Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/VX56H6KkhijDbH5-98zo_odR-aU.roa
File: VX56H6KkhijDbH5-98zo_odR-aU.roa (raw, json)
Hash identifier: XIQ9JA5wLRcJUVqmkaTCQIk12sWE4CMTFAbdKyptH2U=
Subject key identifier: 55:7E:7A:1F:A2:A4:86:28:C3:6C:7E:7E:F7:CC:E8:FE:87:51:F9:A5
Certificate issuer: /CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Certificate serial: 01A189B78BB251CD203DF8C440AA8F1DB102
Authority key identifier: EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/VX56H6KkhijDbH5-98zo_odR-aU.roa
Signing time: Thu 29 Oct 2026 22:11:09 +0000
ROA not before: Thu 29 Oct 2026 22:11:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213071
IP address blocks: 93.157.185.0/24 maxlen: 24
2a12:95c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:b7:8b:b2:51:cd:20:3d:f8:c4:40:aa:8f:1d:b1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a98b221abe4dd95999eef292ff0bea41218ac
Validity
Not Before: Oct 29 22:11:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=557e7a1fa2a48628c36c7e7ef7cce8fe8751f9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:5c:65:4e:1c:aa:be:d9:21:7b:40:be:8d:
1e:29:33:f9:ea:9d:81:17:06:9a:50:2a:31:c6:0e:
33:5a:06:d1:d1:44:bc:fa:73:78:9b:35:09:ce:8b:
be:70:17:07:13:66:57:9c:97:c8:04:8f:f4:23:61:
59:25:4c:0e:6c:95:3d:76:50:a6:3e:9e:98:c4:d8:
ce:2f:37:87:de:b1:2c:0c:bf:f7:0a:cf:b4:26:0f:
fb:7f:e3:19:0c:ea:ef:cd:16:52:e9:9e:b2:76:72:
e0:a5:92:08:b4:cd:9d:4f:0b:39:10:ac:fa:ea:1f:
cb:8c:11:73:cc:b3:08:28:ba:a7:ff:4e:42:12:02:
fe:ee:a7:52:16:7b:fa:d5:54:13:bc:f0:4d:f7:e9:
f9:e6:4e:26:7b:60:bd:e2:32:36:91:12:f8:cc:86:
89:61:a7:77:e4:31:65:76:14:29:e3:33:9e:c9:47:
38:0a:c3:1c:c5:4e:97:ea:28:c5:9d:4e:cf:2b:7c:
49:e8:2d:bc:fe:8e:6f:16:f9:87:0d:3f:77:2e:7e:
7b:fe:7b:c0:fb:54:58:a9:9d:ce:81:65:07:d3:de:
97:ad:c8:3d:53:57:10:c3:df:8a:34:fd:c6:7e:27:
72:83:a1:9b:d9:0b:99:f7:f0:a7:70:36:21:d0:96:
98:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:7A:1F:A2:A4:86:28:C3:6C:7E:7E:F7:CC:E8:FE:87:51:F9:A5
X509v3 Authority Key Identifier:
keyid:EF:2A:98:B2:21:AB:E4:DD:95:99:9E:EF:29:2F:F0:BE:A4:12:18:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/VX56H6KkhijDbH5-98zo_odR-aU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/41a166-3a00-49bc-935d-56b65b91a73c/1/7yqYsiGr5N2VmZ7vKS_wvqQSGKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.185.0/24
IPv6:
2a12:95c0::/29
Signature Algorithm: sha256WithRSAEncryption
a8:ea:76:09:c2:0d:76:cf:04:2e:6e:b4:27:51:db:69:18:39:
08:f9:53:64:ab:42:e0:bc:77:ec:b3:b1:6c:b3:58:54:d0:e8:
28:3f:18:60:ad:ff:48:73:77:e6:e4:78:dd:00:0c:8a:3a:db:
33:9d:86:7d:ec:e0:a6:37:46:f3:ea:e2:71:bd:e5:06:34:1d:
a6:99:eb:f2:bd:79:7e:21:96:c8:d8:5d:06:cf:7e:5a:0f:26:
bf:69:cf:cd:c3:3b:d2:e1:e8:77:0b:61:21:b0:0c:36:47:24:
b6:9c:07:e2:69:5c:e0:15:f8:a2:50:d6:f5:fa:b6:ff:d9:15:
4f:f8:6c:05:95:56:8a:cb:b9:e7:22:5e:3c:a8:a8:e1:5c:aa:
89:39:c2:0b:0c:3d:88:d1:69:24:11:bd:a8:71:0c:ca:69:ad:
c8:a6:f2:99:22:9d:08:24:11:88:c3:2c:ee:0f:7c:2d:ec:f1:
9e:21:3d:d7:61:74:e0:a1:6b:ac:d6:72:87:d2:bc:fe:50:07:
50:76:79:a1:b0:07:03:49:ed:2e:d5:71:bc:35:c1:b8:39:5e:
7f:70:0b:76:90:75:d9:25:9f:e4:9f:b7:56:14:dc:54:76:3e:
d6:b6:5e:b5:2b:1a:1b:46:03:2a:05:9b:dd:cf:a1:16:82:86:
0b:fb:ea:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 11:15:47 2026 by rpki-client