Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/VttJMfNXffXg2N7RGJ2gl7znqVA.roa
File: VttJMfNXffXg2N7RGJ2gl7znqVA.roa (raw, json)
Hash identifier: D2BylBdgHIs+38A2CtW5HUr9uwkgEAH7QSPUrMFWnwY=
Subject key identifier: 56:DB:49:31:F3:57:7D:F5:E0:D8:DE:D1:18:9D:A0:97:BC:E7:A9:50
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A144454C1BBA449BEBD80B008CEC279ACF
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/VttJMfNXffXg2N7RGJ2gl7znqVA.roa
Signing time: Fri 16 Oct 2026 10:32:34 +0000
ROA not before: Fri 16 Oct 2026 10:32:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 88.214.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:45:4c:1b:ba:44:9b:eb:d8:0b:00:8c:ec:27:9a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Oct 16 10:32:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56db4931f3577df5e0d8ded1189da097bce7a950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:19:1e:67:3f:a0:b2:23:c3:cc:2c:f4:f2:db:
fc:91:1d:e6:d2:9e:f8:d0:5d:15:ce:88:10:76:4c:
2f:0c:26:8e:36:13:c8:cf:58:98:c0:a9:32:85:5e:
17:df:65:10:42:fe:25:b2:a6:3a:7d:34:fa:b6:1c:
96:02:1e:94:ec:44:00:41:7d:94:f1:42:94:6a:1b:
29:35:12:e7:62:1d:35:2d:a4:95:f2:21:31:1c:74:
de:14:47:a8:41:29:77:5f:f4:cf:1b:fc:f6:00:52:
56:65:fa:84:ee:2b:7f:0c:07:44:57:48:ca:e5:eb:
3c:1a:38:08:ca:6b:da:3f:11:b9:bd:5b:22:5a:db:
39:d2:44:0d:18:89:a6:34:88:6d:b1:cd:ff:73:0f:
e9:3a:c1:9a:a7:fb:b0:90:52:b7:09:2e:f0:d3:95:
5c:65:9d:14:b6:d8:ca:4c:94:3f:9a:7b:4f:fe:e8:
f8:4e:b4:20:97:47:17:ac:d9:73:0d:63:fd:65:9c:
0b:92:55:1f:16:38:44:5d:65:c7:24:10:b3:a0:51:
dc:dd:ca:ab:af:83:0c:1e:d5:c4:1d:70:c0:90:f4:
a5:1f:a4:29:5a:e3:3d:cc:b2:74:cf:18:c1:66:c2:
ff:b8:99:7a:e5:fd:4c:c4:64:87:60:b2:5f:34:43:
8d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DB:49:31:F3:57:7D:F5:E0:D8:DE:D1:18:9D:A0:97:BC:E7:A9:50
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/VttJMfNXffXg2N7RGJ2gl7znqVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.54.0/24
Signature Algorithm: sha256WithRSAEncryption
35:b8:a4:d7:d3:57:75:6a:41:c1:cf:60:c9:2b:67:57:58:2d:
79:0e:29:9d:bc:f9:07:8b:f2:02:e1:43:c2:4c:3c:25:47:46:
b7:91:90:d9:44:1a:c2:06:c2:21:4e:07:0c:5f:28:9a:50:8c:
0c:dd:68:02:29:0b:d1:f7:e3:bb:ee:cc:d7:b9:e1:c5:4f:b2:
8e:3a:1d:b4:65:e0:67:fa:02:68:fa:28:d7:79:4a:f4:af:62:
d3:ec:f5:16:1b:18:d9:6a:ab:7a:5f:5f:55:b8:7e:b7:25:6b:
d5:a2:04:ca:da:8b:cd:9f:16:21:1f:03:0b:55:2d:c6:a4:18:
04:e9:8e:7a:58:3f:61:8d:61:1c:39:be:fc:f6:6a:f3:f9:d2:
e1:51:6b:a2:aa:ad:ff:92:0c:0a:a7:f4:21:79:30:c8:d4:1d:
ef:50:1c:2f:3c:ed:e7:35:6d:d4:03:89:46:9f:f5:b4:69:2a:
75:91:f2:06:28:03:6d:63:f9:91:d9:d3:74:63:d3:0d:d3:ca:
9c:03:20:16:4c:68:9a:4a:0f:86:95:00:fd:60:5a:5d:6f:75:
ae:24:6c:0e:96:8d:c8:ae:93:2c:d7:fb:9f:92:c7:9e:d6:28:
83:c1:68:4b:b5:2f:01:a6:8b:cd:f6:9a:2a:5d:32:7b:63:73:
1a:23:b6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:15 2026 by rpki-client