Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VgkktZcitREF9RLWZI18a_7ROdU.roa
File: VgkktZcitREF9RLWZI18a_7ROdU.roa (raw, json)
Hash identifier: dDDvAqlOtWBkm3bLnlX+3TyHIy0rGHkis7SCVlYr524=
Subject key identifier: 56:09:24:B5:97:22:B5:11:05:F5:12:D6:64:8D:7C:6B:FE:D1:39:D5
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019EB00276AA92D12768C04F9C972FF34512
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VgkktZcitREF9RLWZI18a_7ROdU.roa
Signing time: Wed 10 Jun 2026 05:30:11 +0000
ROA not before: Wed 10 Jun 2026 05:30:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7488
IP address blocks: 89.40.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:02:76:aa:92:d1:27:68:c0:4f:9c:97:2f:f3:45:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 10 05:30:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=560924b59722b51105f512d6648d7c6bfed139d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:6a:d2:e7:83:45:7c:2c:c1:90:3c:31:ee:
57:87:a9:e4:5a:4f:38:8f:42:28:4f:f5:c5:16:f7:
c8:45:ae:e4:e0:d9:89:9a:1e:60:6e:d3:b9:af:b4:
ef:1d:74:49:89:19:f6:6e:93:80:7d:76:95:9f:36:
6c:90:41:91:93:b7:f3:26:95:8b:dc:56:82:9d:fe:
60:cb:8e:f0:1a:b4:2b:0d:d0:65:a6:83:45:4b:96:
93:2e:7f:d2:e2:b1:b5:6e:ac:49:aa:2d:f7:ce:fa:
1c:9f:b2:68:ec:41:b2:3e:6e:a5:6e:df:65:e8:bd:
05:99:9c:71:32:d2:f3:2c:87:6e:84:50:4d:2f:8b:
ca:ae:53:8c:a9:17:61:c3:c1:4b:42:33:8a:34:a1:
f1:82:5b:f1:ad:dd:9b:b9:d8:19:85:a4:16:5e:44:
70:71:46:09:b2:67:08:20:a9:61:62:59:e3:a0:e0:
30:72:c6:2c:01:28:e0:87:a7:05:47:fb:e1:33:46:
51:57:1d:0c:8d:ab:eb:37:15:17:fe:c3:2b:a6:d7:
cc:33:48:62:9e:dc:76:fe:80:ca:cc:03:8d:10:7d:
c3:06:6b:f9:fb:b4:d5:4a:14:4d:97:f0:20:c1:97:
97:a1:3a:e6:3a:1e:2c:43:83:cd:a5:a2:fd:e5:8c:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:09:24:B5:97:22:B5:11:05:F5:12:D6:64:8D:7C:6B:FE:D1:39:D5
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/VgkktZcitREF9RLWZI18a_7ROdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.83.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:de:de:2d:7d:0c:94:40:c2:92:81:3c:1b:ce:9a:83:11:63:
2e:b7:e9:dc:08:d7:e2:99:93:22:3a:16:70:25:e8:5a:e9:24:
fe:67:76:7c:b0:fb:00:dc:95:04:6c:5a:20:eb:37:80:6e:d5:
10:c6:be:55:07:80:7e:41:ff:16:1e:5c:f6:e0:c9:15:4e:e4:
c6:28:d3:e0:a1:ab:e8:3a:fc:09:50:a9:b2:56:14:2e:21:f4:
33:51:81:c5:14:fb:40:6f:a4:16:db:48:09:ae:66:22:2e:d7:
25:77:3a:9c:87:ac:38:57:09:95:2f:00:97:78:6e:bd:4d:e6:
b8:da:b2:9d:93:a0:24:a5:bb:93:d6:65:10:49:9e:50:0c:98:
dc:14:c9:0a:6e:4d:85:75:d9:d0:f0:69:58:e2:5b:33:04:59:
99:e5:14:f5:5d:8b:a6:32:57:0a:41:64:c8:99:b1:04:ac:5d:
8e:a9:52:5f:71:31:eb:08:bd:98:f8:41:6c:f8:0b:b7:b5:2e:
22:f6:0b:b8:06:c4:c5:26:fa:a6:d8:29:bf:f8:c3:13:38:9a:
ff:b5:4a:cd:36:75:cf:34:fc:1d:1b:b0:77:93:76:a1:31:87:
88:d0:7f:da:5d:2e:e3:fa:63:81:1e:94:35:62:04:9a:4b:d3:
b0:86:71:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:16:58 2026 by rpki-client