Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vsFbiafTNqlN9eI0vVGQTuIt1-g.roa
File: vsFbiafTNqlN9eI0vVGQTuIt1-g.roa (raw, json)
Hash identifier: K2yJ/FuL7swYMPzV1euQf9hhv3CO5mRUqn+/EJ86BrY=
Subject key identifier: BE:C1:5B:89:A7:D3:36:A9:4D:F5:E2:34:BD:51:90:4E:E2:2D:D7:E8
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019EB6D71E1668486C7FA6A38D8DD1370574
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vsFbiafTNqlN9eI0vVGQTuIt1-g.roa
Signing time: Thu 11 Jun 2026 13:20:11 +0000
ROA not before: Thu 11 Jun 2026 13:20:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198138
IP address blocks: 91.210.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:d7:1e:16:68:48:6c:7f:a6:a3:8d:8d:d1:37:05:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 11 13:20:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bec15b89a7d336a94df5e234bd51904ee22dd7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4e:d9:54:01:8b:fe:d3:22:27:7d:33:32:95:
c0:a8:68:c8:8b:56:e9:48:83:1c:1f:81:fa:7a:44:
3a:60:d5:1d:bf:96:73:4f:62:30:5d:6b:49:dd:ec:
6e:14:0e:0f:6e:ca:e1:d4:8d:d9:2b:35:77:0b:09:
8a:74:be:0b:cd:e4:17:87:a5:83:22:d9:a9:b0:d5:
cf:2c:63:75:c9:d0:4f:8e:b6:1a:1f:d8:59:0e:7f:
64:97:8d:f3:02:1f:17:f0:99:b8:af:27:2e:74:33:
dd:83:8f:85:7b:79:34:52:1c:84:cb:87:08:ba:e8:
b1:93:a6:31:0c:09:79:02:26:9d:10:8c:9d:8c:52:
d7:57:48:48:40:cf:03:21:75:9a:f9:4c:c1:c2:c4:
9a:d0:c9:0e:9f:d4:2d:59:39:60:22:ac:dd:6d:47:
3c:16:32:3b:3d:e0:98:b5:45:94:2e:a9:1a:b4:26:
0d:5b:1c:46:fd:ce:47:34:4c:1c:c1:45:78:03:c2:
63:ed:30:33:ae:09:c3:6b:8b:50:bd:2b:40:3e:89:
ee:b4:d6:31:cc:39:a8:70:15:40:c5:37:fb:3b:82:
a8:47:ec:40:68:7a:f7:1e:06:a1:8d:09:7b:24:b2:
97:4b:95:05:8f:30:b8:cd:0e:2b:4e:06:40:57:99:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C1:5B:89:A7:D3:36:A9:4D:F5:E2:34:BD:51:90:4E:E2:2D:D7:E8
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/vsFbiafTNqlN9eI0vVGQTuIt1-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1a:e3:18:43:79:d8:96:e3:bb:c1:aa:11:3b:e8:f8:ee:2d:
db:f5:10:f4:11:c6:aa:87:de:80:38:38:88:42:3d:68:4d:a1:
eb:e1:e3:ec:1a:a8:dc:d5:08:fb:03:6d:4f:a8:10:ac:d2:6a:
09:40:90:6d:1f:40:1e:cc:09:cc:5a:c1:11:0e:63:21:ce:de:
fe:a3:b9:ad:f8:24:bc:90:0a:2d:ad:48:5a:fc:c3:39:9e:ef:
6f:05:ee:0c:4e:ec:05:b5:22:99:31:47:59:2b:90:5b:dc:a8:
6b:53:68:77:da:f1:6e:29:02:9a:5d:a6:f6:87:91:2a:0c:3d:
59:c9:74:37:86:43:06:e2:d1:00:aa:d2:d6:94:8c:d6:7f:03:
04:ef:72:19:1a:f1:c0:6d:c9:80:8c:f6:e7:ed:59:8f:96:69:
f0:18:b0:d0:5d:74:e1:d5:84:58:cd:78:38:20:f9:b7:1b:0d:
5a:87:f4:7f:60:40:79:1c:bf:c4:23:7b:90:27:5c:6e:13:ca:
1c:c9:dc:7e:4b:ff:e3:73:12:88:9f:8c:fe:87:0a:c2:16:cf:
8e:9e:3b:2c:c6:fa:9a:48:f3:34:bc:be:40:71:60:59:18:f6:
9b:d3:4a:93:c9:e3:17:3d:1c:0c:ec:d2:c1:b4:00:c6:a4:35:
e0:6e:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:54:08 2026 by rpki-client