Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/VByWEi075GG2ul0TtCiMiXrevMA.roa
File: VByWEi075GG2ul0TtCiMiXrevMA.roa (raw, json)
Hash identifier: emrSQLDsEvO0Y3Bc2ftEniYaN4kzAyfvF/WPgpAC25E=
Subject key identifier: 54:1C:96:12:2D:3B:E4:61:B6:BA:5D:13:B4:28:8C:89:7A:DE:BC:C0
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1448AE1788AB9689662D6B155286ABC8C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/VByWEi075GG2ul0TtCiMiXrevMA.roa
Signing time: Fri 16 Oct 2026 11:48:34 +0000
ROA not before: Fri 16 Oct 2026 11:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198988
IP address blocks: 194.146.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:8a:e1:78:8a:b9:68:96:62:d6:b1:55:28:6a:bc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 16 11:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=541c96122d3be461b6ba5d13b4288c897adebcc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:40:99:c2:86:19:32:a1:67:78:10:f0:5b:
37:00:70:c5:ff:9e:12:44:7d:15:2c:fe:e1:48:ed:
5b:09:bd:4e:46:e6:fb:0b:bb:7f:06:e1:8a:d1:0b:
8b:58:4c:7b:ac:5c:ac:ec:d6:4f:7b:36:b1:16:2c:
42:f7:64:16:27:5e:3f:e4:f2:44:f5:15:6a:4b:b2:
81:cd:50:57:22:0a:99:ed:60:21:29:71:e6:7f:8b:
06:2e:45:78:67:cd:6a:61:6c:8d:59:76:77:b4:64:
c1:65:06:9f:af:77:b5:7d:b9:10:71:92:45:48:f9:
10:87:68:ae:ed:01:a4:ae:8b:9a:d2:5f:15:d8:86:
27:1f:5c:03:32:a6:c6:c5:d5:4a:41:32:6e:96:78:
5d:60:db:89:d9:0b:a2:93:ae:82:5d:ce:36:c8:dc:
c3:68:c0:0b:e5:5e:3d:a0:ad:78:29:1f:2c:56:29:
77:c0:36:29:3d:2b:95:95:56:fd:cf:3a:62:0a:bd:
21:32:da:9b:69:4a:26:9f:40:9e:eb:0b:f8:e9:c2:
a6:03:28:da:bd:6f:c5:2b:9f:82:e8:70:81:7b:0c:
85:77:d2:69:ad:dc:b2:76:05:d6:17:5d:5a:aa:0f:
00:b0:5d:52:43:76:b6:6b:37:9e:21:3d:ea:16:11:
f6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1C:96:12:2D:3B:E4:61:B6:BA:5D:13:B4:28:8C:89:7A:DE:BC:C0
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/VByWEi075GG2ul0TtCiMiXrevMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.26.0/24
Signature Algorithm: sha256WithRSAEncryption
06:d4:69:ec:b2:49:3c:84:0b:4c:3a:bc:75:2b:6a:a2:d0:bb:
a7:2c:b9:e3:35:51:72:8b:ac:b2:cf:d8:7e:1b:94:4c:3c:3a:
9e:44:a0:2a:2b:7a:18:e4:e6:a2:79:9f:f0:e4:ef:b6:65:e8:
ee:0e:64:30:2c:cb:85:5c:7b:b4:75:fd:ca:02:99:63:d1:f5:
7f:a4:60:60:0d:7e:7d:fe:63:68:9a:36:31:d4:7f:6e:04:d8:
94:8d:d4:bd:89:2a:20:c8:57:c0:f6:da:0a:e9:ca:ff:8d:1b:
62:d8:09:9e:c0:65:d4:54:b7:a0:ab:8f:e9:b6:dc:3f:b8:ba:
aa:7d:0d:e9:0a:1c:5f:95:f9:a3:a7:e1:ec:da:10:29:0b:f2:
e3:98:09:13:fc:7f:ea:3c:0f:88:9c:f6:4a:16:8c:15:b4:15:
0d:18:8d:7d:b3:da:fa:86:66:a8:8b:76:68:67:f0:eb:c7:7e:
3c:aa:a9:69:42:4d:87:d4:1b:bd:4a:83:45:81:5d:01:de:f4:
eb:df:7e:49:bb:73:6d:04:2c:95:e2:e4:0d:cf:63:7a:20:8c:
f9:a5:52:c7:bf:bb:5f:d7:b2:80:b9:71:91:59:7a:0e:95:27:
0a:d4:bd:85:d2:0c:ea:9e:c0:13:56:97:0f:5a:e0:25:50:61:
0a:44:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 11:29:01 2026 by rpki-client