Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/VOZJu72cAptf5GuMnp6OPKeTdE0.roa
File: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (raw, json)
Hash identifier: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=
Subject key identifier: 54:E6:49:BB:BD:9C:02:9B:5F:E4:6B:8C:9E:9E:8E:3C:A7:93:74:4D
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019B7EA71AF5D3F421493BD5D2F75B6B9F0F
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/VOZJu72cAptf5GuMnp6OPKeTdE0.roa
Signing time: Fri 02 Jan 2026 12:20:39 +0000
ROA not before: Fri 02 Jan 2026 12:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8240
IP address blocks: 185.161.84.0/22 maxlen: 24
185.161.87.0/24 maxlen: 24
185.172.24.0/22 maxlen: 22
195.80.96.0/19 maxlen: 19
213.184.32.0/19 maxlen: 19
2a02:88::/32 maxlen: 32
2a0b:6c00::/29 maxlen: 32
2a0b:6c00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:1a:f5:d3:f4:21:49:3b:d5:d2:f7:5b:6b:9f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jan 2 12:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54e649bbbd9c029b5fe46b8c9e9e8e3ca793744d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:93:f8:99:ed:08:57:c4:1b:ce:46:92:3f:
c9:d9:28:9e:b0:83:04:f2:50:ea:1d:3d:4d:cb:0f:
8c:73:8b:81:05:17:d4:e5:cf:8e:a9:55:df:e6:0d:
64:15:8f:08:a1:86:39:6f:00:1e:c6:d5:89:fc:3a:
f0:b7:6f:48:10:43:c3:83:1b:e4:81:60:bb:08:ee:
ba:f2:3e:05:23:21:7e:67:3d:fe:cc:4c:2d:0d:2a:
96:85:31:7f:33:f3:bb:b5:9c:bb:10:3e:91:c3:41:
0c:d6:f5:45:ea:5f:b6:93:48:27:72:9b:c8:75:2e:
cd:66:b0:fc:15:df:f4:23:d2:f2:ef:80:7b:86:de:
5c:f0:41:1d:6d:b0:3e:34:ad:b6:6d:fd:f1:9a:99:
9e:de:98:81:df:a1:bd:f3:c2:9a:22:a5:96:5e:99:
6f:54:a7:91:e5:84:b5:5e:ba:09:a1:39:2f:27:e4:
68:a3:c6:78:00:08:40:cd:69:ec:c4:69:ce:ac:62:
7c:5f:7f:78:aa:dc:e1:f2:9c:cf:d6:4d:85:ae:21:
93:3c:c4:17:95:61:70:bd:09:a5:60:3b:07:ec:67:
2a:12:9e:6e:3e:3e:36:cd:db:b4:65:2e:f7:b6:66:
e5:0a:2d:a1:f3:8a:41:8e:d1:3f:98:14:04:6e:24:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E6:49:BB:BD:9C:02:9B:5F:E4:6B:8C:9E:9E:8E:3C:A7:93:74:4D
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/VOZJu72cAptf5GuMnp6OPKeTdE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.84.0/22
185.172.24.0/22
195.80.96.0/19
213.184.32.0/19
IPv6:
2a02:88::/32
2a0b:6c00::/29
Signature Algorithm: sha256WithRSAEncryption
77:ed:c2:6e:f2:d5:94:37:46:ce:e4:e0:f6:37:7f:b1:42:5f:
e4:f2:ba:4b:3f:56:c3:50:d5:0d:35:c7:29:20:13:de:2d:a1:
98:11:fe:c2:87:c7:97:c5:38:72:39:73:4a:2e:48:c8:4a:23:
69:84:8e:65:b3:55:34:bf:c2:63:a1:e4:7d:9b:25:0c:0f:2e:
2a:67:94:4b:90:80:9c:6a:1d:c5:d4:60:eb:13:30:51:0e:dd:
04:79:65:e0:ed:c3:a4:64:59:2d:34:49:81:ee:15:db:84:a2:
93:f1:1f:e3:a4:3e:20:46:ad:a0:cb:54:2b:eb:62:86:44:eb:
3e:bc:eb:06:31:aa:ad:ab:fc:0c:de:1e:fb:e2:2c:88:a3:48:
0b:83:72:e2:2b:29:a5:69:86:58:b6:0a:7b:fa:d4:2e:07:88:
9d:62:d3:e2:99:b8:6d:5a:d9:34:0f:6c:7f:e3:12:38:36:6d:
e1:4a:b7:3c:2a:06:69:ae:6d:b4:34:52:92:06:00:44:5a:70:
21:a0:06:cb:66:74:dc:b3:9e:c7:39:3a:ef:84:72:53:08:1e:
f1:e5:d0:d1:cb:6b:99:b2:be:32:8a:48:2e:87:8c:a2:7c:0d:
e7:50:5b:47:67:6f:05:53:05:f2:2e:b0:07:79:11:b6:84:1d:
78:f9:4d:f7
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZt+pxr10/QhSTvV0vdba58PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4
NWQ4ZDkwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGU2NDliYmJkOWMwMjliNWZlNDZiOGM5ZTllOGUzY2E3OTM3NDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNOT+JntCFfEG85Gkj/J2SiesIME
8lDqHT1Nyw+Mc4uBBRfU5c+OqVXf5g1kFY8IoYY5bwAextWJ/Drwt29IEEPDgxvk
gWC7CO668j4FIyF+Zz3+zEwtDSqWhTF/M/O7tZy7ED6Rw0EM1vVF6l+2k0gncpvI
dS7NZrD8Fd/0I9Ly74B7ht5c8EEdbbA+NK22bf3xmpme3piB36G988KaIqWWXplv
VKeR5YS1XroJoTkvJ+Roo8Z4AAhAzWnsxGnOrGJ8X394qtzh8pzP1k2FriGTPMQX
lWFwvQmlYDsH7GcqEp5uPj42zdu0ZS73tmblCi2h84pBjtE/mBQEbiRREwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFFTmSbu9nAKbX+RrjJ6ejjynk3RNMB8GA1UdIwQY
MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt
M2M5MWFkNGIzZTA4LzEvVk9aSnU3MmNBcHRmNUd1TW5wNk9QS2VUZEUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4
LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCuaFUAwQC
uawYAwQFw1BgAwQF1bggMBQEAgACMA4DBQAqAgCIAwUDKgtsADANBgkqhkiG9w0B
AQsFAAOCAQEAd+3CbvLVlDdGzuTg9jd/sUJf5PK6Sz9Ww1DVDTXHKSAT3i2hmBH+
wofHl8U4cjlzSi5IyEojaYSOZbNVNL/CY6HkfZslDA8uKmeUS5CAnGodxdRg6xMw
UQ7dBHll4O3DpGRZLTRJge4V24Sik/Ef46Q+IEatoMtUK+tihkTrPrzrBjGqrav8
DN4e++IsiKNIC4Ny4isppWmGWLYKe/rULgeInWLT4pm4bVrZNA9sf+MSODZt4Uq3
PCoGaa5ttDRSkgYARFpwIaAGy2Z03LOexzk674RyUwge8eXQ0ctrmbK+MopILoeM
onwN51BbR2dvBVMF8i6wB3kRtoQdePlN9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:58 2026 by rpki-client