Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/VzIOsWVyN2BeULByH7QYq4dYbRU.roa
File: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (raw, json)
Hash identifier: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=
Subject key identifier: 57:32:0E:B1:65:72:37:60:5E:50:B0:72:1F:B4:18:AB:87:58:6D:15
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368FFC9111A57806B921DE1788624E3
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/VzIOsWVyN2BeULByH7QYq4dYbRU.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209667
IP address blocks: 89.223.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:c9:11:1a:57:80:6b:92:1d:e1:78:86:24:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57320eb1657237605e50b0721fb418ab87586d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6c:b1:80:47:f4:59:02:f5:0e:d2:77:82:57:
82:5d:3b:70:ba:f4:a1:8b:4a:65:cd:f3:b8:60:1b:
71:36:d8:7f:93:d8:8c:f8:56:f3:0b:f2:ab:f3:26:
82:4d:f1:21:3d:38:8a:eb:4b:92:f7:76:54:3c:40:
c6:f3:0b:f5:c2:13:04:2d:92:2b:d6:44:d0:7a:30:
6f:81:75:f0:f0:23:0b:07:9c:df:b0:45:51:91:ed:
0c:ca:53:f4:5c:c4:8c:7c:ac:30:19:45:fc:00:21:
13:8e:be:16:af:36:e6:10:fd:62:b5:aa:41:bf:4c:
94:41:b7:75:fa:89:bf:ec:14:d1:f6:0d:27:72:0d:
54:96:30:55:62:04:e6:cb:6f:b7:43:df:9c:d7:99:
90:5c:70:bd:54:46:5d:9a:10:9b:d0:47:f2:3b:0c:
07:89:50:89:a7:ca:ec:7f:5e:dd:03:68:bb:58:10:
1a:6d:f4:eb:27:c3:58:fd:c2:e3:5a:2a:f2:1b:bf:
85:cc:c8:d0:c6:a6:e1:c9:aa:02:ee:e1:bb:cf:12:
c4:57:c7:48:7f:d4:f0:6e:b5:28:64:ca:85:21:38:
6e:93:f8:a1:17:24:c8:29:c7:2b:87:8a:86:8e:49:
fa:83:02:c9:e2:0d:52:5b:02:c9:32:37:3b:f3:7f:
0d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:32:0E:B1:65:72:37:60:5E:50:B0:72:1F:B4:18:AB:87:58:6D:15
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/VzIOsWVyN2BeULByH7QYq4dYbRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:13:f1:aa:13:b4:be:c8:5f:3a:1e:38:1b:64:08:ca:28:46:
c2:7b:75:21:98:38:60:92:b6:0f:b4:7b:a9:f7:33:1b:e4:bf:
cf:bc:99:0b:f1:46:e0:2f:1e:d2:75:4a:96:2b:39:ce:de:9c:
8c:ca:76:70:fa:1f:7f:c0:69:ae:5e:aa:7e:2e:ff:07:33:26:
db:46:11:c9:e9:53:7b:e4:aa:66:4b:ed:07:00:05:0c:51:3e:
e8:86:d9:6f:c2:96:b0:60:77:3e:86:f6:a2:4c:bd:a5:56:de:
dd:17:29:5b:56:a7:21:dc:77:82:bc:23:8e:6e:84:c0:05:c0:
9c:88:d8:1c:e7:e0:21:94:fd:64:26:cc:d8:82:10:7a:6b:56:
96:5a:dc:6a:43:ab:11:29:44:ee:8c:e8:ba:40:b6:0c:2d:a6:
48:84:27:f3:6a:c4:28:bb:d1:69:0b:1c:1a:a6:a5:2f:10:b0:
99:95:60:0e:56:d4:a5:3d:54:89:b4:df:fb:86:52:21:df:29:
be:47:54:27:cf:33:71:1c:37:60:85:bf:4b:bd:38:70:a4:05:
8c:85:87:80:6d:92:d2:dc:fb:8e:7b:0e:9f:3b:df:45:37:08:
2a:1c:82:96:94:ea:5a:d1:77:e3:70:ff:8f:e8:f1:a7:1d:48:
d8:5a:5b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:50 2026 by rpki-client