Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vQ3HTuSWH8aiJg-DFIIixz_cZuY.roa
File: vQ3HTuSWH8aiJg-DFIIixz_cZuY.roa (raw, json)
Hash identifier: pIJljrOrPyRjQFXbbk+qGFCGCOp5UHq6dKLfwbg8KYU=
Subject key identifier: BD:0D:C7:4E:E4:96:1F:C6:A2:26:0F:83:14:82:22:C7:3F:DC:66:E6
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019C46B59B50EFF5E5748E093E4F85218C7F
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vQ3HTuSWH8aiJg-DFIIixz_cZuY.roa
Signing time: Tue 10 Feb 2026 08:40:32 +0000
ROA not before: Tue 10 Feb 2026 08:40:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 89.21.86.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:46:b5:9b:50:ef:f5:e5:74:8e:09:3e:4f:85:21:8c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Feb 10 08:40:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0dc74ee4961fc6a2260f83148222c73fdc66e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:48:5f:53:c7:49:79:cd:18:bc:a8:ed:a1:be:
33:35:0f:87:12:82:d2:f3:cb:af:78:ef:ac:30:68:
91:16:57:37:db:fa:d7:fb:36:a0:b1:e9:df:19:ee:
96:81:74:e0:74:39:33:45:b3:16:90:65:29:a5:3f:
2f:5d:85:32:e9:79:fd:00:03:75:e5:1a:b3:a2:da:
b1:34:ab:c5:71:7b:82:a1:a6:ff:35:86:36:2c:e8:
1a:95:46:e0:14:1e:3e:a9:51:d9:f4:07:5a:f1:67:
d8:86:03:b4:dd:ca:44:36:bf:86:91:27:84:d9:00:
08:0f:6d:53:2c:f0:88:2c:59:b6:50:db:ac:ec:87:
d4:00:e4:29:a0:36:12:4a:d3:ab:4f:0b:e2:a1:6d:
48:7b:81:aa:2f:6e:de:e2:19:79:67:0b:a4:17:80:
39:2c:08:f0:20:75:ad:a1:92:b7:e6:a1:ae:ed:8d:
c4:93:6c:7d:be:1e:e2:d3:ce:4d:bf:51:9b:95:59:
fc:6d:af:30:86:f6:56:93:ab:8c:66:b8:7f:06:6b:
c6:be:d1:6e:2f:fd:6e:ec:c5:4d:4a:84:66:59:02:
c9:cb:08:98:b3:21:8d:66:d4:4a:0b:de:6e:15:7b:
80:00:a2:b3:1d:7e:2f:b5:70:e5:7a:eb:5e:39:98:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0D:C7:4E:E4:96:1F:C6:A2:26:0F:83:14:82:22:C7:3F:DC:66:E6
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vQ3HTuSWH8aiJg-DFIIixz_cZuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.86.0/24
89.251.31.0/24
109.122.43.0/24
109.122.45.0/24
Signature Algorithm: sha256WithRSAEncryption
60:07:d2:5d:dc:c6:6a:36:c6:a6:06:28:e4:97:14:00:63:bd:
87:f4:3c:60:8e:fc:33:87:9e:b9:55:83:07:ce:c9:ac:81:62:
c1:10:11:66:d4:35:20:af:d4:a8:c5:f3:6a:8c:3b:9d:6c:29:
5b:bd:fb:eb:2d:75:f5:39:de:c1:68:9f:e1:90:84:33:34:5e:
ee:50:4c:63:81:fa:5c:08:a0:d8:10:b2:08:d9:58:8c:3f:7b:
2a:09:48:bf:9a:84:37:ce:46:75:d2:c2:08:b7:6b:00:b5:1c:
0b:69:35:57:27:c1:49:17:67:25:7b:57:f0:ba:11:c6:37:81:
93:7b:2f:54:31:b4:f7:0b:b3:bb:90:d5:5a:ca:cc:58:13:12:
ec:a5:b4:31:47:2f:19:14:0d:c2:6f:38:17:23:99:55:e1:5c:
54:22:e5:f0:1f:53:b5:91:70:9a:b7:2c:65:93:16:2c:f6:eb:
b9:c4:92:cf:dc:4c:49:a7:75:44:89:b2:01:b6:3d:82:2a:39:
04:09:e8:f2:fa:10:6b:22:89:84:39:bb:d6:39:68:43:a4:fb:
70:93:be:70:fe:94:3b:3e:ca:98:a1:0c:38:27:25:2f:08:74:
21:91:79:53:f3:e9:0f:23:33:64:6c:1e:8d:ae:c7:a0:6b:42:
ec:38:63:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:21 2026 by rpki-client