Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/VXrtRXpP_4eXJr4Xp2Hk4yODsmE.roa
File: VXrtRXpP_4eXJr4Xp2Hk4yODsmE.roa (raw, json)
Hash identifier: Y5PXspAOGi3UFF9egzn/vBr4dTEC3LiGFvR+95t0wIk=
Subject key identifier: 55:7A:ED:45:7A:4F:FF:87:97:26:BE:17:A7:61:E4:E3:23:83:B2:61
Certificate issuer: /CN=923a2b3dd7667275f09886df7da079f755ceed59
Certificate serial: 01A1A5B533EFDAF14E8EF0B5498A288DCB10
Authority key identifier: 92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/VXrtRXpP_4eXJr4Xp2Hk4yODsmE.roa
Signing time: Wed 04 Nov 2026 08:37:58 +0000
ROA not before: Wed 04 Nov 2026 08:37:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207143
IP address blocks: 95.36.100.0/22 maxlen: 24
95.36.100.0/23 maxlen: 23
95.36.102.0/23 maxlen: 23
185.77.0.0/24 maxlen: 24
185.101.156.0/22 maxlen: 22
185.101.156.0/24 maxlen: 24
185.101.157.0/24 maxlen: 24
185.101.158.0/24 maxlen: 24
185.101.159.0/24 maxlen: 24
185.229.88.0/24 maxlen: 24
185.229.89.0/24 maxlen: 24
185.229.90.0/24 maxlen: 24
185.229.91.0/24 maxlen: 24
193.203.253.0/24 maxlen: 24
204.174.100.0/24 maxlen: 24
213.254.165.0/24 maxlen: 24
2a11:8b81::/32 maxlen: 32
2a11:8b82::/32 maxlen: 32
2a11:8b83:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:b5:33:ef:da:f1:4e:8e:f0:b5:49:8a:28:8d:cb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=923a2b3dd7667275f09886df7da079f755ceed59
Validity
Not Before: Nov 4 08:37:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=557aed457a4fff879726be17a761e4e32383b261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:c6:fb:20:50:ca:b9:82:5b:af:b8:c9:db:
ca:ce:b2:e5:0d:70:ef:53:bb:dc:93:04:48:9d:09:
e4:b7:a1:64:91:88:8d:5a:59:37:4d:cd:9e:a9:38:
db:40:ad:5a:1b:f4:c7:c6:36:5e:8e:67:78:62:9b:
5a:52:38:bf:84:32:1e:7f:97:49:0d:2e:99:29:d1:
35:1d:a8:30:87:38:83:e5:0b:1d:35:6b:ee:b0:a3:
85:95:25:67:ea:16:31:1d:1a:27:e3:2b:ec:55:33:
1a:cf:6b:34:07:ef:9b:4c:a7:3b:01:53:78:22:a6:
68:2c:5a:24:18:3b:56:b3:14:72:3c:5a:a3:78:02:
26:af:eb:86:ec:7e:cc:fe:f9:5c:06:b6:05:d2:39:
93:4d:f4:2e:b1:e1:16:0b:0d:58:d7:30:18:77:7e:
ad:3b:97:5d:04:6e:03:a3:4a:d7:37:fb:f8:c7:63:
85:09:ff:a8:c6:ee:ad:8e:33:35:19:a8:5e:27:64:
0c:ca:7d:13:f1:91:c5:3e:19:3f:c9:4b:04:07:a1:
7b:60:b0:8d:66:ba:e1:7b:94:5f:e7:9d:51:76:7c:
31:6e:28:45:4b:5c:db:1c:83:5e:e8:e5:92:50:c1:
63:d8:ed:5f:96:44:7a:ed:3e:52:ea:90:5b:ae:7b:
3b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7A:ED:45:7A:4F:FF:87:97:26:BE:17:A7:61:E4:E3:23:83:B2:61
X509v3 Authority Key Identifier:
keyid:92:3A:2B:3D:D7:66:72:75:F0:98:86:DF:7D:A0:79:F7:55:CE:ED:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjorPddmcnXwmIbffaB591XO7Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/VXrtRXpP_4eXJr4Xp2Hk4yODsmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b796f4-2e88-4eaa-a269-2738bcb43d6d/1/kjorPddmcnXwmIbffaB591XO7Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.36.100.0/22
185.77.0.0/24
185.101.156.0/22
185.229.88.0/22
193.203.253.0/24
204.174.100.0/24
213.254.165.0/24
IPv6:
2a11:8b81::-2a11:8b82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8b83:1::/48
Signature Algorithm: sha256WithRSAEncryption
6e:5c:f2:83:b9:2f:c8:04:c7:92:f7:4a:d8:79:52:80:78:ea:
f1:7d:ea:72:c6:d8:cd:a0:85:33:4c:e8:7b:59:3a:11:50:bf:
33:47:e3:06:1e:ad:cc:84:61:ef:fa:d6:91:4f:61:11:98:e0:
9b:b3:40:59:62:5a:90:e2:32:44:c5:f0:4c:aa:14:1e:02:6d:
80:f1:8b:1c:da:c4:57:32:2b:82:70:f9:40:ad:6c:c9:3c:1c:
e7:31:26:18:03:3b:31:ad:40:d1:59:86:4d:01:30:d1:df:1c:
8f:b5:0f:dc:8b:e0:33:01:1b:8d:92:aa:16:1e:94:a2:d9:37:
09:3c:20:5a:3a:13:83:1d:6a:80:fa:c7:b4:bf:b8:98:7d:b6:
5b:7c:04:d4:1b:83:56:53:83:82:66:8a:5e:a2:6a:1c:25:c2:
e0:77:49:55:ed:b3:2b:51:29:f3:20:21:44:90:09:f8:aa:58:
ba:39:09:44:fa:7c:c5:5a:27:6a:64:3f:1d:0a:26:87:ce:9b:
39:72:bc:4a:d4:63:98:b3:0e:26:a7:a5:ef:82:44:9e:0e:5c:
4d:ee:0b:dd:b5:00:8b:c4:c9:1d:d0:41:5d:1f:4c:49:23:91:
7b:cb:95:0b:e1:a9:93:f2:65:e5:54:a2:90:25:65:de:d2:cc:
dc:b6:0b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 12:05:52 2026 by rpki-client