Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/VqiDZV_rHFVcbMmKOoCpA2jtkVs.roa
File: VqiDZV_rHFVcbMmKOoCpA2jtkVs.roa (raw, json)
Hash identifier: GtHE8NibUJ2QUjlhfIjaNPYfQOq0BFml/klruUaQuQk=
Subject key identifier: 56:A8:83:65:5F:EB:1C:55:5C:6C:C9:8A:3A:80:A9:03:68:ED:91:5B
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0996D88EA62FECC3E1E3C26A2DCAA8255
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/VqiDZV_rHFVcbMmKOoCpA2jtkVs.roa
Signing time: Sun 13 Sep 2026 06:21:27 +0000
ROA not before: Sun 13 Sep 2026 06:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216169
IP address blocks: 185.26.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:6d:88:ea:62:fe:cc:3e:1e:3c:26:a2:dc:aa:82:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 13 06:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56a883655feb1c555c6cc98a3a80a90368ed915b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:f7:7e:c7:42:a1:cf:ee:51:15:cd:42:45:
10:9a:68:c1:bf:c6:62:24:cd:3e:61:de:14:f1:7d:
f0:f3:ed:60:36:a6:1c:ea:31:62:69:ef:05:9d:c9:
ab:a4:0e:e4:ef:a8:ae:91:86:38:25:6f:0d:64:b7:
6e:e0:28:ad:8d:a0:4a:a7:69:aa:62:52:89:cc:21:
22:79:71:1b:b9:ca:db:fe:63:82:f6:e1:ce:14:85:
3d:f2:5f:28:14:1e:fc:45:96:77:5b:b5:3a:d7:1a:
ff:7d:4e:f6:30:30:c8:82:5f:9a:69:b9:2f:12:15:
c0:2b:d0:4b:98:6b:72:b4:6e:95:00:55:01:c0:78:
c9:16:94:f5:39:47:24:53:ec:aa:da:17:0d:67:36:
2e:47:91:66:f7:5c:a6:72:02:f2:fd:9a:ac:d0:ec:
5c:d5:e6:f9:75:94:c9:7e:76:d4:c5:5a:42:7a:60:
23:88:4c:71:9a:f3:dd:5b:83:e0:79:11:43:e4:d9:
9e:a8:9d:fa:12:d8:60:5b:84:d2:7a:69:0d:a6:85:
19:03:82:42:5d:29:97:96:c9:a7:e4:5d:d1:5a:13:
d8:b6:b0:11:49:1e:f7:25:01:6f:5c:cb:55:56:d7:
00:3f:eb:8c:08:6c:3a:29:55:01:75:98:e7:10:96:
79:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:83:65:5F:EB:1C:55:5C:6C:C9:8A:3A:80:A9:03:68:ED:91:5B
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/VqiDZV_rHFVcbMmKOoCpA2jtkVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.32.0/24
Signature Algorithm: sha256WithRSAEncryption
28:bb:da:c2:30:ab:6e:40:21:19:4c:5d:25:11:63:27:9b:16:
bc:69:5d:e2:18:9b:e3:5c:c7:99:6f:89:3c:af:d5:a3:8d:e4:
2d:0b:3a:d0:77:3f:c4:e7:e4:b2:c4:70:a4:27:fb:38:38:0a:
9a:62:7d:4d:62:7c:62:0f:43:3c:93:0c:3c:30:c7:07:13:e9:
a2:a8:d6:93:1d:d7:49:ee:0f:b8:60:a9:49:69:04:bf:d8:1f:
58:c7:98:0e:47:4e:09:f4:6c:42:95:09:e0:0c:2f:8e:96:3f:
53:43:be:cd:0f:6d:07:05:f3:17:a2:63:14:f5:e8:43:7d:a0:
ef:46:8a:24:f4:cf:b3:d8:75:39:69:03:39:a4:18:ae:a9:65:
f0:04:11:a0:8f:d4:10:72:99:4d:db:69:b5:ec:08:51:24:87:
f6:69:43:ee:35:d3:70:5a:e3:2e:08:c2:84:c5:a5:53:15:b7:
0e:af:31:c7:52:62:e2:95:99:43:c5:6a:a8:d4:9c:1e:82:ac:
e9:f2:16:a2:f6:b6:b6:59:5f:e4:d2:fa:6b:ca:77:bc:95:74:
53:19:c9:48:fe:e4:06:75:90:3a:c4:5c:98:de:8c:30:19:c6:
d1:a3:65:02:55:06:08:a9:e5:c6:a3:44:e8:ef:c8:12:da:1b:
c2:c0:69:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:25:21 2026 by rpki-client