Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/VIRIBaeDi9FKsAL_fCNMmt1vRzA.roa
File: VIRIBaeDi9FKsAL_fCNMmt1vRzA.roa (raw, json)
Hash identifier: mQNuFv6DL/tK4Jv3VTTp7dDCH9ph+EVHTIMDEF2GhrU=
Subject key identifier: 54:84:48:05:A7:83:8B:D1:4A:B0:02:FF:7C:23:4C:9A:DD:6F:47:30
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019D2FAD931A09A18029232E3C230BB1F47E
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/VIRIBaeDi9FKsAL_fCNMmt1vRzA.roa
Signing time: Fri 27 Mar 2026 14:23:17 +0000
ROA not before: Fri 27 Mar 2026 14:23:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 87.232.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:ad:93:1a:09:a1:80:29:23:2e:3c:23:0b:b1:f4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Mar 27 14:23:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54844805a7838bd14ab002ff7c234c9add6f4730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:9f:a0:91:96:95:cb:17:bd:a0:3d:78:d0:
18:83:97:24:ad:02:9a:19:9d:e7:19:1a:52:de:0d:
18:02:fd:79:4b:e4:18:b8:64:26:1e:3c:51:a2:56:
6e:93:ab:a7:0e:c3:9c:68:3e:00:28:37:c8:36:4b:
86:90:ef:57:7b:1a:91:f0:b2:c3:31:d5:b1:5b:1e:
30:be:9f:02:5a:47:4f:e1:e7:0d:da:10:50:28:8d:
d8:e5:36:1b:40:8c:1e:fa:08:5a:96:ba:3d:04:38:
23:6c:50:7d:b5:42:07:07:19:f4:d6:4a:5c:b2:bc:
28:f6:3c:d3:46:9f:1a:f2:a1:04:d8:78:52:95:3b:
12:05:40:0e:50:2f:84:cc:95:4a:7b:03:e0:9f:c6:
28:24:07:08:5f:13:a8:2b:ac:f2:5b:9f:b5:be:a2:
6c:80:a8:0a:4d:40:59:ea:46:7d:78:6e:81:0f:30:
82:69:88:8c:25:0a:93:c3:34:56:16:b2:44:b9:57:
d3:43:7e:8d:49:eb:eb:b8:02:f7:16:da:2f:77:36:
16:d9:4c:09:e1:4d:ae:cd:82:ca:c2:78:66:7f:60:
58:a5:9a:a2:f9:2c:58:da:41:6f:ac:85:d7:cc:21:
a9:1c:9e:82:a9:36:3c:f0:52:7c:b7:01:b0:ac:6e:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:84:48:05:A7:83:8B:D1:4A:B0:02:FF:7C:23:4C:9A:DD:6F:47:30
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/VIRIBaeDi9FKsAL_fCNMmt1vRzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.81.0/24
Signature Algorithm: sha256WithRSAEncryption
61:62:06:fb:c6:06:20:a1:6c:1a:1f:8b:b1:b1:01:4b:7d:47:
ce:e6:1b:5b:67:11:0d:2a:24:55:2b:c8:b7:bf:78:5d:42:49:
69:e8:c7:d5:00:be:86:02:3f:08:3c:88:2b:a5:81:b5:9e:4b:
e6:b6:a5:ad:fe:36:7c:d9:29:c5:89:52:ea:e3:48:1d:f4:f7:
a3:c4:58:d4:33:4e:13:6a:2f:14:28:f6:cb:e7:e1:88:14:34:
54:26:ab:14:9d:09:2e:22:40:de:3e:34:f3:44:d5:e6:8c:6a:
99:f9:a5:36:10:5b:fa:73:11:2c:b6:a3:57:4c:b3:ce:07:63:
c1:d5:c7:36:e8:85:ec:8e:c8:cf:52:c7:fe:3d:d0:08:e4:e4:
69:0d:4e:32:25:a4:16:90:36:58:78:81:f7:19:f1:82:34:03:
e1:fa:12:48:15:8a:b9:d2:9a:37:df:b4:d6:7b:bc:ee:9a:29:
98:1c:b8:51:82:2f:7d:14:3f:03:72:f2:d3:03:7b:e3:c2:b8:
5c:ac:c2:3f:f4:4d:41:64:f7:b5:c0:a5:7f:da:1c:0c:41:4a:
34:35:22:bc:42:83:71:32:32:6e:3a:0a:f7:20:4c:81:96:55:
cb:fe:4f:0b:b1:c5:77:be:da:a0:bf:c2:da:c7:f5:e2:52:7a:
b0:96:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:25 2026 by rpki-client