Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VoH_-KYpxqicvvDbM8kcMP3s4nc.roa
File: VoH_-KYpxqicvvDbM8kcMP3s4nc.roa (raw, json)
Hash identifier: ene9LiZcEFsyC/28X+COquJLhbMIQfYEQy+JFJe/Fzo=
Subject key identifier: 56:81:FF:F8:A6:29:C6:A8:9C:BE:F0:DB:33:C9:1C:30:FD:EC:E2:77
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019E92411FA5A9FDE541BB33DB360A3E150B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VoH_-KYpxqicvvDbM8kcMP3s4nc.roa
Signing time: Thu 04 Jun 2026 10:50:01 +0000
ROA not before: Thu 04 Jun 2026 10:50:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13194
IP address blocks: 80.81.61.0/24 maxlen: 24
85.254.69.0/24 maxlen: 24
85.254.71.0/24 maxlen: 24
85.254.73.0/24 maxlen: 24
85.254.74.0/23 maxlen: 23
85.254.74.0/24 maxlen: 24
85.254.75.0/24 maxlen: 24
85.254.76.0/22 maxlen: 22
85.254.76.0/24 maxlen: 24
85.254.80.0/22 maxlen: 22
85.254.84.0/23 maxlen: 23
85.254.92.0/22 maxlen: 22
85.254.92.0/23 maxlen: 23
85.254.92.0/24 maxlen: 24
85.254.93.0/24 maxlen: 24
85.254.94.0/24 maxlen: 24
85.254.95.0/24 maxlen: 24
85.254.96.0/22 maxlen: 22
85.254.96.0/23 maxlen: 23
85.254.98.0/23 maxlen: 23
85.254.100.0/24 maxlen: 24
85.254.101.0/24 maxlen: 24
85.254.102.0/24 maxlen: 24
85.254.124.0/23 maxlen: 23
85.254.141.0/24 maxlen: 24
85.254.149.0/24 maxlen: 24
85.254.151.0/24 maxlen: 24
85.254.152.0/22 maxlen: 22
85.254.159.0/24 maxlen: 24
85.254.161.0/24 maxlen: 24
85.254.168.0/24 maxlen: 24
85.254.169.0/24 maxlen: 24
85.254.170.0/24 maxlen: 24
85.254.176.0/23 maxlen: 23
91.190.45.0/24 maxlen: 24
91.190.48.0/24 maxlen: 24
91.190.49.0/24 maxlen: 24
159.148.73.0/24 maxlen: 24
159.148.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:41:1f:a5:a9:fd:e5:41:bb:33:db:36:0a:3e:15:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jun 4 10:50:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5681fff8a629c6a89cbef0db33c91c30fdece277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:5e:b8:c1:31:30:47:f7:6d:01:de:1b:60:87:
25:c3:50:69:c5:36:ef:80:b5:24:47:bf:06:96:4d:
92:c1:39:86:ed:46:06:75:53:5f:d7:0d:df:0e:ba:
13:5b:0e:0f:15:fd:a4:60:d6:9f:ab:64:0f:13:53:
39:84:96:9d:6b:b9:70:4a:13:26:e1:21:7c:c8:68:
3b:42:c2:b3:5f:2c:84:b5:ea:a9:b1:e4:5b:1b:5a:
20:72:45:00:39:e0:f0:ef:e5:af:43:83:48:a0:98:
ad:fe:0c:ba:db:b3:63:de:26:92:0f:b8:c7:c6:fb:
10:a7:ee:c4:a1:46:14:64:09:56:3d:b6:6d:10:65:
40:1f:dd:68:48:60:82:16:3f:51:b8:1b:d9:53:fc:
97:8a:25:0f:8e:81:42:cc:0b:81:8b:b6:33:0a:fa:
07:24:a7:c8:24:5b:57:11:80:c9:83:ef:a2:a3:bb:
b4:3c:92:af:99:52:87:2e:6b:09:fe:6f:01:d6:2b:
64:0e:54:7e:b9:dd:48:da:91:5f:f9:57:1e:d0:ce:
4c:a8:63:13:12:96:66:9d:cd:f8:2e:b3:11:cd:5e:
a3:b3:0b:89:a5:b4:b4:40:84:5d:67:8c:03:69:d6:
cc:d7:3f:06:a9:2f:c7:98:59:12:68:6f:a1:5b:74:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:81:FF:F8:A6:29:C6:A8:9C:BE:F0:DB:33:C9:1C:30:FD:EC:E2:77
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/VoH_-KYpxqicvvDbM8kcMP3s4nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.61.0/24
85.254.69.0/24
85.254.71.0/24
85.254.73.0-85.254.85.255
85.254.92.0-85.254.102.255
85.254.124.0/23
85.254.141.0/24
85.254.149.0/24
85.254.151.0-85.254.155.255
85.254.159.0/24
85.254.161.0/24
85.254.168.0-85.254.170.255
85.254.176.0/23
91.190.45.0/24
91.190.48.0/23
159.148.73.0/24
159.148.249.0/24
Signature Algorithm: sha256WithRSAEncryption
81:7b:87:9a:b4:61:1c:0b:c5:af:93:6d:5a:bd:d0:3c:d3:b9:
69:25:2d:1d:75:d2:b6:88:38:4e:ca:cc:e4:96:72:73:6b:1d:
74:42:df:46:e5:78:2e:50:52:11:8d:54:5c:f2:c4:83:bb:ec:
98:89:08:95:f1:66:ef:c2:d4:20:9a:f1:b3:3e:19:a3:63:4b:
32:05:a4:20:8a:01:e2:de:11:0a:a7:9f:45:d2:2b:4e:f2:b9:
59:7b:0b:75:77:a1:db:31:dc:3c:0e:c4:33:4c:80:9b:57:84:
1b:e1:90:6b:3e:ec:6b:d9:d2:e5:07:0c:b5:0c:ef:1d:09:58:
06:df:33:c8:f7:f4:8e:10:ad:08:dc:43:8b:43:b4:50:7e:56:
a2:a2:4b:08:9a:0d:eb:8b:a3:2c:3e:78:06:86:38:36:09:8c:
28:b3:8f:07:54:8e:f5:1d:0c:92:d4:7f:fa:91:be:e6:8e:ea:
23:0d:a1:09:8f:d5:4e:42:be:a5:3f:03:d6:e6:5f:ca:79:98:
f1:a0:61:e2:94:e8:89:eb:5a:0b:37:1e:b8:59:fc:30:77:cb:
c6:d3:5f:3e:8a:4d:1d:99:7c:9b:bd:06:9e:25:f1:d9:95:2c:
04:83:c0:ce:1b:4b:52:9b:df:69:02:35:e4:0c:df:51:f7:3f:
4f:34:d1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:36 2026 by rpki-client