Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VeExbCBM04z_5eeOS8006EH3K5w.roa
File: VeExbCBM04z_5eeOS8006EH3K5w.roa (raw, json)
Hash identifier: i0/J43ADWGsJraeM1oQhbEis6mYiwMnFDpLvwBsheV4=
Subject key identifier: 55:E1:31:6C:20:4C:D3:8C:FF:E5:E7:8E:4B:CD:34:E8:41:F7:2B:9C
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A0E8D739EF83367F43F2982484799060D1
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VeExbCBM04z_5eeOS8006EH3K5w.roa
Signing time: Mon 28 Sep 2026 16:26:54 +0000
ROA not before: Mon 28 Sep 2026 16:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218805
IP address blocks: 185.67.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:d7:39:ef:83:36:7f:43:f2:98:24:84:79:90:60:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Sep 28 16:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e1316c204cd38cffe5e78e4bcd34e841f72b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9f:76:25:b7:0a:80:a5:93:9d:a4:f1:f5:3a:
ef:01:a9:de:fa:a2:77:2e:8a:ec:dd:53:3f:09:ca:
db:76:4e:f6:d4:7a:f0:49:dc:68:fd:4c:94:f3:56:
2e:8f:6d:c5:50:6a:2b:d0:a4:06:9e:ea:9b:22:3b:
77:75:ca:f0:a7:07:d0:36:fd:4d:ee:df:d3:37:3c:
ef:ed:36:64:1c:23:c8:8f:17:fb:31:a8:74:2e:8f:
2b:26:0e:90:9d:e3:f1:dc:8e:45:6b:fe:22:de:05:
08:7c:25:c4:a6:5d:57:06:1a:dc:55:cd:11:f6:d5:
7b:12:6d:91:00:52:a7:03:43:36:8a:53:80:f7:3a:
6c:0b:f0:4a:37:d1:76:06:25:a9:b7:56:5b:0d:4b:
25:e0:33:22:14:85:58:87:d9:c3:73:8e:8b:0e:c1:
d6:8c:6f:1e:af:ee:88:91:fa:87:58:e0:c6:87:77:
e7:75:d0:3f:32:8e:97:fd:05:9b:c6:63:37:bc:80:
2b:39:36:31:4d:00:8b:87:b4:e4:7a:1c:2b:55:7a:
7e:4d:d7:de:fd:cb:6f:e0:8c:12:d6:87:9c:6a:74:
6d:b4:1d:64:ce:81:59:ad:04:90:75:f1:04:45:3a:
71:22:98:7a:fa:64:27:fe:b8:a6:9b:53:14:dc:42:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:31:6C:20:4C:D3:8C:FF:E5:E7:8E:4B:CD:34:E8:41:F7:2B:9C
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VeExbCBM04z_5eeOS8006EH3K5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.22.0/24
Signature Algorithm: sha256WithRSAEncryption
54:72:59:fb:4e:e5:23:1e:3e:4d:fe:13:9d:26:d0:20:64:7a:
a6:07:1c:49:9f:0c:60:75:0e:b5:82:6c:5a:88:a7:e2:66:33:
61:47:18:01:fe:5d:fb:7e:17:a3:c2:cf:40:3e:76:4d:54:b4:
0c:21:d8:3f:8e:72:33:ad:bb:a4:d6:9e:8e:ca:28:6c:94:75:
28:74:22:59:71:0f:96:d2:4f:8f:ce:32:b9:ac:bb:88:0f:da:
9d:cf:79:4b:93:9c:d0:52:00:0b:5b:b8:ce:f2:0a:a9:aa:01:
e6:b6:f5:b4:3d:40:8b:1c:dc:ba:8f:a3:0e:5e:f0:24:c2:7d:
d5:1a:60:35:59:ed:5e:d9:6e:70:12:19:a2:77:ee:03:f9:d7:
9c:70:36:6a:f6:f2:b1:08:7b:ae:b7:64:7d:69:2c:98:d8:4e:
e2:22:d5:e2:57:eb:46:ed:32:93:07:71:1c:37:d1:5d:c9:9a:
d4:fb:f0:26:4c:24:f5:ff:0f:6f:06:71:44:2d:8d:09:8e:ba:
da:3e:eb:e4:62:75:16:39:53:23:a1:67:5f:a3:c0:99:95:2b:
52:8c:fd:43:7e:ba:36:8f:dd:8b:8f:fe:7f:9a:1c:d3:af:92:
99:a4:90:c0:19:97:40:18:ea:37:b6:a0:47:69:7a:22:bd:63:
1a:44:88:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:27 2026 by rpki-client