Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vgS9KL1SqcZLwGvOWhyy3lMblLs.roa
File: vgS9KL1SqcZLwGvOWhyy3lMblLs.roa (raw, json)
Hash identifier: tpPjF7Csd5iG38jcU3o140/qGzHxeT3tQM5eW6gRN4M=
Subject key identifier: BE:04:BD:28:BD:52:A9:C6:4B:C0:6B:CE:5A:1C:B2:DE:53:1B:94:BB
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0619CF7B2C3290D5A7B1E7E5638A3B8BB
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vgS9KL1SqcZLwGvOWhyy3lMblLs.roa
Signing time: Wed 02 Sep 2026 10:14:32 +0000
ROA not before: Wed 02 Sep 2026 10:14:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 95.164.53.0/24 maxlen: 24
95.164.55.0/24 maxlen: 24
95.164.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:9c:f7:b2:c3:29:0d:5a:7b:1e:7e:56:38:a3:b8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 2 10:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be04bd28bd52a9c64bc06bce5a1cb2de531b94bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:e1:9a:87:7f:fa:27:75:c1:0c:b9:09:77:
39:28:04:10:b1:72:77:4f:79:39:02:81:2d:b7:b7:
3f:ef:ee:27:54:49:be:b1:7f:0b:f5:53:67:3d:d8:
61:98:e7:2e:ce:f0:08:0d:37:83:4b:c5:a2:fe:e4:
86:0f:18:d8:fe:ce:05:f4:f4:5c:bc:48:64:ae:d6:
a4:25:46:88:99:b6:72:fe:83:9f:d0:ca:a3:bb:5f:
b9:1f:a6:49:4a:04:bf:47:00:e2:7c:2c:43:53:e4:
46:72:46:35:6c:d5:4b:ed:53:b0:88:e9:bb:31:65:
4d:6b:04:71:27:05:15:84:00:e1:ba:80:82:5b:d6:
d4:33:81:9e:1a:71:b5:35:53:19:c9:57:9b:00:df:
00:7e:ad:32:dc:34:ae:8f:56:f9:40:3a:ce:90:6d:
96:6f:70:91:0d:c1:8f:f6:7f:a3:6c:a6:6f:6d:f4:
e0:17:fd:22:da:31:21:27:1b:29:54:2e:3d:27:8b:
40:38:26:a3:0f:82:1e:5f:65:92:9b:3a:d2:60:2e:
a6:61:89:fe:da:8e:8d:47:ef:08:cf:33:d4:c0:3c:
79:b4:c9:52:94:89:27:c5:25:f9:1e:c6:9d:51:bd:
05:b3:74:4c:dd:11:56:d0:aa:42:0a:ea:98:52:51:
1c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:04:BD:28:BD:52:A9:C6:4B:C0:6B:CE:5A:1C:B2:DE:53:1B:94:BB
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/vgS9KL1SqcZLwGvOWhyy3lMblLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.53.0/24
95.164.55.0/24
95.164.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a2:5c:c8:e3:fa:3a:90:0a:95:6c:fe:21:92:87:80:2a:da:
ee:13:23:d3:bf:eb:fd:2e:7c:96:2d:df:37:d9:27:5f:99:24:
dc:7b:0f:d5:fb:bc:a1:07:55:93:15:4b:55:c5:e6:e7:11:c9:
71:88:29:89:d4:d4:92:36:ec:65:73:33:35:b1:27:fd:3c:a6:
d1:4f:e5:af:26:3f:f0:cd:4a:1a:2e:b9:18:0f:2c:ec:4f:21:
d2:ef:6d:fe:00:8e:7c:bd:fd:0c:5b:8c:e3:08:64:26:79:18:
67:c2:d9:74:11:ba:ca:eb:e2:57:98:0b:59:97:eb:b0:3c:36:
36:54:f8:51:f6:9e:6f:4b:b9:69:b0:e9:01:5f:64:85:f6:2a:
a9:3d:99:36:ee:0e:fe:85:45:73:10:1e:f1:2c:f6:f4:11:df:
60:8a:08:bb:e3:a4:77:20:83:c1:9b:75:a8:c1:30:74:fc:47:
fe:4f:c8:b1:59:7e:87:0e:da:d2:ce:ac:6b:fe:27:6d:70:0c:
21:11:58:0f:7e:36:1c:78:9a:0c:1b:87:4d:7d:66:a1:6e:0f:
bd:85:bd:14:d9:75:ba:cf:d4:e3:2f:c8:82:2a:f7:b9:f9:1f:
97:ab:fe:9e:86:05:51:db:aa:1c:74:cb:21:47:2d:cb:75:01:
8a:d2:65:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBhnPeywykNWnseflY4o7i7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwOTAyMTAxNDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTA0YmQyOGJkNTJhOWM2NGJjMDZiY2U1YTFjYjJkZTUzMWI5NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9nhmod/+id1wQy5CXc5KAQQsXJ3
T3k5AoEtt7c/7+4nVEm+sX8L9VNnPdhhmOcuzvAIDTeDS8Wi/uSGDxjY/s4F9PRc
vEhkrtakJUaImbZy/oOf0Mqju1+5H6ZJSgS/RwDifCxDU+RGckY1bNVL7VOwiOm7
MWVNawRxJwUVhADhuoCCW9bUM4GeGnG1NVMZyVebAN8Afq0y3DSuj1b5QDrOkG2W
b3CRDcGP9n+jbKZvbfTgF/0i2jEhJxspVC49J4tAOCajD4IeX2WSmzrSYC6mYYn+
2o6NR+8IzzPUwDx5tMlSlIknxSX5HsadUb0Fs3RM3RFW0KpCCuqYUlEc6wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL4EvSi9UqnGS8Brzlocst5TG5S7MB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvdmdTOUtMMVNxY1pMd0d2T1doeXkzbE1ibExzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAX6Q1AwQA
X6Q3AwQAX6R7MA0GCSqGSIb3DQEBCwUAA4IBAQCLolzI4/o6kAqVbP4hkoeAKtru
EyPTv+v9LnyWLd832SdfmSTcew/V+7yhB1WTFUtVxebnEclxiCmJ1NSSNuxlczM1
sSf9PKbRT+WvJj/wzUoaLrkYDyzsTyHS723+AI58vf0MW4zjCGQmeRhnwtl0EbrK
6+JXmAtZl+uwPDY2VPhR9p5vS7lpsOkBX2SF9iqpPZk27g7+hUVzEB7xLPb0Ed9g
igi746R3IIPBm3WowTB0/Ef+T8ixWX6HDtrSzqxr/idtcAwhEVgPfjYceJoMG4dN
fWahbg+9hb0U2XW6z9TjL8iCKve5+R+Xq/6ehgVR26ocdMshRy3LdQGK0mXJ
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:27 2026 by rpki-client