Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/vN6bypKPP4_R4Oe8TnxxO8a9uoE.roa
File: vN6bypKPP4_R4Oe8TnxxO8a9uoE.roa (raw, json)
Hash identifier: DO9hzzZioH0/1uVISXc0MOo1gFy5vQG85oKJKF4Qh/o=
Subject key identifier: BC:DE:9B:CA:92:8F:3F:8F:D1:E0:E7:BC:4E:7C:71:3B:C6:BD:BA:81
Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343
Certificate serial: 019F6B329BCA071FC2081846CAE7090E48C3
Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/vN6bypKPP4_R4Oe8TnxxO8a9uoE.roa
Signing time: Thu 16 Jul 2026 13:51:46 +0000
ROA not before: Thu 16 Jul 2026 13:51:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198414
IP address blocks: 91.228.196.0/22 maxlen: 24
91.234.146.0/24 maxlen: 24
91.237.52.0/24 maxlen: 24
91.239.66.0/23 maxlen: 24
185.25.148.0/22 maxlen: 24
185.140.120.0/22 maxlen: 22
185.180.204.0/22 maxlen: 24
185.201.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:32:9b:ca:07:1f:c2:08:18:46:ca:e7:09:0e:48:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343
Validity
Not Before: Jul 16 13:51:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcde9bca928f3f8fd1e0e7bc4e7c713bc6bdba81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:09:ca:02:53:99:00:57:16:fc:ed:e8:93:
27:03:24:63:50:c0:7e:13:e1:49:31:3a:6f:46:c3:
79:a6:01:82:07:49:50:6e:2b:40:d5:d5:16:fc:0a:
43:b9:b8:38:22:58:74:0b:0d:ce:ef:ac:37:bd:a8:
8c:62:11:e5:70:7d:2b:45:75:30:91:a9:56:49:75:
e6:27:a3:08:6b:88:94:50:a3:af:0c:96:b2:e8:2d:
25:02:58:4a:f8:a8:aa:23:ff:79:19:37:d5:0b:b6:
5b:99:8b:9d:df:86:a3:30:86:8d:d4:ba:b9:10:22:
a7:ef:b5:06:55:30:b1:f3:75:e6:de:7c:04:47:ec:
33:03:ea:00:9c:36:1c:75:c9:3c:34:87:2a:6a:3b:
11:33:b2:d1:00:0e:67:e2:53:07:05:63:61:5e:25:
a3:77:a0:12:ef:2f:ac:3b:e7:c3:7a:19:20:98:a5:
2b:df:56:a2:09:7a:3c:f6:31:20:d9:7e:f8:f8:93:
6e:93:0d:96:be:13:92:b9:33:48:83:f6:f6:ac:35:
05:72:4e:38:fd:aa:13:d1:c6:ed:ea:76:f4:94:bb:
d8:3f:f0:51:85:b7:b5:41:c8:00:ee:82:c8:20:9d:
00:50:29:23:a8:4c:59:b4:ee:b8:54:0c:8e:67:b6:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DE:9B:CA:92:8F:3F:8F:D1:E0:E7:BC:4E:7C:71:3B:C6:BD:BA:81
X509v3 Authority Key Identifier:
keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/vN6bypKPP4_R4Oe8TnxxO8a9uoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.196.0/22
91.234.146.0/24
91.237.52.0/24
91.239.66.0/23
185.25.148.0/22
185.140.120.0/22
185.180.204.0/22
185.201.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:ef:73:c6:d2:f3:2a:ef:77:d1:fc:c4:43:5d:dc:76:f4:52:
5c:c6:ec:ca:7b:1c:d6:d7:6e:34:b1:e0:f6:af:06:c2:7b:d3:
de:20:99:63:73:d5:13:7c:b1:4e:1a:a9:98:a7:64:75:a3:4d:
ad:df:32:8b:ca:8e:0e:03:45:75:99:e3:02:af:e4:2d:d3:ba:
1c:79:5e:81:5a:e8:99:b1:47:9e:79:c1:0b:bd:78:a7:36:a4:
3b:ae:7c:eb:8a:4c:64:80:5f:af:a8:2a:1d:85:2d:53:79:55:
fb:0d:eb:01:b2:6b:bf:c6:c2:57:6c:a8:fb:44:11:b7:d0:73:
f4:16:10:57:1b:a2:3a:f7:07:94:05:84:58:36:2e:e4:7f:04:
0a:57:cf:6e:07:16:76:6a:3c:da:7f:08:51:96:4e:e2:de:f2:
8a:aa:b6:7f:b5:e3:88:9a:3f:8e:4c:bc:d0:8d:5b:cb:11:23:
69:93:3c:99:57:71:ff:94:62:f4:99:06:15:0c:f5:47:af:94:
cd:fa:d2:e3:23:6c:77:12:5e:27:95:3f:81:c5:96:60:b8:82:
b9:b7:dc:6c:2a:da:d8:d6:70:07:d9:52:99:36:2f:2c:84:1e:
54:85:bf:b5:73:ed:fc:0d:76:49:af:11:a4:d4:78:de:17:76:
cb:c0:45:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:50:45 2026 by rpki-client