Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/VktBJoJUVLsV4Fhdae-N5iKyV_M.roa
File: VktBJoJUVLsV4Fhdae-N5iKyV_M.roa (raw, json)
Hash identifier: qTtYxiyPtAWx3c3xC9fJLqpzGh+4lBcaN0sDlshomAs=
Subject key identifier: 56:4B:41:26:82:54:54:BB:15:E0:58:5D:69:EF:8D:E6:22:B2:57:F3
Certificate issuer: /CN=0c8274bf6832a5d8220de2eae869ba4af35639f9
Certificate serial: 019F23689ACBAAD1560D5631F20036F2FF71
Authority key identifier: 0C:82:74:BF:68:32:A5:D8:22:0D:E2:EA:E8:69:BA:4A:F3:56:39:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/VktBJoJUVLsV4Fhdae-N5iKyV_M.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58096
IP address blocks: 45.93.4.0/22 maxlen: 22
91.213.168.0/24 maxlen: 24
91.220.69.0/24 maxlen: 24
94.141.124.0/22 maxlen: 24
168.222.204.0/22 maxlen: 22
185.33.228.0/22 maxlen: 32
185.154.72.0/22 maxlen: 32
185.216.192.0/23 maxlen: 32
193.105.114.0/24 maxlen: 32
193.160.204.0/23 maxlen: 32
195.170.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9a:cb:aa:d1:56:0d:56:31:f2:00:36:f2:ff:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8274bf6832a5d8220de2eae869ba4af35639f9
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=564b4126825454bb15e0585d69ef8de622b257f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:96:03:e8:7b:ef:f7:21:1b:69:28:0f:d6:
9b:05:b3:81:65:ed:f7:49:fc:1a:f1:c9:03:91:91:
dd:ab:be:02:0e:a7:db:a3:50:03:05:f9:fd:5e:bc:
4b:f1:8e:19:a4:59:c7:4f:c9:48:f4:f2:02:e8:3f:
5b:30:fd:ae:55:d8:e6:22:13:36:be:08:46:20:f6:
0c:db:83:7a:82:9e:90:f7:28:67:05:0b:55:c2:36:
94:5d:73:3f:5d:81:64:b3:e6:66:41:81:d0:fc:77:
85:ff:81:4e:c5:0b:d7:84:0e:c0:a9:97:49:30:79:
e8:55:67:8c:74:e7:9e:7c:52:35:dc:e2:b0:42:ce:
6c:45:f0:da:06:76:26:4e:b8:65:97:88:f9:db:f0:
e2:11:a7:6e:d3:0d:e8:e3:41:97:df:35:11:8c:28:
86:9b:b1:c2:a8:54:42:5c:46:e1:63:be:4d:c9:8a:
70:db:7d:4d:a3:03:14:b6:42:ff:f4:53:30:41:dc:
42:5d:c9:7d:2c:df:59:48:cf:c0:d6:a7:39:45:c9:
6b:c0:19:c3:21:0e:47:b4:38:df:16:98:9d:8c:e1:
b2:35:31:b0:5f:b6:c6:58:af:fb:ae:3b:df:65:69:
83:c8:8b:67:bd:6f:85:d5:92:d6:42:73:df:76:55:
a3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4B:41:26:82:54:54:BB:15:E0:58:5D:69:EF:8D:E6:22:B2:57:F3
X509v3 Authority Key Identifier:
keyid:0C:82:74:BF:68:32:A5:D8:22:0D:E2:EA:E8:69:BA:4A:F3:56:39:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/VktBJoJUVLsV4Fhdae-N5iKyV_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.4.0/22
91.213.168.0/24
91.220.69.0/24
94.141.124.0/22
168.222.204.0/22
185.33.228.0/22
185.154.72.0/22
185.216.192.0/23
193.105.114.0/24
193.160.204.0/23
195.170.204.0/22
Signature Algorithm: sha256WithRSAEncryption
38:3b:8b:b9:64:c4:33:34:96:75:dd:b9:e1:64:81:4c:73:c7:
c8:35:29:4a:f7:c4:34:f9:a3:0d:ce:4d:e6:30:04:a2:46:8e:
57:d4:ae:a4:d6:d4:c6:55:77:a8:a6:9f:34:4b:0a:4f:bf:73:
f0:3a:99:56:0e:00:e7:22:a6:c0:f2:78:e9:db:ce:0d:dc:54:
14:67:89:cd:5d:b1:f4:0f:28:11:45:4b:9e:65:7b:2f:8d:21:
ce:19:1f:a1:df:d2:88:f4:11:5e:74:e4:d8:b0:03:50:cf:e4:
51:c3:c8:a8:e9:34:16:4b:bc:a7:9d:4a:51:79:53:bb:80:34:
35:04:e9:05:07:44:5e:e0:53:4e:e2:1e:89:06:8c:13:26:d3:
cd:e0:0f:f2:41:ee:27:30:8c:9f:48:44:13:32:0e:8c:cb:13:
de:b1:f2:73:6c:d4:17:11:33:ae:81:de:2e:dd:48:11:8b:94:
e8:5a:8a:12:2b:f5:ca:53:16:4f:19:d2:74:66:2e:5d:80:7f:
69:52:e4:66:6f:3b:ae:de:43:93:a8:5e:0e:78:36:0e:74:0d:
4f:3c:2a:70:c1:97:67:e4:9d:f2:f8:c9:9f:fb:7c:b2:19:57:
a5:a9:2e:89:42:d8:0a:5d:c6:52:8e:4b:fc:94:5d:d1:1d:41:
e6:4b:f7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:41 2026 by rpki-client