87:9d:
90:2e:ee:59:bf:23:b4:84:61:57:e4:e7:f5:ce:74:
72:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0F:8B:C7:D5:3A:01:AA:0E:C7:1D:56:EC:F9:20:47:54:F6:7A:5B
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/vQ-Lx9U6AaoOxx1W7PkgR1T2els.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.102.0/24
Signature Algorithm: sha256WithRSAEncryption
38:89:ee:5d:89:0f:74:f4:46:62:5b:67:cf:f9:95:56:9d:bb:
e0:38:33:e8:35:dd:d7:d6:71:18:7c:01:77:26:81:96:81:9c:
d7:f1:0f:11:55:9b:41:05:1b:48:ef:a6:13:ef:c0:3e:50:8c:
94:6f:dd:03:e3:26:32:54:7c:bf:cf:4a:0e:cd:84:13:39:8c:
5b:a8:75:0f:de:3a:a1:be:d9:ca:2f:29:d5:e8:c3:ed:cf:cc:
4b:76:7e:d7:7f:32:90:c8:22:0d:8e:49:f4:5f:57:76:2d:75:
b2:d7:2b:75:85:6a:b3:80:09:25:99:9b:37:44:34:bd:ae:41:
f7:c0:e5:62:65:09:c2:f1:51:a0:76:7a:d4:f8:c5:5b:92:ba:
f8:dd:15:4f:ee:a1:ec:0b:25:dc:7d:33:d5:66:02:3a:4b:a5:
9d:59:d9:bb:f7:e3:19:03:68:2c:19:12:32:00:10:dd:d0:99:
20:d4:ef:5b:9e:c2:6c:09:8a:8a:a3:f6:02:81:7f:59:5f:c4:
c8:89:bc:08:f5:b2:e2:c7:0d:93:e7:b3:e6:5e:6a:ac:0d:8b:
e2:4d:e7:75:2d:9b:da:78:97:09:74:20:6a:5c:c5:65:64:53:
79:d0:5d:5e:2c:3d:e2:e9:fe:fa:2d:31:03:fb:4e:6b:90:b9:
7e:75:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:21:04 2026 by rpki-client