Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/IV6hEGtvewaScYeQgJmPo7xDBDs.roa
File: IV6hEGtvewaScYeQgJmPo7xDBDs.roa (raw, json)
Hash identifier: vdNOmWH0gy9lyzxoYUgEi1DbM3SHpf9kARH3ZrhyUYM=
Subject key identifier: 21:5E:A1:10:6B:6F:7B:06:92:71:87:90:80:99:8F:A3:BC:43:04:3B
Certificate issuer: /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial: 01A17EB61953FC6E9BA116528C315749FBD9
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/IV6hEGtvewaScYeQgJmPo7xDBDs.roa
Signing time: Tue 27 Oct 2026 18:53:45 +0000
ROA not before: Tue 27 Oct 2026 18:53:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206392
IP address blocks: 91.243.79.0/24 maxlen: 24
2a14:eb81::/43 maxlen: 43
2a14:eb81::/44 maxlen: 44
2a14:eb82::/43 maxlen: 43
2a14:eb82::/44 maxlen: 44
2a14:eb87:20::/48 maxlen: 48
2a14:eb87:60::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:b6:19:53:fc:6e:9b:a1:16:52:8c:31:57:49:fb:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
Validity
Not Before: Oct 27 18:53:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=215ea1106b6f7b069271879080998fa3bc43043b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:c0:b7:cd:ae:71:8a:7a:88:fb:a4:6b:2b:
80:ed:46:fb:88:e5:80:6e:a4:fc:f0:ea:48:4c:4d:
c8:b0:53:a3:8b:97:7f:c2:1f:29:b4:a5:70:fb:bd:
24:d4:35:a8:d4:3f:c5:da:5b:98:6e:21:c6:23:c5:
ff:fe:c1:01:1c:1e:b6:9d:17:c2:b5:1a:ce:94:4c:
ce:aa:04:e8:15:cb:50:75:a2:a9:ad:9c:5c:ef:43:
66:ae:1c:87:a5:24:2a:6a:d8:88:c1:ab:3e:33:7c:
ac:58:fb:63:0a:81:33:99:24:51:87:0d:e9:99:e1:
05:23:f7:1d:46:a1:62:65:87:a1:f5:65:bb:c2:62:
43:fd:a8:d0:00:09:09:2d:f0:ae:4c:fd:a5:1b:f0:
03:bb:6b:70:3e:68:58:de:62:ef:70:91:7b:36:a5:
d7:d9:d8:a0:7b:ed:80:20:68:40:81:fa:1d:de:e9:
89:0c:19:4f:26:e0:86:4b:23:60:ea:f7:6e:ea:f9:
db:0f:8d:c9:42:60:80:ef:1a:6a:e1:5b:6e:a1:92:
e0:cf:65:3c:7b:30:b5:a6:ab:4a:10:74:23:8d:5e:
32:35:c9:88:5c:5a:a3:0d:ea:36:5f:b2:7a:e8:ce:
0a:8b:6a:b7:e9:66:82:1a:4f:f8:eb:41:09:6d:eb:
f4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:5E:A1:10:6B:6F:7B:06:92:71:87:90:80:99:8F:A3:BC:43:04:3B
X509v3 Authority Key Identifier:
keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/IV6hEGtvewaScYeQgJmPo7xDBDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.79.0/24
IPv6:
2a14:eb81::/43
2a14:eb82::/43
2a14:eb87:20::/48
2a14:eb87:60::/48
Signature Algorithm: sha256WithRSAEncryption
70:20:b7:b7:a8:d5:fb:a2:fe:e2:0c:26:31:ec:9d:82:f1:cf:
d9:f6:bf:06:49:ad:35:72:8a:94:e2:f4:e4:7a:eb:57:04:3e:
84:53:e4:a1:8a:25:d9:9d:f7:9e:24:99:aa:c3:4b:38:52:b2:
dd:34:f6:11:3c:a9:64:a7:d6:2a:a9:97:a7:80:e8:d8:49:4e:
ef:d7:a8:57:64:f9:42:15:c5:97:01:57:c5:92:70:ff:6e:2a:
da:b5:62:d5:ee:94:1b:4a:4b:4b:d2:42:31:2c:ba:06:ae:ee:
3f:29:14:87:d7:09:b1:80:eb:c7:98:55:ae:d6:e8:4e:d9:26:
11:c8:e6:28:c2:16:7c:c9:88:6a:a1:65:fd:b3:77:2d:34:c9:
fa:d4:da:a1:5d:48:cf:ea:0b:2d:9c:8a:3c:21:3f:68:2d:57:
15:95:e7:3e:f6:71:84:ba:2c:17:dc:70:cf:1b:54:aa:b2:c1:
11:78:02:63:94:82:49:b3:0f:c4:41:e8:6b:37:b3:db:02:af:
4d:10:10:fb:27:6e:a7:a4:f4:2e:68:03:71:76:0c:c2:6b:03:
19:09:41:67:1f:79:2a:1b:19:0f:45:4e:ed:be:27:09:d2:59:
8a:27:3b:e5:61:f7:a7:e4:1d:13:e1:41:c9:0c:b6:ed:a3:56:
d3:23:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:21:00 2026 by rpki-client