Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/G9GlP4CesyO67R7ojK6cw0be-B4.roa
File: G9GlP4CesyO67R7ojK6cw0be-B4.roa (raw, json)
Hash identifier: AzwxJYVKnL/Zimj9iKOu0ix5tpzs89aGE6VfNYbrU8M=
Subject key identifier: 1B:D1:A5:3F:80:9E:B3:23:BA:ED:1E:E8:8C:AE:9C:C3:46:DE:F8:1E
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019D0803A55EC131408903604F215D333A13
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/G9GlP4CesyO67R7ojK6cw0be-B4.roa
Signing time: Thu 19 Mar 2026 21:32:29 +0000
ROA not before: Thu 19 Mar 2026 21:32:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 95.85.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:03:a5:5e:c1:31:40:89:03:60:4f:21:5d:33:3a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Mar 19 21:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bd1a53f809eb323baed1ee88cae9cc346def81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:89:d0:42:4a:a3:7d:6a:71:ac:3e:4b:e7:
06:a2:57:4d:66:2c:ee:ed:e0:2c:16:b7:a2:08:c6:
1d:c2:02:45:bb:43:f1:e9:f5:83:e2:51:67:63:bb:
45:3f:fb:e4:6d:c0:b7:04:ad:fa:3d:ab:92:34:5b:
e5:71:7f:07:81:b6:cd:b7:18:0f:de:6c:fb:66:a5:
8f:5f:25:a8:33:62:13:7b:09:10:20:23:9c:fd:dc:
13:ac:c0:25:1e:f7:8d:34:2e:80:d0:9b:ce:8f:53:
c0:6c:e0:39:d4:0f:eb:08:4d:57:33:92:d7:ea:3e:
51:04:1b:28:f6:e3:e4:d2:40:39:a1:f6:4c:53:4f:
e5:ac:c0:d8:95:1d:f2:0c:5f:b9:b4:54:fc:05:7a:
8e:cc:32:75:ef:87:81:23:38:25:c7:d3:5a:1a:5b:
91:a9:84:9e:ce:b7:61:d0:3c:42:8f:2e:e5:45:2c:
1c:12:ba:17:93:2d:f4:54:10:83:0a:b2:0e:25:5f:
fa:15:b9:43:05:49:28:32:06:74:8d:f4:43:a1:53:
bf:6d:b2:94:62:26:56:88:38:2f:63:10:c6:73:38:
2e:fa:38:6f:ea:b8:91:2f:58:d8:2c:23:41:e6:86:
8d:b4:cc:3e:e1:f1:94:ec:ee:14:d0:ef:5a:46:28:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D1:A5:3F:80:9E:B3:23:BA:ED:1E:E8:8C:AE:9C:C3:46:DE:F8:1E
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/G9GlP4CesyO67R7ojK6cw0be-B4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.254.0/24
Signature Algorithm: sha256WithRSAEncryption
89:06:bc:40:f1:39:e8:f5:16:c4:ea:cd:48:48:82:a8:44:58:
af:5c:a5:9e:7d:df:da:42:ca:63:fc:ec:7e:9e:56:22:bb:67:
be:b2:94:68:90:d4:34:cc:4f:8e:ca:8d:c7:35:e9:e0:29:9a:
a3:3a:a8:c5:67:93:bc:64:86:e1:b3:8e:20:34:97:27:84:d8:
26:a4:62:3b:33:a6:2f:c3:6d:2b:01:5c:c9:43:c2:dc:8e:bd:
08:de:e0:e3:1f:4d:ce:e8:da:fa:40:9c:5f:98:25:00:0b:2f:
17:7d:82:eb:bd:c6:6b:3b:11:14:f5:6b:4c:70:4b:cb:12:2e:
49:eb:ae:e6:af:c4:c6:81:35:e9:22:e7:90:7c:26:00:03:2c:
bc:ab:99:6d:0b:aa:37:3d:83:6c:27:80:80:e4:e9:81:59:2f:
ef:58:17:a8:b2:a7:f6:9c:4a:f5:e4:0e:9b:f6:6d:1e:c2:e0:
82:9a:4a:ab:58:9a:e2:40:a1:17:0b:04:d4:91:c3:cb:1f:fd:
21:d5:0c:84:5d:67:b3:f3:a6:2f:89:7c:50:ae:8a:97:6e:70:
0f:c3:6f:4e:92:b5:20:29:01:f4:4e:c2:79:9d:ef:f0:83:2a:
04:7c:7f:86:f4:a4:34:47:38:a0:e9:20:be:b1:07:0e:ad:c0:
bf:b8:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:29 2026 by rpki-client