Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/IWnIeaiesxLJUOrbvIs82ViVndc.roa
File: IWnIeaiesxLJUOrbvIs82ViVndc.roa (raw, json)
Hash identifier: fKg3HWPCoL1skKqebVG/YrN01QJ1CR0hNn4VrGiEosI=
Subject key identifier: 21:69:C8:79:A8:9E:B3:12:C9:50:EA:DB:BC:8B:3C:D9:58:95:9D:D7
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D76CBCA18CB602B8052E316C799E36EC6
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/IWnIeaiesxLJUOrbvIs82ViVndc.roa
Signing time: Fri 10 Apr 2026 09:49:20 +0000
ROA not before: Fri 10 Apr 2026 09:49:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 91.239.216.0/24 maxlen: 24
185.130.89.0/24 maxlen: 24
193.109.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:cb:ca:18:cb:60:2b:80:52:e3:16:c7:99:e3:6e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 10 09:49:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2169c879a89eb312c950eadbbc8b3cd958959dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b7:24:06:ca:00:e2:5a:a1:6f:83:37:90:35:
41:de:95:96:6e:a0:51:0c:53:56:85:7f:b8:52:ad:
a6:8f:d9:ce:bc:ff:f5:55:42:46:18:5b:cf:e1:c4:
45:80:16:3f:40:0c:81:f8:9d:6b:c4:54:09:c9:de:
37:7e:6f:89:a6:98:83:17:73:4a:cb:fc:47:24:65:
bf:86:74:29:98:51:05:b4:7e:9e:bd:69:bd:a4:5d:
99:be:1b:e2:e0:f2:f2:c4:a2:17:a1:77:5b:48:5a:
4d:c5:67:45:e6:60:e6:4d:03:8e:cd:ac:d1:df:64:
4d:6e:f5:4a:7d:06:49:23:0b:5c:95:7f:ab:8b:84:
3d:be:81:d3:58:32:3b:40:6c:7e:d8:ef:03:52:d8:
18:69:3c:13:5f:34:4a:bd:30:54:3c:ef:40:87:89:
64:00:0b:7c:bb:b8:81:7a:23:4b:2b:c1:23:32:c6:
95:f4:e8:1b:f3:79:2f:d3:ce:d1:2b:04:6d:a0:05:
1f:6f:92:6c:65:d0:fe:be:a0:83:b1:ba:1c:bf:0f:
2f:f3:cd:c5:50:9c:d0:ba:a3:a7:ae:fe:b4:fe:08:
06:ec:36:fd:1e:8f:27:bb:14:55:2a:33:2c:62:8c:
7b:ad:62:98:f4:99:14:9e:24:cd:d4:46:36:c2:44:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:C8:79:A8:9E:B3:12:C9:50:EA:DB:BC:8B:3C:D9:58:95:9D:D7
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/IWnIeaiesxLJUOrbvIs82ViVndc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.216.0/24
185.130.89.0/24
193.109.253.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ba:50:f4:f4:81:ec:ff:7b:67:43:09:34:16:e7:c0:e3:dd:
be:d5:6a:91:58:37:da:35:d6:69:7a:a9:4e:37:7c:dc:c4:a1:
04:ce:f5:de:d3:97:53:b5:d0:1b:ba:d6:0a:22:b9:ce:c9:78:
27:51:3f:af:15:4d:18:88:1c:d6:ff:80:68:05:e7:50:88:d0:
9e:9f:e7:5c:f5:c6:1a:4d:db:44:5b:e9:fa:2f:87:ba:63:17:
d9:ef:cf:66:82:77:b1:f3:b6:38:d1:d3:48:58:b3:5e:93:9e:
f2:8c:ed:ba:80:83:f0:57:e3:2b:81:2d:1f:84:08:91:46:57:
82:59:74:01:87:28:11:8f:23:09:c8:89:67:ea:0d:29:cf:e6:
71:5c:6b:df:dc:02:14:48:93:25:b9:72:30:b3:76:a2:da:03:
96:c9:cd:c2:dd:34:64:45:02:82:70:3e:db:b2:d1:7d:14:5b:
28:ca:92:82:6e:fc:a6:ad:c5:05:53:50:92:30:23:14:71:41:
63:05:67:ab:1a:6c:9b:47:2b:25:98:4c:e9:50:51:9f:6c:fc:
60:0a:a2:6f:ff:40:b8:8a:d8:1b:f4:31:bf:6b:4d:0c:9c:a8:
95:7f:c0:c2:62:1b:9b:b3:91:f8:6a:92:8b:fb:31:17:91:bc:
8d:58:12:b6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ12y8oYy2ArgFLjFseZ427GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy
NjhmNTQwHhcNMjYwNDEwMDk0OTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTY5Yzg3OWE4OWViMzEyYzk1MGVhZGJiYzhiM2NkOTU4OTU5ZGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7ckBsoA4lqhb4M3kDVB3pWWbqBR
DFNWhX+4Uq2mj9nOvP/1VUJGGFvP4cRFgBY/QAyB+J1rxFQJyd43fm+JppiDF3NK
y/xHJGW/hnQpmFEFtH6evWm9pF2Zvhvi4PLyxKIXoXdbSFpNxWdF5mDmTQOOzazR
32RNbvVKfQZJIwtclX+ri4Q9voHTWDI7QGx+2O8DUtgYaTwTXzRKvTBUPO9Ah4lk
AAt8u7iBeiNLK8EjMsaV9Ogb83kv087RKwRtoAUfb5JsZdD+vqCDsbocvw8v883F
UJzQuqOnrv60/ggG7Db9Ho8nuxRVKjMsYox7rWKY9JkUniTN1EY2wkQgRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCFpyHmonrMSyVDq27yLPNlYlZ3XMB8GA1UdIwQY
MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt
N2FhN2ZjMzU5NjU1LzEvSVduSWVhaWVzeExKVU9yYnZJczgyVmlWbmRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1
LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW+/YAwQA
uYJZAwQAwW39MA0GCSqGSIb3DQEBCwUAA4IBAQB+ulD09IHs/3tnQwk0FufA492+
1WqRWDfaNdZpeqlON3zcxKEEzvXe05dTtdAbutYKIrnOyXgnUT+vFU0YiBzW/4Bo
BedQiNCen+dc9cYaTdtEW+n6L4e6YxfZ789mgnex87Y40dNIWLNek57yjO26gIPw
V+MrgS0fhAiRRleCWXQBhygRjyMJyIln6g0pz+ZxXGvf3AIUSJMluXIws3ai2gOW
yc3C3TRkRQKCcD7bstF9FFsoypKCbvymrcUFU1CSMCMUcUFjBWerGmybRyslmEzp
UFGfbPxgCqJv/0C4itgb9DG/a00MnKiVf8DCYhubs5H4apKL+zEXkbyNWBK2
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:50:22 2026 by rpki-client