Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/vz24JIB0iwK_UVkxA_6qb3tRweE.roa
File: vz24JIB0iwK_UVkxA_6qb3tRweE.roa (raw, json)
Hash identifier: PeJH8Li2K6OgNXao1ry554nMTXg3ZealgUvmB39ZI2A=
Subject key identifier: BF:3D:B8:24:80:74:8B:02:BF:51:59:31:03:FE:AA:6F:7B:51:C1:E1
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E8D270CB2DACF385BE06BAA633EA28E81
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/vz24JIB0iwK_UVkxA_6qb3tRweE.roa
Signing time: Wed 03 Jun 2026 11:03:27 +0000
ROA not before: Wed 03 Jun 2026 11:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 189.13.252.0/24 maxlen: 24
189.13.253.0/24 maxlen: 24
189.13.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:27:0c:b2:da:cf:38:5b:e0:6b:aa:63:3e:a2:8e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jun 3 11:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf3db82480748b02bf51593103feaa6f7b51c1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:dc:48:f6:c8:98:ef:f9:1a:7c:07:93:9b:
c9:ad:31:b6:8f:f1:82:e2:8e:69:5d:4f:43:c0:75:
ca:85:8d:36:38:c0:7f:c3:6c:0f:d5:f5:b2:f8:e6:
00:93:b2:14:13:7c:3b:83:94:2c:12:65:da:e4:ab:
9c:c5:b0:fb:bb:df:b1:a5:25:94:c3:d5:d1:c1:f9:
a9:a9:f0:2b:c6:44:fb:68:56:ae:7e:ab:59:d8:6d:
69:df:90:b7:89:a3:4c:52:36:67:6b:af:a7:46:ca:
43:96:b1:81:c6:42:14:21:37:13:48:36:b5:a5:4f:
b9:be:74:3a:fc:5c:c7:23:0e:4f:ec:2f:32:93:9e:
4d:a6:e8:60:f1:d5:5a:9a:3d:38:b3:7a:23:02:c1:
2a:d1:db:2d:d4:90:05:42:7f:96:52:6b:e9:1c:35:
80:52:39:a8:a6:4b:06:2a:ab:b7:17:46:d3:99:0b:
ed:d0:b7:b2:7a:a4:80:17:ed:ef:31:af:76:f4:7d:
61:71:1b:db:02:13:09:0d:54:54:df:a6:38:af:00:
c9:f0:4c:2d:a6:a9:9b:d8:24:98:80:d2:07:5f:e7:
9a:b5:93:1d:aa:e8:2e:b6:d4:fc:89:2f:12:95:eb:
8e:1a:00:cb:0c:0c:80:d4:b4:07:03:ba:9a:06:3f:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:B8:24:80:74:8B:02:BF:51:59:31:03:FE:AA:6F:7B:51:C1:E1
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/vz24JIB0iwK_UVkxA_6qb3tRweE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.252.0-189.13.254.255
Signature Algorithm: sha256WithRSAEncryption
82:78:0b:89:55:e5:64:48:0c:74:0f:12:65:52:a5:37:da:11:
d1:ce:96:3c:a1:1c:ef:70:20:6b:df:2b:91:87:c6:25:1e:c2:
63:1a:a6:ad:1e:19:ec:2d:1b:18:b6:12:0c:0c:37:94:b9:0b:
aa:05:08:52:c0:e7:e2:5e:79:88:c8:10:d8:38:a8:df:0c:6d:
47:c6:c6:28:f0:5d:c7:f7:28:96:b0:df:b8:14:e7:b7:e2:48:
37:56:86:63:9a:18:66:a2:ab:03:fd:8a:3f:8a:74:82:e5:fc:
f3:6b:50:a8:95:5e:14:72:55:73:e3:97:89:3d:dc:8b:9c:7e:
b6:5a:79:56:ff:c6:61:1b:20:67:c4:9c:bc:d1:ae:a3:a8:77:
5e:67:dc:be:8b:1c:da:f8:76:19:e1:ed:68:ac:5d:5a:4a:26:
93:bb:01:5a:d3:a1:c4:0f:95:1d:fa:62:31:c1:22:1a:81:da:
11:d5:ce:0f:c5:67:4c:fb:c7:ce:4e:2e:3e:68:7a:8c:31:9e:
b5:0f:20:13:da:ad:30:d6:d3:30:58:17:4d:44:6f:f2:0a:a3:
50:db:ab:29:82:04:12:75:93:cf:53:68:03:04:ac:d4:5a:cc:
b1:91:d1:84:68:f4:5b:2a:df:3e:4a:63:8a:8b:ba:c6:e3:41:
c0:fa:dd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:16:55 2026 by rpki-client