Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/vlgoPpdjqzPsej1q_cUrYrKNxps.roa
File: vlgoPpdjqzPsej1q_cUrYrKNxps.roa (raw, json)
Hash identifier: qCakI2gGntoClWe4ikMHsxVjZenQkCcmSU97XWi2kw8=
Subject key identifier: BE:58:28:3E:97:63:AB:33:EC:7A:3D:6A:FD:C5:2B:62:B2:8D:C6:9B
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019D919082C1E56B6D2E5F68CEE9AA4B9173
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/vlgoPpdjqzPsej1q_cUrYrKNxps.roa
Signing time: Wed 15 Apr 2026 14:34:20 +0000
ROA not before: Wed 15 Apr 2026 14:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 189.81.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:90:82:c1:e5:6b:6d:2e:5f:68:ce:e9:aa:4b:91:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Apr 15 14:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be58283e9763ab33ec7a3d6afdc52b62b28dc69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:7b:2f:41:28:c5:0d:d0:7b:28:da:6e:d8:
c7:27:3a:c5:6d:75:47:1f:89:7a:bf:27:1f:8d:d5:
4f:16:04:2f:0d:f1:d0:81:ad:3a:f4:a8:3f:a9:c3:
f1:de:2b:34:6b:8b:87:2a:74:c9:db:b3:48:9e:80:
38:05:86:83:fd:48:c8:21:48:fe:a3:67:55:f7:a9:
30:a8:41:c5:c5:e8:39:a0:38:2c:5f:63:67:b9:99:
57:3a:20:18:aa:58:ea:18:bc:10:9f:55:7a:34:87:
85:3d:6f:8f:65:a3:a2:b3:cb:71:c8:ef:57:54:40:
90:16:71:bc:c6:9c:f1:73:18:06:f5:42:ea:ae:56:
34:51:5b:10:9b:ed:28:30:9b:fa:63:69:37:d7:34:
e0:2d:2d:ba:78:81:30:f2:bf:c8:81:50:1b:31:3c:
eb:59:69:f4:86:42:61:2c:3d:ff:e2:94:b5:7c:e6:
c7:eb:a1:7f:a4:37:e0:55:b3:4f:f5:e9:dc:a3:01:
8d:60:25:ad:00:a1:f3:3d:40:8f:d5:ff:79:6a:39:
a9:56:de:45:44:d5:93:97:f1:f2:06:2a:56:ee:95:
f2:77:02:d1:e8:d0:c9:3f:79:ab:2d:40:74:84:6c:
d2:0c:80:cc:87:60:64:b5:ce:03:0b:a5:09:99:1f:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:58:28:3E:97:63:AB:33:EC:7A:3D:6A:FD:C5:2B:62:B2:8D:C6:9B
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/vlgoPpdjqzPsej1q_cUrYrKNxps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.81.82.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:e7:4f:d4:8f:c7:04:f5:ba:21:2d:3e:b0:d0:7e:80:d9:df:
56:71:0c:19:90:31:d1:0b:9e:6b:04:f7:ca:56:c8:78:0f:0e:
aa:08:d4:d1:71:ee:5a:14:92:5d:0a:3e:69:89:67:e9:b7:f5:
ff:b8:ac:29:7f:8e:d8:c8:e6:26:d8:62:2e:2b:01:bd:35:7d:
63:95:e4:81:00:85:42:95:2e:d6:34:1e:02:91:b0:eb:e0:61:
2e:bf:09:b5:d2:cc:bb:40:74:69:ad:51:7b:cc:82:19:66:e0:
97:8a:1a:e2:0e:5c:3d:b0:14:d6:47:d4:d5:3d:71:ee:53:c2:
ae:30:5b:da:8f:a8:06:09:e8:5f:04:d8:e1:76:d4:ff:7b:b4:
4f:33:ac:3e:1f:44:48:b1:bb:d3:34:27:f7:dd:7e:62:b7:05:
2d:2f:28:77:87:c3:04:0d:c0:72:d3:9a:8d:72:f9:9f:b7:c1:
ab:09:4e:e8:14:23:90:a1:a1:51:b2:4e:1e:78:6c:ea:d2:7c:
33:07:eb:46:55:97:75:d9:73:0c:41:1f:0e:2a:d9:16:bf:df:
eb:ed:01:76:7f:11:7a:44:5f:a3:ba:1f:17:ef:ed:60:b6:0a:
79:25:47:39:23:0a:5b:20:99:7c:6e:f9:fb:47:95:20:d0:4a:
02:f0:0c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:10:16 2026 by rpki-client