Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/VyAWND_OasnYuRme0Q6yAU_fUQw.roa
File: VyAWND_OasnYuRme0Q6yAU_fUQw.roa (raw, json)
Hash identifier: c2ejCdGHIJHwK7lWa3CclVna1o7khnE1y7hWMzg9fC0=
Subject key identifier: 57:20:16:34:3F:CE:6A:C9:D8:B9:19:9E:D1:0E:B2:01:4F:DF:51:0C
Certificate issuer: /CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Certificate serial: 019F138D9F6B51AFEEFF3F627A513E8D7764
Authority key identifier: A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/VyAWND_OasnYuRme0Q6yAU_fUQw.roa
Signing time: Mon 29 Jun 2026 13:24:36 +0000
ROA not before: Mon 29 Jun 2026 13:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39151
IP address blocks: 87.238.112.0/21 maxlen: 21
91.151.144.0/20 maxlen: 20
95.128.16.0/21 maxlen: 21
185.70.252.0/23 maxlen: 23
185.70.252.0/24 maxlen: 24
213.175.128.0/24 maxlen: 24
213.175.132.0/24 maxlen: 24
213.175.134.0/24 maxlen: 24
213.175.136.0/21 maxlen: 21
213.175.150.0/24 maxlen: 24
213.175.152.0/24 maxlen: 24
213.175.156.0/24 maxlen: 24
213.175.158.0/24 maxlen: 24
213.208.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:8d:9f:6b:51:af:ee:ff:3f:62:7a:51:3e:8d:77:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8010ceb20f2e076a3f000271a5c375761bec2f5
Validity
Not Before: Jun 29 13:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=572016343fce6ac9d8b9199ed10eb2014fdf510c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:c9:7c:aa:51:c1:77:87:e7:c6:1c:5e:39:
2d:8b:be:83:a8:86:28:d6:bd:4f:10:f4:c3:c3:73:
0d:c3:d1:93:e1:66:31:63:29:63:e8:c9:76:f1:4d:
7d:b0:f6:12:37:00:c4:af:13:08:30:80:10:7e:b0:
91:9e:e3:34:c9:23:d3:36:86:59:46:a0:d8:a5:52:
b7:b1:f1:76:c7:bd:a2:85:07:87:fe:15:3c:a1:f5:
95:3a:da:7f:d8:ec:93:3d:43:c0:b6:58:a1:8c:dd:
3c:3f:f6:d8:1a:93:12:47:04:5d:7a:99:9b:f3:21:
e3:ee:89:92:a5:45:8c:20:69:75:bd:ed:b2:9e:98:
7f:1b:f0:d5:39:1c:bf:99:07:d5:6c:26:a0:b5:b8:
09:06:5a:41:b1:b3:c2:dc:67:61:5b:af:9c:ed:e9:
d7:fb:28:39:0e:ab:3a:e0:8e:7c:38:08:35:b3:75:
88:8d:23:78:6a:8b:6a:f4:31:ff:a9:b1:b8:8d:a0:
d6:13:52:ad:b2:2a:ef:31:4f:60:70:85:84:27:42:
b8:25:2a:8b:72:fe:af:53:21:c9:b8:27:29:2a:dd:
8a:b0:a4:05:41:8a:67:52:93:8c:a2:00:1d:6f:00:
6c:4a:c9:e0:06:d8:65:cc:51:48:79:2f:78:ce:8c:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:20:16:34:3F:CE:6A:C9:D8:B9:19:9E:D1:0E:B2:01:4F:DF:51:0C
X509v3 Authority Key Identifier:
keyid:A8:01:0C:EB:20:F2:E0:76:A3:F0:00:27:1A:5C:37:57:61:BE:C2:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAEM6yDy4Haj8AAnGlw3V2G-wvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/VyAWND_OasnYuRme0Q6yAU_fUQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f444aa-ae8c-4d14-a3a3-49f65c6a48bf/1/qAEM6yDy4Haj8AAnGlw3V2G-wvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.112.0/21
91.151.144.0/20
95.128.16.0/21
185.70.252.0/23
213.175.128.0/24
213.175.132.0/24
213.175.134.0/24
213.175.136.0/21
213.175.150.0/24
213.175.152.0/24
213.175.156.0/24
213.175.158.0/24
213.208.32.0/21
Signature Algorithm: sha256WithRSAEncryption
19:5f:47:a3:02:97:10:cd:7d:0a:35:df:44:90:9c:58:3d:d7:
63:86:fc:e1:60:d2:e8:ed:03:76:f4:81:b2:b3:51:89:76:08:
c0:e2:2a:f1:c7:38:b8:b4:42:6a:0b:9d:8c:27:ab:cc:3d:b1:
f0:65:e5:01:ff:a7:90:0d:1a:b9:80:f5:30:03:3b:7b:04:17:
e6:c8:14:05:a5:7d:d8:52:2e:c0:26:3f:bb:25:32:04:9c:4c:
4c:58:0b:a1:d5:7e:ad:c6:25:e7:f3:d7:b0:ca:13:1b:7f:b3:
db:e7:4a:42:e3:17:9e:b0:bd:98:74:16:84:8a:73:82:80:22:
37:59:d1:33:49:e8:b5:bd:b6:5d:71:16:4e:29:b7:8a:58:ca:
6e:8b:25:b2:36:d9:6f:a6:ef:a1:9f:67:33:95:04:f2:3f:e7:
4b:1b:6f:a0:f0:1f:1f:5d:1a:81:c4:b1:a9:7d:01:2c:12:61:
5a:05:09:b4:21:96:bd:7e:f5:be:5a:78:5e:89:1e:2c:ab:71:
e9:17:d3:b0:b8:e7:65:2f:7d:72:79:a2:ca:20:9c:09:11:8f:
24:77:e3:0e:2b:57:86:38:e7:96:c1:6a:ba:f6:a3:69:14:7e:
2c:bd:3d:41:6f:a0:bd:36:81:38:89:c9:bd:e3:2c:cf:a2:45:
51:78:df:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:11 2026 by rpki-client