Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Vgo94DNF99q_6FSg3QwN1QGway4.roa
File: Vgo94DNF99q_6FSg3QwN1QGway4.roa (raw, json)
Hash identifier: W+wNh2xiYPQMN4lREl9oLjo7dTYP+sezx74DP0rrKJI=
Subject key identifier: 56:0A:3D:E0:33:45:F7:DA:BF:E8:54:A0:DD:0C:0D:D5:01:B0:6B:2E
Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09
Certificate serial: 019FA7E981CCE2D707881219F3C134B9D031
Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Vgo94DNF99q_6FSg3QwN1QGway4.roa
Signing time: Tue 28 Jul 2026 08:48:45 +0000
ROA not before: Tue 28 Jul 2026 08:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 87.76.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:e9:81:cc:e2:d7:07:88:12:19:f3:c1:34:b9:d0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09
Validity
Not Before: Jul 28 08:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=560a3de03345f7dabfe854a0dd0c0dd501b06b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:0d:89:ad:45:b3:1f:7a:47:51:bd:c2:9d:
d6:3c:d2:67:c5:8c:af:82:50:7e:54:15:d8:ed:41:
92:22:a5:8a:91:38:f4:c6:a7:ca:63:3f:9a:e4:3c:
14:ab:1a:3d:ef:aa:21:17:98:c6:3d:08:eb:b4:3b:
3e:3f:dc:8e:7d:a0:97:a5:92:7e:e6:af:30:5d:1f:
9f:5e:e5:6c:b6:c2:43:b8:97:44:b7:ba:59:9a:a5:
e7:d8:6d:39:79:f4:65:c5:9b:6e:11:66:76:bf:5a:
0e:77:45:0d:29:9d:2b:6c:e7:8f:21:ba:db:44:0c:
c0:c4:36:ea:3e:56:52:ea:18:ed:43:03:cc:21:1f:
ed:0d:77:0c:cb:da:6c:fd:ff:0b:b4:57:f9:d3:3e:
5f:d9:af:7e:72:25:8c:27:88:90:a3:fa:91:fe:17:
b6:1a:0f:f1:fe:62:9b:ab:e1:29:79:5d:a1:b0:65:
1d:d4:73:34:0e:99:0b:4f:86:2c:78:23:1f:06:c2:
21:48:43:23:18:6b:63:78:74:69:2c:c3:39:0d:07:
be:25:32:e9:0c:e2:c0:0b:67:2f:7b:e5:d2:98:ec:
1d:d7:d9:f4:9e:60:f9:be:43:7d:85:c0:57:72:9d:
30:d4:0e:20:5d:38:1b:a3:3f:49:fb:89:dc:df:38:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:3D:E0:33:45:F7:DA:BF:E8:54:A0:DD:0C:0D:D5:01:B0:6B:2E
X509v3 Authority Key Identifier:
keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Vgo94DNF99q_6FSg3QwN1QGway4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.76.149.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e5:f6:a9:e9:2c:e6:97:27:36:c7:c5:e8:b6:b1:20:f3:5f:
ce:4b:81:fe:57:9f:ed:c1:73:72:0c:31:d7:43:ff:d7:f6:a4:
8b:75:04:4d:d6:bf:ab:fe:79:58:0b:bd:6f:b9:dc:9f:16:3a:
79:8a:f6:a4:1b:87:64:d0:83:d7:e9:29:f9:b8:75:d6:e1:b4:
a6:aa:80:47:e3:d2:a6:ea:f2:e5:4d:7b:30:c1:b6:f2:1a:2d:
b8:ee:42:2e:78:eb:43:84:66:d7:95:09:e6:ec:ec:ad:a2:a3:
2b:fb:40:1d:e2:00:32:ed:ea:fe:b6:15:06:6f:63:ac:4c:28:
32:dd:eb:68:e6:7d:53:08:53:07:e0:41:7a:61:5a:ae:45:45:
ae:92:cd:50:f6:a4:55:c4:5e:90:bf:0c:b1:55:50:aa:d4:9a:
49:98:47:05:71:53:57:ec:a4:f6:dc:88:d2:58:e5:dc:da:db:
62:f0:3d:f4:ad:81:d9:5d:e9:9b:b2:c2:aa:22:46:d5:08:0b:
9e:a0:a7:4d:aa:f5:8d:22:2d:db:ef:29:de:2a:ee:98:3a:c8:
fa:f6:36:96:5c:4e:a0:f5:f5:27:16:55:e9:e4:ac:87:b6:8b:
44:98:c6:00:21:8d:04:00:22:04:ed:c4:e8:c7:33:87:b7:11:
83:a1:60:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:18 2026 by rpki-client