Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VvnuUvqsbkJFPfQtH-EVxa3HMis.roa
File: VvnuUvqsbkJFPfQtH-EVxa3HMis.roa (raw, json)
Hash identifier: jGqASMZ/VtFVhO3fyRVfIyRQygUknEKKrUo+1pkIjvU=
Subject key identifier: 56:F9:EE:52:FA:AC:6E:42:45:3D:F4:2D:1F:E1:15:C5:AD:C7:32:2B
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A07C2C9A5181963DA87220E6EFB426B649
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VvnuUvqsbkJFPfQtH-EVxa3HMis.roa
Signing time: Mon 07 Sep 2026 14:01:32 +0000
ROA not before: Mon 07 Sep 2026 14:01:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 79.135.141.0/24 maxlen: 24
80.81.47.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
83.223.140.0/24 maxlen: 24
85.234.172.0/22 maxlen: 22
85.234.176.0/22 maxlen: 22
85.254.14.0/24 maxlen: 24
91.190.37.0/24 maxlen: 24
217.24.72.0/22 maxlen: 22
217.24.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:2c:9a:51:81:96:3d:a8:72:20:e6:ef:b4:26:b6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Sep 7 14:01:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56f9ee52faac6e42453df42d1fe115c5adc7322b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:58:cc:d7:b5:ec:6f:43:4e:4c:16:3d:61:
02:22:f9:7e:7d:8d:c4:82:33:ee:68:e8:d1:b7:ea:
81:16:a1:2e:b9:c8:ae:7c:5b:a7:86:af:63:b9:99:
86:ee:88:d1:0a:81:0c:af:58:7f:b0:f5:31:ce:3e:
50:da:a3:d7:0d:7e:3f:7b:bb:4f:0d:62:f5:4f:c5:
67:45:c9:bb:11:2b:f2:3a:11:87:11:c1:ce:ad:00:
4f:f2:51:4e:9e:a7:89:12:f6:24:af:e3:b2:b5:7e:
df:f6:7a:80:51:cc:98:3d:33:a9:a0:d0:11:91:5a:
cd:63:c4:69:08:0b:cf:68:56:19:5f:da:e7:c8:2a:
c3:a3:ba:17:ec:c3:59:de:00:9f:62:40:6c:b7:6b:
1a:aa:82:32:ab:80:cb:b8:4f:1e:2c:e2:86:c2:86:
0f:d2:96:a5:70:c2:3f:8f:65:3c:61:3d:ff:18:c4:
4d:90:da:72:7a:32:86:b9:56:af:c4:e4:32:21:ae:
09:0c:cc:ea:72:54:38:fb:a4:8a:1a:c8:37:aa:fa:
0f:36:78:f7:c6:69:ff:77:ee:18:f7:bb:fe:c3:98:
73:d4:5d:a5:9c:08:66:13:e5:2a:5f:be:c2:24:39:
a1:eb:2e:3e:ac:92:3a:6a:4a:5b:b7:d0:02:86:02:
0d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F9:EE:52:FA:AC:6E:42:45:3D:F4:2D:1F:E1:15:C5:AD:C7:32:2B
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VvnuUvqsbkJFPfQtH-EVxa3HMis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.135.141.0/24
80.81.47.0/24
83.223.138.0/24
83.223.140.0/24
85.234.172.0-85.234.179.255
85.254.14.0/24
91.190.37.0/24
217.24.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1c:a4:c3:c4:a3:4c:c4:d3:f3:c7:fb:8c:ab:33:9f:cc:c1:e0:
d9:81:88:77:2a:15:61:3b:8e:0a:2f:29:45:db:ee:53:f6:d6:
6c:32:6c:2f:d5:88:4f:50:cb:d9:df:ae:06:e6:57:26:3d:47:
88:61:e2:b7:73:c0:08:65:ce:06:67:72:76:25:74:de:50:4b:
e6:af:59:aa:97:c8:6a:0c:67:86:57:18:ef:2c:8e:92:31:dd:
96:42:b1:7a:f4:76:9c:82:ef:8c:21:49:bc:eb:1f:0d:7c:7e:
65:c1:1a:a5:42:89:e4:ec:04:9e:1c:f3:17:2c:ed:9f:84:91:
7d:38:11:c4:6e:a2:3d:27:0b:ac:19:b8:00:32:5f:b8:c6:da:
6d:cb:15:b3:0d:11:27:fd:96:03:c5:4c:4b:fc:7a:99:8c:3e:
1a:b6:7f:16:50:f4:37:7a:3b:10:6d:93:78:e7:07:64:43:3c:
aa:10:a1:f4:44:f1:3a:55:27:93:bf:73:8e:f4:89:b9:c8:3d:
c8:ca:86:e8:c5:f4:13:30:04:9e:5c:11:0d:87:6d:37:60:3f:
e1:bb:02:49:c6:08:9c:b8:8f:b8:53:58:66:a4:e5:e8:6e:11:
43:2d:e0:eb:b1:78:a8:e8:31:90:7c:9d:28:00:24:5c:0e:b8:
03:e1:01:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:19:00 2026 by rpki-client