Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VzoDpJnnHW0-ar5Aq5RuM2IC0aM.roa
File: VzoDpJnnHW0-ar5Aq5RuM2IC0aM.roa (raw, json)
Hash identifier: T5RKBPys4DAlFwNaZsp7xHVnmOcuurAOMrMrl21O6R8=
Subject key identifier: 57:3A:03:A4:99:E7:1D:6D:3E:6A:BE:40:AB:94:6E:33:62:02:D1:A3
Certificate issuer: /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial: 01A1CB178BB6820A01EF84BB6BFE110A13DC
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VzoDpJnnHW0-ar5Aq5RuM2IC0aM.roa
Signing time: Wed 11 Nov 2026 14:51:20 +0000
ROA not before: Wed 11 Nov 2026 14:51:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 89.106.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:17:8b:b6:82:0a:01:ef:84:bb:6b:fe:11:0a:13:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
Validity
Not Before: Nov 11 14:51:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=573a03a499e71d6d3e6abe40ab946e336202d1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:11:b5:f6:94:0f:90:80:78:70:f5:2f:89:
39:a8:c7:15:46:3c:a9:5c:ff:b0:51:6a:7c:4e:b5:
91:1d:d1:88:0c:c9:d5:b2:a7:22:60:73:a1:87:2b:
d1:72:6a:13:4f:0a:57:c5:89:66:d9:be:02:32:10:
f4:7b:be:ba:3d:a6:03:77:cc:60:e3:35:eb:6f:b4:
40:e6:45:ce:b9:a7:66:eb:c6:30:3d:a4:c3:0c:41:
50:d0:8e:63:0b:59:f6:13:7c:7d:6b:85:c0:2f:a2:
31:46:a0:ec:db:9a:37:57:92:70:a2:2f:8e:6e:f8:
b3:f6:4e:49:f6:ae:73:28:77:47:e9:53:a0:78:c0:
23:6b:71:3a:c0:22:0f:ea:29:13:c3:08:89:3c:4b:
78:1d:40:1e:d9:0c:87:bf:19:18:72:a7:d6:74:95:
cb:cd:6e:04:29:e6:6e:1f:8f:46:6f:4a:3a:d3:7a:
78:9a:87:5d:f8:14:2a:68:a2:44:e6:41:60:9a:82:
0d:ef:fd:d3:19:74:e1:29:28:90:ab:73:c7:77:3c:
37:1a:e4:a0:35:43:30:de:ee:6b:58:4d:a3:73:82:
1c:26:14:7d:39:fe:84:b9:f6:c3:bc:d2:84:d6:44:
04:8b:7e:3a:a6:96:58:92:d6:de:8f:41:17:cf:ed:
a0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3A:03:A4:99:E7:1D:6D:3E:6A:BE:40:AB:94:6E:33:62:02:D1:A3
X509v3 Authority Key Identifier:
keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/VzoDpJnnHW0-ar5Aq5RuM2IC0aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.138.0/24
Signature Algorithm: sha256WithRSAEncryption
10:59:44:a9:44:7a:8d:0e:b1:38:17:02:78:31:e6:9e:49:f8:
50:70:ab:2a:96:9e:c5:27:31:a5:c9:4b:56:e2:ae:a9:5b:38:
b7:48:f6:7f:dd:3d:eb:b0:bb:d8:74:af:36:87:60:af:80:ee:
6c:a5:4f:a2:61:59:70:cc:e5:65:85:32:0d:5b:44:06:11:38:
ae:15:50:1b:fe:d2:15:ca:dc:0f:86:68:94:97:54:d0:04:55:
30:20:9d:51:fc:41:9f:c3:02:5d:58:25:6d:f7:ec:de:78:5f:
18:d6:40:85:bd:64:41:62:a1:10:8b:1e:0c:d5:d3:54:96:05:
05:ac:a6:7d:05:42:05:8b:0b:ed:40:d8:bb:e3:98:41:59:62:
1a:1d:5d:e4:06:51:7b:8c:d8:d9:79:2e:55:f7:8b:60:46:e4:
f4:9a:a6:e5:6b:97:ce:59:cd:30:73:52:d7:f0:fb:0d:da:b8:
27:e4:fe:5a:70:26:be:6b:06:99:f9:b9:06:8a:6e:6d:4b:de:
41:25:20:d9:40:ca:20:e9:f0:9d:de:28:18:bc:c6:ef:52:ea:
6e:ba:a0:78:a9:f9:db:c5:9b:0f:c8:49:3b:b0:03:32:21:e7:
c3:50:21:1b:2a:27:4a:68:28:94:58:d0:74:90:f2:c5:d7:12:
d4:2c:05:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:21:15 2026 by rpki-client