Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VK4nOfqgpmXOVhn34C5sbxe-Wj8.roa
File: VK4nOfqgpmXOVhn34C5sbxe-Wj8.roa (raw, json)
Hash identifier: gIkDa5LqgOok0v/RH+gp9FiPITDslBneM2wjtpnpxmc=
Subject key identifier: 54:AE:27:39:FA:A0:A6:65:CE:56:19:F7:E0:2E:6C:6F:17:BE:5A:3F
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 019D8D9672286EFCE03F50FA77A17C7E7DB6
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VK4nOfqgpmXOVhn34C5sbxe-Wj8.roa
Signing time: Tue 14 Apr 2026 20:02:20 +0000
ROA not before: Tue 14 Apr 2026 20:02:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 185.115.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8d:96:72:28:6e:fc:e0:3f:50:fa:77:a1:7c:7e:7d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Apr 14 20:02:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54ae2739faa0a665ce5619f7e02e6c6f17be5a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:76:cd:8a:44:ec:be:15:b6:82:bf:fa:28:78:
97:e8:18:57:d5:47:f3:5e:ca:54:ab:67:fa:25:ef:
4f:be:13:b9:3e:37:81:cb:06:73:a8:3c:ef:20:ed:
0d:4c:8d:c3:c8:46:d2:43:a1:22:16:81:df:41:90:
b9:44:cc:7a:d3:98:50:6f:09:45:0b:f6:e3:ef:ab:
75:2b:0e:66:9e:c1:b6:29:e2:e3:3e:1c:0e:c5:2d:
2a:5c:2e:5a:e3:6b:8d:9d:45:ef:f6:f8:bb:00:6f:
f9:bd:19:1a:73:5f:e6:7c:09:ce:1b:16:96:55:4a:
03:85:5e:78:d4:1c:df:70:52:e7:a8:b9:d4:33:f8:
44:ae:53:04:fc:0b:33:db:18:2d:0c:32:dc:a3:12:
09:8f:73:46:47:af:a9:f0:e3:af:91:cf:64:c0:b6:
c6:04:89:69:cd:53:e0:b0:fd:4f:cc:57:53:16:67:
f5:f9:5b:7f:dd:cf:85:a0:70:5a:c1:23:5b:db:fb:
1f:b4:85:ee:7f:a8:ad:0b:b7:70:07:20:a9:ad:dd:
61:66:6b:0d:4c:06:e5:df:dd:90:52:04:43:f8:e2:
9a:80:c6:a7:0d:29:67:ac:8e:9c:7b:ae:e3:fd:b6:
7d:92:48:cd:a4:d9:ec:1d:e3:14:37:db:0e:d7:6a:
29:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AE:27:39:FA:A0:A6:65:CE:56:19:F7:E0:2E:6C:6F:17:BE:5A:3F
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VK4nOfqgpmXOVhn34C5sbxe-Wj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.162.0/24
Signature Algorithm: sha256WithRSAEncryption
51:51:25:ee:03:0a:f9:db:82:cc:d5:49:58:c3:c1:55:46:15:
62:2b:47:d2:9b:f2:73:48:43:10:c3:05:07:71:82:dd:32:c1:
1f:a8:f4:38:b9:f9:a5:17:44:2d:67:25:c4:9f:ed:bd:5e:85:
99:c5:d0:dc:8a:4a:c8:e2:e6:b7:b3:7a:c7:64:97:86:e6:01:
91:c9:0a:e0:23:ac:4f:c8:d0:57:22:a1:d0:24:cb:7c:a7:fd:
f3:9b:de:ab:9c:f9:0f:76:32:4a:61:7d:70:bd:a3:f3:28:2e:
c6:b3:78:07:15:d8:66:8b:76:9b:28:63:5b:1f:77:67:25:7d:
1b:b5:9f:d1:e0:15:25:79:a9:13:50:26:ed:d0:97:e7:14:ae:
f1:be:20:e4:76:0d:11:fa:83:cf:e3:6a:65:3b:d2:14:27:90:
08:0a:34:0d:73:31:dc:48:b9:8b:c1:75:29:f3:84:79:f3:b0:
d0:1f:08:7f:27:32:c3:f6:b8:a5:71:8d:a0:d4:7f:52:89:6f:
02:f1:1e:9f:8a:49:c6:ab:d6:8b:e5:b5:91:9e:f0:81:e8:08:
a1:ce:c4:48:af:16:d5:af:d7:79:2f:29:31:6a:ab:5a:36:6e:
f5:2b:bd:af:60:a1:45:4b:56:a3:d7:ee:26:c3:2a:7f:3e:dd:
cc:9e:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:16 2026 by rpki-client