Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Vsiuw1lC6iBTIhjWvlFrAwOG9rE.roa
File: Vsiuw1lC6iBTIhjWvlFrAwOG9rE.roa (raw, json)
Hash identifier: foxnoH13/NxdwwiRCPdlKe4n5xJnn9bH79zeWSCf2CI=
Subject key identifier: 56:C8:AE:C3:59:42:EA:20:53:22:18:D6:BE:51:6B:03:03:86:F6:B1
Certificate issuer: /CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Certificate serial: 01A0A444C696C7510D8FC66299DC08EE490A
Authority key identifier: 1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Vsiuw1lC6iBTIhjWvlFrAwOG9rE.roa
Signing time: Tue 15 Sep 2026 08:52:45 +0000
ROA not before: Tue 15 Sep 2026 08:52:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47224
IP address blocks: 91.221.32.0/24 maxlen: 24
91.221.33.0/24 maxlen: 24
171.25.191.0/24 maxlen: 24
185.10.34.0/23 maxlen: 23
193.169.242.0/23 maxlen: 23
194.152.48.0/24 maxlen: 24
194.152.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:44:c6:96:c7:51:0d:8f:c6:62:99:dc:08:ee:49:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dde756a9b6d14000c3e150d5b7d6095b7613fe4
Validity
Not Before: Sep 15 08:52:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c8aec35942ea20532218d6be516b030386f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:7e:f5:69:f2:63:b9:15:57:5c:f7:cc:94:
86:9b:ec:7c:fd:9a:bf:89:62:72:10:c7:99:2f:d5:
4b:3d:e6:78:d0:47:93:84:45:e1:45:68:37:ef:9d:
eb:41:07:14:ff:f4:dc:4c:af:56:36:14:40:19:c7:
cd:8e:27:8f:88:0b:2f:1d:5f:28:fe:56:05:7c:f1:
cb:16:c6:2a:84:65:cb:a5:aa:fb:19:a6:28:b2:3c:
9b:a2:c5:2d:15:19:3a:0e:35:28:1f:b0:8a:de:14:
34:f0:55:c7:85:48:28:0e:85:2d:4d:5e:88:be:0f:
9b:13:bc:dd:68:b9:f9:29:99:52:d6:46:3b:bf:17:
d7:1a:4b:77:ce:42:24:00:67:88:b6:51:63:f9:2f:
81:7f:1f:99:b8:fd:04:0b:c9:43:fc:eb:da:7e:55:
9f:14:48:5d:2c:fc:e4:0c:e8:43:77:a8:47:1c:6d:
e6:e8:84:71:aa:5f:1c:6c:6d:9d:c0:58:ca:6a:82:
f1:2f:64:75:0a:f8:ea:25:0f:d2:66:ac:05:2d:37:
dd:5b:46:6d:cf:7c:5a:51:e8:a1:a7:89:9e:f4:d4:
c3:cd:a7:49:a5:f1:eb:4e:15:4b:7c:0f:5e:db:f2:
2b:dd:90:42:31:d1:ce:b6:fc:79:76:37:57:ad:85:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C8:AE:C3:59:42:EA:20:53:22:18:D6:BE:51:6B:03:03:86:F6:B1
X509v3 Authority Key Identifier:
keyid:1D:DE:75:6A:9B:6D:14:00:0C:3E:15:0D:5B:7D:60:95:B7:61:3F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd51apttFAAMPhUNW31glbdhP-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Vsiuw1lC6iBTIhjWvlFrAwOG9rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/4a1ebd-d44e-4892-85b3-735a0cc1e789/1/Hd51apttFAAMPhUNW31glbdhP-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.32.0/23
171.25.191.0/24
185.10.34.0/23
193.169.242.0/23
194.152.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:37:49:d7:53:87:86:a3:41:73:b8:11:b5:4c:29:98:0f:56:
ea:50:ad:3e:0f:d8:e8:c3:be:dc:4b:19:15:55:0b:9e:41:f1:
6a:e1:8d:ff:4f:35:2f:11:4d:38:8a:12:84:46:b4:aa:5d:bf:
ff:39:18:c5:89:89:ca:68:18:3f:31:b4:c2:1e:2b:f0:7a:e0:
61:ac:1f:c2:60:ec:b2:14:30:96:8f:df:ff:dd:b5:f6:48:31:
a8:31:b2:be:ec:a9:0d:c2:0a:f0:db:4c:a9:c0:e8:ad:02:23:
c2:71:b6:17:4c:e5:64:34:cf:82:21:ee:bf:3a:10:06:7a:e2:
c3:c0:0f:01:2c:c9:5e:49:0b:4e:ac:bb:85:75:f7:3a:55:66:
8d:21:c9:1b:ee:fc:57:12:4e:34:49:ac:a3:56:47:35:1c:cb:
6a:75:00:74:62:30:8d:a1:8c:a5:85:96:20:11:3e:af:ae:3c:
84:0a:b4:fa:5e:b9:4e:fd:66:2b:62:3d:69:0f:13:8e:f7:c9:
78:74:ae:2c:c1:67:19:94:22:ce:33:0c:86:73:b1:bd:7c:ab:
81:3a:6d:26:e3:93:39:aa:81:05:68:ef:19:87:25:54:1a:59:
ad:c2:83:5c:5d:4b:b2:ec:97:e7:45:3b:bc:27:bf:7d:31:70:
ce:61:fd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:45 2026 by rpki-client