Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa
File: VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa (raw, json)
Hash identifier: umvesd0+PZ7bymZU641FAmXWDwmpl+q6A+dAgZEThlE=
Subject key identifier: 56:92:20:88:37:84:31:FE:E7:5B:DC:2B:8F:C2:86:03:3F:0A:D5:A0
Certificate issuer: /CN=f1f759b4c53c383c990bf369e395489a03e12b83
Certificate serial: 019CF602E0E203D368EEFB76F0D9B0F5255A
Authority key identifier: F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa
Signing time: Mon 16 Mar 2026 09:38:29 +0000
ROA not before: Mon 16 Mar 2026 09:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198494
IP address blocks: 91.235.183.0/24 maxlen: 24
2001:67c:27d8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:02:e0:e2:03:d3:68:ee:fb:76:f0:d9:b0:f5:25:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f759b4c53c383c990bf369e395489a03e12b83
Validity
Not Before: Mar 16 09:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56922088378431fee75bdc2b8fc286033f0ad5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7e:e0:cc:f2:f9:70:ad:79:23:bd:54:50:c6:
0a:ea:ed:c4:2b:8e:18:c7:eb:cc:c7:62:18:af:ac:
dd:60:94:96:c3:d1:7b:f0:90:5a:c7:7d:27:04:06:
4e:19:04:1d:4b:61:b8:0e:fd:6b:f9:8d:88:fd:8c:
9d:a5:ad:49:20:7f:81:5d:10:75:8b:f0:a7:4b:af:
49:38:cf:44:ab:3c:3c:85:52:a3:6c:13:1a:ce:76:
d7:3c:e2:cf:22:a3:c5:21:bb:fb:69:ae:a3:ee:92:
ec:66:94:55:9c:a5:a9:cc:3b:29:0f:53:db:ac:12:
74:1c:d8:fe:f6:e7:c3:2a:d9:4b:e6:7f:88:84:ad:
13:ee:c9:29:6f:3c:a0:7e:c2:fb:e7:56:3a:f0:01:
76:03:dd:f3:f3:71:26:6a:9d:85:6e:a4:b2:57:47:
48:ea:34:85:5c:42:57:5f:50:08:17:b8:3b:99:85:
5e:9e:83:ff:e1:3b:d7:7a:61:02:08:72:26:04:c7:
16:cf:02:ed:b8:9e:fb:df:f2:18:38:8b:31:8a:59:
51:d9:93:3e:8d:24:bc:a6:76:d4:43:30:5c:6b:60:
2c:68:ed:c6:1a:54:ed:7a:a3:ab:34:17:1d:c0:77:
cb:f2:5c:e7:16:25:bc:96:ae:b1:ff:27:15:5a:d7:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:20:88:37:84:31:FE:E7:5B:DC:2B:8F:C2:86:03:3F:0A:D5:A0
X509v3 Authority Key Identifier:
keyid:F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.183.0/24
IPv6:
2001:67c:27d8::/48
Signature Algorithm: sha256WithRSAEncryption
67:f7:d6:18:cb:ae:e7:4d:ca:fb:d6:cb:3d:2c:f6:fb:1a:df:
b5:38:3b:58:57:d1:12:27:59:90:28:5d:80:a2:39:f6:63:63:
ff:ab:b6:13:77:e4:40:73:69:a9:e6:d9:9f:2e:f2:4e:78:75:
5c:56:e8:73:4f:21:82:71:d6:bd:e1:5d:ec:a7:88:63:07:5d:
da:d5:91:87:9d:9f:75:1a:ad:de:76:a7:bc:e3:1a:9e:70:8c:
f9:5e:ce:cc:02:90:e3:3d:a7:20:e6:65:7f:37:43:2f:28:94:
06:71:64:38:cc:4e:08:a8:02:d8:f7:db:29:24:fc:c7:f1:a3:
52:3d:9e:6f:1c:bd:a1:98:05:70:6a:9a:42:98:b1:db:07:fc:
2b:ea:60:61:ac:cc:c8:15:b2:89:62:92:2c:40:89:29:db:73:
3f:d7:a9:1e:b2:16:c3:24:8b:8a:42:cb:26:6f:3f:29:77:5f:
c9:96:5a:d6:60:9f:bf:02:cd:b3:77:2d:2d:46:84:45:0a:0f:
e7:7e:09:0d:cb:a2:ce:00:d6:8e:21:8e:fc:55:8e:0b:c0:10:
5b:3b:be:e9:ee:60:99:1f:3a:26:ff:52:a9:61:a1:ab:01:88:
d8:0e:b8:a5:13:26:a1:5d:6c:f3:6e:75:cc:0d:c3:86:e0:c5:
2d:e1:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:53 2026 by rpki-client