Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/Vq6guSZiHd2_t65zdN62Jv9BTnQ.roa
File: Vq6guSZiHd2_t65zdN62Jv9BTnQ.roa (raw, json)
Hash identifier: AKFZbhDXoNeVRKob/sEuCdxQYeY1tKB1pRJCD6Qy3Uc=
Subject key identifier: 56:AE:A0:B9:26:62:1D:DD:BF:B7:AE:73:74:DE:B6:26:FF:41:4E:74
Certificate issuer: /CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Certificate serial: 019B76EB66E652CAD08FB89291BFDFFD94F2
Authority key identifier: 09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/Vq6guSZiHd2_t65zdN62Jv9BTnQ.roa
Signing time: Thu 01 Jan 2026 00:18:17 +0000
ROA not before: Thu 01 Jan 2026 00:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208777
IP address blocks: 45.84.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:66:e6:52:ca:d0:8f:b8:92:91:bf:df:fd:94:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099d3946413dd11161b46c7df6ad362a9938d5d4
Validity
Not Before: Jan 1 00:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56aea0b926621dddbfb7ae7374deb626ff414e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:ce:47:5c:02:53:75:06:e3:fe:e6:c4:93:
80:bf:dc:79:6e:a1:86:93:ed:b7:6e:d4:64:79:b7:
cb:52:b8:bf:f8:c1:c1:eb:71:ed:c0:de:d8:05:c0:
eb:99:11:74:96:71:17:72:42:a0:18:18:12:ed:0d:
05:64:2b:da:c0:30:53:8b:c1:f3:71:ee:86:91:e9:
b5:7b:d7:78:66:cd:89:6b:7c:4c:b5:fe:ca:ab:04:
27:a5:be:47:b9:4d:17:f0:4c:d6:07:f6:a6:44:c6:
be:c8:19:d9:8a:56:09:24:04:26:96:23:e6:8e:93:
6c:fc:db:b1:04:2e:13:98:ed:fd:e1:0e:64:5d:04:
da:69:96:31:1d:37:90:f7:f3:e1:86:d6:9e:29:e4:
f6:77:59:11:e6:8c:a4:04:a7:75:27:f1:19:a3:9d:
76:6d:ff:8c:b4:a3:3d:25:4d:d5:ea:d2:a4:2e:a9:
30:0a:68:20:b0:ca:40:36:37:1d:37:dc:34:20:c3:
a4:84:61:bb:35:5d:4c:c9:88:64:0c:8e:d2:d6:58:
4a:f5:0e:93:03:9c:81:33:2b:90:01:cf:e8:09:cc:
e0:fe:74:1b:75:5b:be:f8:7a:e2:f5:68:aa:18:04:
11:f6:5d:fa:ab:da:dc:be:58:cd:dc:44:84:08:25:
af:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AE:A0:B9:26:62:1D:DD:BF:B7:AE:73:74:DE:B6:26:FF:41:4E:74
X509v3 Authority Key Identifier:
keyid:09:9D:39:46:41:3D:D1:11:61:B4:6C:7D:F6:AD:36:2A:99:38:D5:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ05RkE90RFhtGx99q02Kpk41dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/Vq6guSZiHd2_t65zdN62Jv9BTnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/856443-b8fb-478e-87c9-cf52aa9d6ccc/1/CZ05RkE90RFhtGx99q02Kpk41dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.84.0/22
Signature Algorithm: sha256WithRSAEncryption
62:5f:87:1e:2a:9f:d8:e7:d3:6e:0b:20:41:ac:4f:02:83:02:
ca:de:1b:21:68:ad:82:d0:3b:de:78:0a:47:07:68:06:6e:d6:
24:e0:7e:36:59:50:c9:93:42:d1:ba:2d:fb:66:c0:74:e4:a2:
e0:c7:98:76:16:b1:6d:8e:48:7a:51:d5:e3:22:5e:20:19:7a:
a0:5e:86:00:cc:00:2a:50:92:51:aa:b0:54:98:cf:95:e6:d8:
87:d1:74:e7:35:f1:0d:84:2a:f9:c3:93:7e:27:07:7b:80:f6:
e0:d6:11:e8:42:b8:33:d7:01:3e:0a:33:bf:f4:2e:a0:57:00:
0e:7c:19:f0:e5:9f:fd:fa:0c:c1:d5:d0:37:82:f9:d8:32:01:
35:01:f2:50:df:f9:56:96:de:22:24:30:32:58:75:7a:30:51:
86:f7:30:a7:2b:8e:76:ee:73:d0:88:82:0b:dc:c8:a7:73:cc:
6c:ae:46:36:ec:1f:bd:a0:d6:f6:6a:6f:3d:9d:46:20:44:12:
09:1b:b7:6a:9d:6c:cc:34:d5:82:0f:6f:c2:0c:18:89:fd:8a:
02:3e:96:d7:48:82:a8:21:22:e0:db:6a:a4:0e:3c:2a:e2:f9:
c0:3c:ca:b6:9a:76:60:7a:6b:19:24:e9:fb:a9:75:df:b7:4b:
47:88:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:24:02 2026 by rpki-client