Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VZDOjVpvf9UDnsnE3D4FQYBWOs4.roa
File: VZDOjVpvf9UDnsnE3D4FQYBWOs4.roa (raw, json)
Hash identifier: XMhiBsqYSWawHDKkv11rYP/aVP5dJdW9U4Y4/Z3e0yI=
Subject key identifier: 55:90:CE:8D:5A:6F:7F:D5:03:9E:C9:C4:DC:3E:05:41:80:56:3A:CE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0A5AD382EB3443D25F3DE010F56FEED8E
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VZDOjVpvf9UDnsnE3D4FQYBWOs4.roa
Signing time: Tue 15 Sep 2026 15:26:27 +0000
ROA not before: Tue 15 Sep 2026 15:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 89.106.31.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.213.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.187.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
191.217.174.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
200.102.187.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
201.24.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:ad:38:2e:b3:44:3d:25:f3:de:01:0f:56:fe:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 15 15:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5590ce8d5a6f7fd5039ec9c4dc3e054180563ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:42:aa:67:06:1f:75:3a:3e:49:55:89:9b:d3:
16:85:9f:ca:ee:3e:7c:90:f4:28:b9:fc:0b:0f:84:
27:1b:ef:92:39:42:da:04:dc:c9:27:2d:ff:ea:f9:
87:ba:44:b3:a4:f0:dd:9d:87:0f:39:60:08:a5:6d:
5c:c3:56:fd:69:6c:73:48:a9:a1:71:4f:0a:bf:aa:
18:48:b1:cc:76:02:ad:98:0c:4a:de:7e:c5:0c:50:
0e:d5:64:60:b6:7d:45:1b:f5:13:1c:d2:13:20:43:
8a:b3:24:8f:bb:36:bf:19:88:bf:2f:40:e5:29:5a:
5d:be:c5:f3:9d:1d:b0:ba:0a:90:81:1c:b4:f4:2e:
58:bb:4b:f1:5b:59:7b:c2:78:a7:e7:f1:99:4d:d7:
58:38:72:ba:14:2a:f2:95:67:8d:ca:f5:6f:59:23:
ae:4d:fb:39:a7:74:b8:b7:06:fa:ef:ee:05:ba:9c:
9a:de:12:15:f8:97:0c:bb:6b:9a:0b:16:d6:1b:eb:
f1:18:67:d9:0f:1c:80:12:6a:c2:94:4c:7a:29:49:
27:be:c7:24:91:36:88:4b:ca:c9:81:1d:bf:90:84:
77:81:a8:66:7d:94:46:4d:a8:82:8b:0d:57:a0:be:
86:49:b4:57:e5:41:df:e0:8e:ac:e6:d1:6e:1a:ba:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:90:CE:8D:5A:6F:7F:D5:03:9E:C9:C4:DC:3E:05:41:80:56:3A:CE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/VZDOjVpvf9UDnsnE3D4FQYBWOs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.31.0/24
189.31.210.0/24
189.31.213.0/24
189.73.25.0-189.73.26.255
189.75.176.0/24
189.75.187.0-189.75.188.255
191.217.174.0/24
191.219.24.0/24
191.222.32.0/24
200.102.187.0/24
200.165.17.0/24
200.165.19.0/24
201.11.225.0/24
201.11.236.0/24
201.14.223.0/24
201.24.204.0/24
201.24.207.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f3:68:b1:10:01:17:d8:3b:76:84:dc:cc:2b:54:08:2e:01:
8e:f9:37:f0:c7:5b:bd:a2:03:ef:18:04:1a:bf:05:8a:0f:ec:
72:fd:07:0a:06:8e:d2:dc:f7:f0:3f:8f:89:1b:fa:b3:0c:07:
bd:76:88:ab:64:fd:4a:3d:f8:ce:89:70:3d:61:65:28:fc:b2:
e1:91:aa:74:8d:02:9e:c0:5c:74:79:ff:26:7c:bd:9f:3f:4c:
10:25:24:68:fa:e0:0d:a2:3f:53:5b:7f:25:90:2f:09:4e:35:
2b:16:72:bc:ea:ee:4b:a9:79:49:90:90:12:fb:b8:35:9b:2a:
cb:47:9a:de:7d:04:b7:e8:07:9a:6a:e0:94:b7:62:e4:c9:96:
39:46:99:3e:1f:77:27:3b:54:cd:a4:9f:23:1d:e1:fa:3c:2c:
20:c6:ea:b4:cd:96:30:e9:72:c7:c0:1d:21:00:12:7b:c2:bb:
e4:80:b6:5a:86:b3:a9:e1:90:bf:af:06:b9:cc:69:b5:b3:f0:
56:50:2c:7a:be:9f:a0:7b:30:78:f8:44:3a:97:0a:fe:f6:d7:
03:2e:85:68:cd:35:c2:37:8d:99:8e:b1:ca:7a:d4:4c:c3:1a:
a8:98:64:96:6c:77:2e:ed:de:a7:00:75:19:c3:c6:91:f8:74:
96:60:7d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:48:11 2026 by rpki-client