Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/VvLK0PoDpQOcNcKtmg6QR8GeTHg.roa
File: VvLK0PoDpQOcNcKtmg6QR8GeTHg.roa (raw, json)
Hash identifier: el7uF1Gpe9VS9/qsvqwupFmtqVKLWLRVyOpLvjR2b54=
Subject key identifier: 56:F2:CA:D0:FA:03:A5:03:9C:35:C2:AD:9A:0E:90:47:C1:9E:4C:78
Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial: 019CB3B7B48DE1F36BCC0AD47EEB4FF0E2CA
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/VvLK0PoDpQOcNcKtmg6QR8GeTHg.roa
Signing time: Tue 03 Mar 2026 12:41:26 +0000
ROA not before: Tue 03 Mar 2026 12:41:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60387
IP address blocks: 45.87.220.0/24 maxlen: 24
45.87.221.0/24 maxlen: 24
45.87.222.0/24 maxlen: 24
45.87.223.0/24 maxlen: 24
82.115.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:b7:b4:8d:e1:f3:6b:cc:0a:d4:7e:eb:4f:f0:e2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Validity
Not Before: Mar 3 12:41:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56f2cad0fa03a5039c35c2ad9a0e9047c19e4c78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:5a:ed:d6:be:14:b9:78:d1:ec:16:86:40:
a2:a5:f2:77:a6:e8:b2:31:a2:fc:2e:2e:dd:28:4b:
62:50:24:f0:6b:18:37:42:7d:01:b4:3e:94:aa:ce:
33:e7:95:5a:ce:34:48:d2:da:8b:22:f9:83:1a:30:
68:c2:99:81:0e:78:74:d8:03:50:e8:b6:6d:6a:dc:
2e:0e:e0:c7:94:85:f5:de:6a:10:36:df:6c:45:71:
4c:0c:80:72:74:ff:21:ff:0a:9b:f2:d9:28:b3:42:
bf:44:8e:68:32:02:2a:82:b0:e9:13:bf:16:58:d8:
11:c6:09:9c:78:bd:7f:a2:84:aa:0a:56:6f:c5:11:
b1:a4:96:fa:b3:b6:e2:73:76:fe:f1:84:e9:2c:ba:
d1:af:05:30:00:05:e7:9e:78:ea:d6:cb:ef:95:67:
3a:08:3d:12:82:5d:ac:c9:92:94:38:8c:0e:9c:b1:
f0:56:c5:ab:6e:1b:13:5d:a0:aa:dc:a9:a9:48:c6:
b1:8a:bf:06:ca:04:c3:38:4d:72:fb:38:cc:ba:0c:
e3:3e:58:d3:13:fd:80:fb:94:08:e6:ac:41:80:f6:
d2:15:2c:dc:8a:18:b9:1c:4c:64:18:d0:a2:67:6b:
86:50:1f:93:75:7f:50:8d:70:80:b8:aa:8c:3e:b1:
c2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F2:CA:D0:FA:03:A5:03:9C:35:C2:AD:9A:0E:90:47:C1:9E:4C:78
X509v3 Authority Key Identifier:
keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/VvLK0PoDpQOcNcKtmg6QR8GeTHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.220.0/22
82.115.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e0:53:5f:35:e5:03:19:18:9e:c0:28:69:ef:9d:07:d9:e7:
65:15:dc:c4:3a:57:b6:9b:a0:93:a5:0b:a8:30:e2:14:1c:18:
e0:fc:34:b7:14:6a:42:07:c5:cd:11:96:d3:d1:52:db:b7:23:
03:8c:be:74:94:41:a9:7c:59:da:83:7c:ce:f7:87:14:10:cf:
ce:66:6e:82:01:d7:cb:6b:5e:6a:01:f7:46:02:df:cb:ff:de:
59:11:76:96:3c:0d:cc:ec:a0:0f:02:93:a5:09:3a:b4:f8:91:
88:b0:51:8f:25:00:27:22:1f:d8:38:4d:c7:ff:88:20:dc:93:
e6:4e:53:34:cb:fc:8e:17:5e:8e:49:3b:02:d5:cc:b0:e6:9d:
43:cd:b9:cd:75:5f:be:55:63:5d:fc:7c:80:96:9f:9e:e9:78:
0e:72:85:30:70:2a:86:44:88:9b:87:26:ac:3a:23:37:54:77:
c2:e5:50:d7:4c:cf:1d:4f:9a:21:17:1c:0f:f6:b2:54:66:f8:
9f:12:1c:fd:52:5f:28:94:66:00:a6:11:c1:6a:64:13:c4:f4:
c5:32:32:bb:8b:fc:43:5c:b7:8b:84:64:47:c8:31:c8:27:a5:
c8:56:94:ae:0e:f9:dd:83:bd:dc:c2:ca:b8:6f:bc:c8:50:2d:
32:64:15:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:47:49 2026 by rpki-client