Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/e6f64a-b1c6-4b98-8b3f-92f1f9b54ed0/1/VRk5LJrw71KsGEGvvfEdmV_7ZRM.roa
File: VRk5LJrw71KsGEGvvfEdmV_7ZRM.roa (raw, json)
Hash identifier: lGVSOv9bE5nT3F83qfTGvQoFwHuQfCOAcbDfet89LIA=
Subject key identifier: 55:19:39:2C:9A:F0:EF:52:AC:18:41:AF:BD:F1:1D:99:5F:FB:65:13
Certificate issuer: /CN=5a50be2e2a7aad7e412d6f77011c41a01a4fe03f
Certificate serial: 019F5CBC6AF52DB48DE3592CF4198821CFF4
Authority key identifier: 5A:50:BE:2E:2A:7A:AD:7E:41:2D:6F:77:01:1C:41:A0:1A:4F:E0:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlC-Lip6rX5BLW93ARxBoBpP4D8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/e6f64a-b1c6-4b98-8b3f-92f1f9b54ed0/1/VRk5LJrw71KsGEGvvfEdmV_7ZRM.roa
Signing time: Mon 13 Jul 2026 18:27:59 +0000
ROA not before: Mon 13 Jul 2026 18:27:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 85.8.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/e6f64a-b1c6-4b98-8b3f-92f1f9b54ed0/1/WlC-Lip6rX5BLW93ARxBoBpP4D8.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/e6f64a-b1c6-4b98-8b3f-92f1f9b54ed0/1/WlC-Lip6rX5BLW93ARxBoBpP4D8.mft
rsync://rpki.ripe.net/repository/DEFAULT/WlC-Lip6rX5BLW93ARxBoBpP4D8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:bc:6a:f5:2d:b4:8d:e3:59:2c:f4:19:88:21:cf:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a50be2e2a7aad7e412d6f77011c41a01a4fe03f
Validity
Not Before: Jul 13 18:27:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5519392c9af0ef52ac1841afbdf11d995ffb6513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:ac:72:a1:1c:ad:9a:ca:a4:c5:1a:79:52:
01:bb:80:63:d8:57:1f:fc:03:76:83:8e:43:40:61:
0a:ae:f3:23:0d:07:ab:26:f9:73:a1:a1:70:db:e0:
b3:08:d3:6f:ca:bd:ed:fd:f2:51:11:41:e5:7a:18:
7d:be:1c:ef:e9:6c:18:14:d8:96:c9:27:5f:60:57:
12:5c:f8:9e:11:4b:07:0b:3f:53:d4:85:b7:d9:53:
31:1f:22:76:85:2f:a9:e0:43:ee:17:8f:6d:9c:ec:
ea:9f:49:3d:5b:c0:92:9f:49:16:97:ce:ae:b7:c3:
5e:f9:0c:71:5f:d0:71:bc:49:cb:ea:4e:54:80:04:
3b:0f:0f:d4:c5:d4:5b:89:91:da:18:15:c6:89:94:
8a:d0:02:28:c6:7e:5e:6d:01:0a:d2:3a:db:af:59:
df:c0:b8:3b:dd:f7:a9:af:35:0d:d0:18:b5:ab:46:
8f:34:91:3b:17:c4:99:a5:e4:ed:1e:0b:cc:cf:02:
dd:60:db:28:57:c6:67:97:69:05:5f:e8:8d:8d:ea:
ad:58:ba:f7:b0:4d:c2:8d:40:42:d5:71:f4:96:77:
d0:25:4c:8b:69:f3:8a:c3:a7:35:06:e0:15:4e:af:
b6:78:ce:6c:79:9d:e8:d6:b4:9b:05:92:e7:55:d9:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:19:39:2C:9A:F0:EF:52:AC:18:41:AF:BD:F1:1D:99:5F:FB:65:13
X509v3 Authority Key Identifier:
keyid:5A:50:BE:2E:2A:7A:AD:7E:41:2D:6F:77:01:1C:41:A0:1A:4F:E0:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlC-Lip6rX5BLW93ARxBoBpP4D8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/e6f64a-b1c6-4b98-8b3f-92f1f9b54ed0/1/VRk5LJrw71KsGEGvvfEdmV_7ZRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/e6f64a-b1c6-4b98-8b3f-92f1f9b54ed0/1/WlC-Lip6rX5BLW93ARxBoBpP4D8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.232.0/24
Signature Algorithm: sha256WithRSAEncryption
36:98:b3:21:49:33:67:58:e6:24:35:02:b6:32:30:7d:5c:7d:
b2:bb:ad:ae:b7:f8:23:1c:d3:6b:20:f4:32:52:8e:6a:02:ce:
5a:75:a6:00:67:3e:34:25:28:82:0f:ab:02:98:07:f2:0d:5d:
d5:67:f0:e2:5d:07:d5:bc:94:40:5e:06:75:c5:fe:ce:cc:1b:
82:49:92:74:bf:28:8c:a2:1f:d0:67:88:a9:b9:af:2a:d2:e5:
dd:f3:5f:a2:8d:c1:7f:f0:e0:96:88:bc:81:e6:43:02:d3:d1:
7b:55:e8:0f:c6:08:b0:b9:ec:84:28:9d:e0:c2:0f:88:8a:b3:
03:79:87:f5:36:42:5a:05:37:d0:a5:82:eb:e9:7d:20:52:99:
39:40:84:1f:c3:ce:39:e2:f9:b1:02:69:c4:5b:90:c2:2f:fa:
f1:e7:ad:8f:59:86:75:0d:fb:db:74:31:b4:f5:d0:1b:83:84:
77:db:ad:cc:ed:d7:91:fe:2a:59:7c:fa:06:20:04:b9:fa:1c:
b8:2b:cf:de:1f:b9:04:46:a7:e5:5b:d9:7f:7e:de:fd:78:8a:
e0:48:97:9e:4e:6d:75:ac:3f:41:50:47:8b:0a:ce:22:18:80:
97:ae:65:70:9b:43:f2:12:73:1b:de:a3:d7:7d:24:6d:c5:4f:
98:25:74:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:12 2026 by rpki-client