Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VmDRqmGQP9KderhEK1M43-7hqCA.roa
File: VmDRqmGQP9KderhEK1M43-7hqCA.roa (raw, json)
Hash identifier: KzhHZxRBaAJerk7W83pzOsRD97obKRBqK7NaGXEYsS0=
Subject key identifier: 56:60:D1:AA:61:90:3F:D2:9D:7A:B8:44:2B:53:38:DF:EE:E1:A8:20
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D8717584A09554EE14FE355219DD74862
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VmDRqmGQP9KderhEK1M43-7hqCA.roa
Signing time: Mon 13 Apr 2026 13:45:47 +0000
ROA not before: Mon 13 Apr 2026 13:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153671
IP address blocks: 81.168.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:87:17:58:4a:09:55:4e:e1:4f:e3:55:21:9d:d7:48:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 13 13:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5660d1aa61903fd29d7ab8442b5338dfeee1a820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ce:77:31:77:2d:0c:34:37:8a:9c:70:46:67:
67:cd:a1:6b:81:28:a4:44:f3:47:fd:ca:85:6b:f3:
3e:ea:0a:69:55:e2:3c:53:44:28:d8:33:a2:4c:02:
40:61:94:18:b5:79:d5:6d:4c:3c:3f:a0:b1:e2:48:
08:7b:03:25:2a:b0:ce:63:78:70:06:03:a1:96:65:
5b:0b:51:70:53:29:85:c1:20:43:53:8a:93:46:3f:
cc:59:57:90:6c:96:43:18:c0:38:fd:48:02:67:32:
34:2a:fe:f0:fc:00:fc:06:ad:d6:3d:72:ce:6e:c1:
40:e6:03:2d:c0:39:80:f3:9f:cb:79:2b:76:d7:7e:
2b:ac:83:9f:2d:3d:28:3f:76:c4:f2:dd:c4:f5:14:
21:dd:78:44:25:34:bb:81:b9:e2:0b:cb:83:8e:1d:
ab:93:ba:4f:ec:f4:92:c9:02:20:6c:da:df:a7:be:
05:54:56:5f:c4:c6:b4:af:5d:94:75:54:97:4c:82:
f6:01:24:da:e9:2a:00:2f:1c:bb:5a:12:82:3c:6c:
55:e4:ea:9e:4a:2f:9c:1a:61:d6:be:32:90:26:a2:
e8:c0:a9:e4:60:43:0e:d7:bd:01:24:34:18:3a:56:
9a:aa:f6:67:e2:10:a3:e5:92:e9:6d:a3:ba:8b:fd:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:60:D1:AA:61:90:3F:D2:9D:7A:B8:44:2B:53:38:DF:EE:E1:A8:20
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VmDRqmGQP9KderhEK1M43-7hqCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.62.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3f:76:ff:1e:a8:af:92:e9:b9:2f:1f:3a:f4:10:38:c4:e2:
2d:ee:be:30:42:28:8b:bc:40:47:4a:0e:b6:5f:35:ba:7f:29:
f1:9e:3f:7d:f4:5d:f1:ff:20:bb:51:fa:22:8f:b0:d7:bf:32:
8c:38:3d:20:ee:fe:b9:96:3d:86:fd:33:62:1a:f3:72:ea:46:
b5:44:56:fd:f1:db:09:c8:0e:16:68:b3:ff:f7:9f:3f:ff:8c:
80:e1:f7:02:13:27:1a:de:1d:be:1f:b5:ee:53:c8:1b:c2:e3:
71:a4:cd:66:98:ac:4b:ba:00:f3:69:b9:c3:5f:4c:6f:ae:e8:
02:ea:8e:10:f2:40:aa:c0:25:6a:d8:95:2e:e9:ae:54:2f:93:
09:a0:4e:7c:ab:1b:46:4c:b0:67:41:dd:25:85:00:b2:85:d1:
ae:cb:b3:fa:6d:60:41:0f:42:e3:ad:d9:b2:d5:4b:d0:77:d6:
4a:6d:e3:3d:4a:fc:d6:d7:93:4a:11:d1:b7:17:7c:2a:11:2c:
f8:3e:a1:15:83:c8:7d:bc:18:98:47:36:06:cd:50:40:56:4d:
c8:1d:ab:29:f1:f0:96:c2:7d:87:07:1e:cd:b4:af:6a:ec:42:
1d:fb:7c:89:ba:b0:f6:1b:ad:0f:b5:4c:2e:b8:4c:dc:db:93:
57:9d:a0:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2HF1hKCVVO4U/jVSGd10hiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjYwNDEzMTM0NTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjYwZDFhYTYxOTAzZmQyOWQ3YWI4NDQyYjUzMzhkZmVlZTFhODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp853MXctDDQ3ipxwRmdnzaFrgSik
RPNH/cqFa/M+6gppVeI8U0Qo2DOiTAJAYZQYtXnVbUw8P6Cx4kgIewMlKrDOY3hw
BgOhlmVbC1FwUymFwSBDU4qTRj/MWVeQbJZDGMA4/UgCZzI0Kv7w/AD8Bq3WPXLO
bsFA5gMtwDmA85/LeSt2134rrIOfLT0oP3bE8t3E9RQh3XhEJTS7gbniC8uDjh2r
k7pP7PSSyQIgbNrfp74FVFZfxMa0r12UdVSXTIL2ASTa6SoALxy7WhKCPGxV5Oqe
Si+cGmHWvjKQJqLowKnkYEMO170BJDQYOlaaqvZn4hCj5ZLpbaO6i/1BRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFZg0aphkD/SnXq4RCtTON/u4aggMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvVm1EUnFtR1FQOUtkZXJoRUsxTTQzLTdocUNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUag+MA0G
CSqGSIb3DQEBCwUAA4IBAQCiP3b/Hqivkum5Lx869BA4xOIt7r4wQiiLvEBHSg62
XzW6fynxnj999F3x/yC7Ufoij7DXvzKMOD0g7v65lj2G/TNiGvNy6ka1RFb98dsJ
yA4WaLP/958//4yA4fcCEyca3h2+H7XuU8gbwuNxpM1mmKxLugDzabnDX0xvrugC
6o4Q8kCqwCVq2JUu6a5UL5MJoE58qxtGTLBnQd0lhQCyhdGuy7P6bWBBD0Ljrdmy
1UvQd9ZKbeM9SvzW15NKEdG3F3wqESz4PqEVg8h9vBiYRzYGzVBAVk3IHasp8fCW
wn2HBx7NtK9q7EId+3yJurD2G60PtUwuuEzc25NXnaDV
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:41 2026 by rpki-client