Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VW0t5F-8zRK5l_XA3jDr5-WnNPw.roa
File: VW0t5F-8zRK5l_XA3jDr5-WnNPw.roa (raw, json)
Hash identifier: yE5mmiAdcTS8m/Acmcnm555/bQPS/tWoYrygI0/qzeY=
Subject key identifier: 55:6D:2D:E4:5F:BC:CD:12:B9:97:F5:C0:DE:30:EB:E7:E5:A7:34:FC
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 019CAD749E4634578971FA0A8A464B708873
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VW0t5F-8zRK5l_XA3jDr5-WnNPw.roa
Signing time: Mon 02 Mar 2026 07:30:26 +0000
ROA not before: Mon 02 Mar 2026 07:30:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44600
IP address blocks: 95.111.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:74:9e:46:34:57:89:71:fa:0a:8a:46:4b:70:88:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Mar 2 07:30:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=556d2de45fbccd12b997f5c0de30ebe7e5a734fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:77:79:de:c4:d7:19:dc:8e:b2:79:46:91:
d0:ae:50:49:83:74:d7:67:41:14:7c:32:55:d5:d5:
b2:43:cc:58:be:58:8c:2f:bc:d7:e5:0d:8a:4c:76:
40:86:79:32:f3:d0:3e:df:b4:fe:21:03:fa:fd:47:
10:95:90:e2:79:b2:54:af:ad:b2:e8:48:44:95:15:
53:49:81:34:03:f9:e4:4f:6e:fb:ff:0a:49:a8:bd:
37:ec:34:3e:29:2f:e8:7e:99:21:be:34:43:83:2b:
d5:32:aa:dd:6e:65:fa:6a:7a:aa:b2:18:23:9e:b9:
8c:34:0c:e3:ea:80:ca:e6:62:7b:1e:5a:32:34:85:
2b:8d:bc:d7:6c:8e:aa:ef:3d:0d:8e:4a:47:5a:bb:
75:09:f9:4e:01:df:a4:42:6f:33:d8:eb:58:9c:da:
bf:48:8c:45:c4:2a:2f:2a:0a:f3:40:1f:0e:a2:ba:
74:71:dc:40:bc:d5:dc:c4:96:19:34:19:c1:7d:a7:
4f:65:1c:bd:77:b4:90:02:47:05:b6:02:82:45:1e:
a7:fe:b1:2c:2f:ff:8d:c4:d0:5f:83:da:35:3c:e0:
c3:21:06:39:05:0d:e6:3f:2b:fe:a4:f2:a9:c4:a6:
ff:7d:a4:29:1c:49:50:d9:fa:d7:5d:43:2d:1b:97:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:2D:E4:5F:BC:CD:12:B9:97:F5:C0:DE:30:EB:E7:E5:A7:34:FC
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VW0t5F-8zRK5l_XA3jDr5-WnNPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.155.0/24
Signature Algorithm: sha256WithRSAEncryption
89:60:b2:c9:0d:b5:d5:99:f4:0b:cb:84:05:63:1c:1f:73:44:
88:93:65:38:53:dc:65:74:26:fe:39:fd:fb:c1:2d:82:65:9f:
4d:21:e1:b3:12:93:32:1f:70:f0:2c:b9:12:b6:24:7f:45:b0:
43:52:9d:b8:99:ee:ff:57:43:73:87:fc:0a:8b:6f:21:06:c8:
72:aa:fb:66:b9:03:1b:95:ad:4b:5d:65:85:9a:49:83:be:59:
72:ca:6d:d8:86:7f:1f:fc:54:d6:b3:f6:95:96:06:af:b9:43:
50:30:2e:0d:3d:f7:c0:a0:59:6a:43:96:00:fd:ed:21:e7:eb:
d2:d2:a2:c3:3f:2b:63:94:56:87:ca:3c:d1:87:f9:b8:9d:cb:
8c:66:c3:47:b9:ee:b6:10:e5:89:a2:e6:c5:ae:39:fc:bd:84:
cc:82:6c:58:92:bb:c6:1c:ae:2d:bc:1c:12:2b:1d:c9:5d:e4:
c0:d7:dd:c1:55:13:0a:18:58:dc:30:e4:65:92:d2:7d:32:3f:
7e:f1:6c:d7:98:3e:6d:66:30:dc:9f:d7:68:c7:c4:ea:31:81:
09:9b:eb:9b:8e:73:7c:41:29:ad:72:6d:b2:5c:55:72:7f:f7:
a9:fc:71:c0:61:29:2e:e5:3f:c8:1d:98:b6:f3:1d:67:a4:84:
b8:27:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:23 2026 by rpki-client