Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/VrZ9rG6buBYTfiaRnNlU6n31R3c.roa
File: VrZ9rG6buBYTfiaRnNlU6n31R3c.roa (raw, json)
Hash identifier: 7/go8CgCRjYxli0+HMN3QK5vnEPd4uxzc3aK0gMIrN8=
Subject key identifier: 56:B6:7D:AC:6E:9B:B8:16:13:7E:26:91:9C:D9:54:EA:7D:F5:47:77
Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial: 01A0AE427BA361B6B708A8D96BD2E70BB223
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/VrZ9rG6buBYTfiaRnNlU6n31R3c.roa
Signing time: Thu 17 Sep 2026 07:26:27 +0000
ROA not before: Thu 17 Sep 2026 07:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219128
IP address blocks: 46.49.187.0/24 maxlen: 24
95.177.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:42:7b:a3:61:b6:b7:08:a8:d9:6b:d2:e7:0b:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Validity
Not Before: Sep 17 07:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b67dac6e9bb816137e26919cd954ea7df54777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:36:62:15:5f:16:b8:e0:98:9c:7b:37:cb:32:
03:1c:5c:15:e3:69:cb:09:8f:03:5f:d3:4b:8b:3e:
08:4c:53:19:c9:1c:1d:17:8e:17:b3:ea:c4:31:e3:
bb:1f:84:72:d1:d8:8d:ef:af:fc:c5:6b:1c:5d:5f:
a7:a1:eb:72:fd:ca:fa:32:92:f8:d6:22:af:5e:02:
50:02:68:98:15:e8:bf:e4:88:7b:37:e6:e2:d5:76:
d2:cf:0e:03:fa:e0:58:59:e3:67:2b:54:b6:30:aa:
a7:ad:d1:c3:b1:e1:1a:e9:81:8e:1e:d4:00:e1:af:
33:ba:5c:47:7d:e5:b0:1b:33:13:d4:39:40:3a:d6:
5c:7e:4c:2a:bf:96:8b:d2:1a:f6:f9:1f:3d:1f:a2:
92:3d:8d:14:36:66:c0:1e:43:8e:6a:c0:0b:0b:df:
bf:0d:0a:67:3f:53:9a:0c:90:a2:c4:1d:21:a9:e4:
57:8b:15:9f:0c:81:6f:32:31:42:fa:d0:45:c6:36:
04:d2:94:e9:a2:c7:5f:78:85:0d:00:10:b9:ea:21:
fa:40:5b:c1:48:13:46:93:ea:65:47:48:2b:00:c2:
0b:7e:35:60:50:4a:55:cb:ba:59:da:c8:a4:39:32:
38:ae:c9:9e:d0:73:99:63:9e:3c:d7:1a:33:12:56:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B6:7D:AC:6E:9B:B8:16:13:7E:26:91:9C:D9:54:EA:7D:F5:47:77
X509v3 Authority Key Identifier:
keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/VrZ9rG6buBYTfiaRnNlU6n31R3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.49.187.0/24
95.177.155.0/24
Signature Algorithm: sha256WithRSAEncryption
45:77:c4:31:a6:bf:8c:12:e1:ef:b1:cd:24:e7:80:d6:8b:70:
d3:d2:81:2a:e4:40:75:5a:01:f5:43:22:f8:50:f7:ba:2a:b7:
fc:ff:34:17:bb:d3:06:31:e6:09:7d:7a:3b:24:1f:b3:d7:c5:
69:b7:8e:bd:ce:1f:36:87:78:5d:94:89:23:c3:89:a9:1c:ae:
40:94:54:a6:4b:69:d0:66:7f:47:7d:89:29:57:df:8c:cc:45:
e4:c3:0b:c1:57:4b:c2:86:b5:0d:a8:8a:24:7c:da:01:e4:f3:
4a:29:3b:19:e1:41:69:2b:40:e3:4b:06:04:91:3f:a5:78:17:
29:1c:60:20:4a:df:fe:37:18:6e:d9:f8:24:05:f2:56:80:cf:
c9:47:40:0d:78:d1:33:ca:05:a6:37:82:d9:14:68:93:fe:73:
ba:44:6c:9f:9d:df:64:d5:00:8f:c7:94:f4:82:77:9e:14:c9:
60:08:ac:60:71:f3:83:93:3b:e8:ab:5b:c8:8a:17:e6:90:7c:
2f:ba:a4:9e:dc:d1:70:e8:a7:e7:8f:45:07:76:38:c0:08:d8:
7b:a6:57:1a:8d:6f:d5:86:ec:30:e7:bd:16:31:54:71:58:54:
d6:1c:00:25:c8:73:8d:7f:f8:7d:7d:f9:f5:d5:eb:e3:f9:18:
ff:66:d4:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCuQnujYba3CKjZa9LnC7IjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3
YWJlZmIwHhcNMjYwOTE3MDcyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmI2N2RhYzZlOWJiODE2MTM3ZTI2OTE5Y2Q5NTRlYTdkZjU0Nzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TZiFV8WuOCYnHs3yzIDHFwV42nL
CY8DX9NLiz4ITFMZyRwdF44Xs+rEMeO7H4Ry0diN76/8xWscXV+noety/cr6MpL4
1iKvXgJQAmiYFei/5Ih7N+bi1XbSzw4D+uBYWeNnK1S2MKqnrdHDseEa6YGOHtQA
4a8zulxHfeWwGzMT1DlAOtZcfkwqv5aL0hr2+R89H6KSPY0UNmbAHkOOasALC9+/
DQpnP1OaDJCixB0hqeRXixWfDIFvMjFC+tBFxjYE0pTposdfeIUNABC56iH6QFvB
SBNGk+plR0grAMILfjVgUEpVy7pZ2sikOTI4rsme0HOZY5481xozElaMCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFa2faxum7gWE34mkZzZVOp99Ud3MB8GA1UdIwQY
MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt
NzljODk4N2E4YjFjLzEvVnJaOXJHNmJ1QllUZmlhUm5ObFU2bjMxUjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj
LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALjG7AwQA
X7GbMA0GCSqGSIb3DQEBCwUAA4IBAQBFd8Qxpr+MEuHvsc0k54DWi3DT0oEq5EB1
WgH1QyL4UPe6Krf8/zQXu9MGMeYJfXo7JB+z18Vpt469zh82h3hdlIkjw4mpHK5A
lFSmS2nQZn9HfYkpV9+MzEXkwwvBV0vChrUNqIokfNoB5PNKKTsZ4UFpK0DjSwYE
kT+leBcpHGAgSt/+Nxhu2fgkBfJWgM/JR0ANeNEzygWmN4LZFGiT/nO6RGyfnd9k
1QCPx5T0gneeFMlgCKxgcfODkzvoq1vIihfmkHwvuqSe3NFw6Kfnj0UHdjjACNh7
plcajW/Vhuww570WMVRxWFTWHAAlyHONf/h9ffn11evj+Rj/ZtTl
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:53:30 2026 by rpki-client