Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/V_lZZIqY5s85SF0ugHkKTWjJMIw.roa
File: V_lZZIqY5s85SF0ugHkKTWjJMIw.roa (raw, json)
Hash identifier: k646Q+fHI6cZiQ9lJkMUeqvbWvtUz1EBniyuZudyxSE=
Subject key identifier: 57:F9:59:64:8A:98:E6:CF:39:48:5D:2E:80:79:0A:4D:68:C9:30:8C
Certificate issuer: /CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Certificate serial: 019E9D2F1916F2A05DDA78E7CC63DD23CF3B
Authority key identifier: 17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/V_lZZIqY5s85SF0ugHkKTWjJMIw.roa
Signing time: Sat 06 Jun 2026 13:46:09 +0000
ROA not before: Sat 06 Jun 2026 13:46:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198983
IP address blocks: 153.75.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:2f:19:16:f2:a0:5d:da:78:e7:cc:63:dd:23:cf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fda1a1a09fded7a29adaa0375245a4ced23c68
Validity
Not Before: Jun 6 13:46:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f959648a98e6cf39485d2e80790a4d68c9308c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:65:bc:cd:c9:0a:56:2f:58:fc:18:5b:d5:ae:
ca:e4:2b:bf:e6:65:f0:8d:d1:28:ea:2c:f8:2c:0c:
b9:80:80:e8:e0:fc:68:95:6f:dc:12:8e:02:1d:e4:
f0:6b:e0:dd:39:70:47:26:21:8c:22:61:78:1c:4c:
4a:88:b0:ae:fd:4c:d6:0b:13:d0:12:cc:c0:21:7c:
6b:6c:e1:13:7a:36:fb:cc:a3:16:76:52:cb:db:73:
1f:df:4c:85:b6:2d:3b:58:f0:ba:af:f7:85:f9:0c:
6d:73:66:91:35:78:e7:2a:37:4e:71:e8:8e:61:75:
cc:ec:03:a4:67:5f:af:8a:48:01:c0:bc:5e:70:b3:
da:8c:aa:09:12:51:4a:de:40:46:40:e7:87:20:19:
5a:0b:7f:7c:78:9b:c6:4b:da:c2:73:de:76:9f:13:
bb:1c:4e:82:8c:b2:87:d5:db:7a:a0:15:a1:61:3a:
19:6f:38:55:db:46:74:5b:c5:c3:38:0e:54:21:06:
81:ae:42:33:2f:d0:2a:8b:dc:bd:12:4d:93:50:75:
37:e9:a5:b3:98:1a:65:9d:8d:6b:7f:e3:b0:69:fe:
51:a3:7d:79:e8:10:1f:d4:b1:e1:41:db:04:18:9a:
25:57:2f:ba:e7:86:36:e0:37:65:59:19:f2:7c:e5:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:59:64:8A:98:E6:CF:39:48:5D:2E:80:79:0A:4D:68:C9:30:8C
X509v3 Authority Key Identifier:
keyid:17:FD:A1:A1:A0:9F:DE:D7:A2:9A:DA:A0:37:52:45:A4:CE:D2:3C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_2hoaCf3teimtqgN1JFpM7SPGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/V_lZZIqY5s85SF0ugHkKTWjJMIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01a6ec-7941-4022-9075-1b2b64f1068e/1/F_2hoaCf3teimtqgN1JFpM7SPGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.75.88.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:5e:01:e7:51:49:88:ed:fc:5a:8e:3f:ef:66:b5:7f:7b:e1:
fa:8b:7c:d7:e8:02:5e:72:e5:53:99:7a:92:08:41:67:55:dc:
87:53:db:13:e5:29:83:b0:68:ac:29:1f:7d:b2:0c:5c:65:0a:
3d:30:e3:99:66:7c:9d:67:04:23:6b:d1:bf:13:81:78:76:71:
96:98:72:29:c5:00:41:bd:9e:f8:be:24:68:bd:64:5a:27:48:
7b:1d:15:28:31:be:9d:66:fa:0c:19:c8:2c:f6:b2:4c:3c:fc:
53:31:c0:41:d1:6b:6a:44:96:91:b8:ef:f2:38:04:b9:5c:3e:
c0:69:d9:4b:57:3c:a1:bf:85:17:09:c0:13:55:0c:f4:7c:8a:
e2:08:19:b0:df:1b:e2:ed:5e:94:b2:c4:c6:09:00:03:20:6d:
d6:08:04:0d:32:a5:c9:de:fd:c1:6e:e9:2f:c6:a6:7c:7d:5c:
a4:a0:20:69:a8:58:a6:4d:6c:ba:0a:e8:db:8c:34:8a:cc:68:
59:f6:2a:64:f7:f5:e2:e4:5e:8c:ed:57:fb:20:72:79:a2:f8:
36:cb:cf:a8:aa:d8:3c:68:6a:90:8b:91:3c:85:a4:88:e3:41:
88:0b:09:e4:19:fc:73:af:b4:5a:78:a3:a3:7a:61:2a:09:ea:
b8:0e:6c:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6dLxkW8qBd2njnzGPdI887MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmRhMWExYTA5ZmRlZDdhMjlhZGFhMDM3NTI0NWE0Y2Vk
MjNjNjgwHhcNMjYwNjA2MTM0NjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2Y5NTk2NDhhOThlNmNmMzk0ODVkMmU4MDc5MGE0ZDY4YzkzMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmW8zckKVi9Y/Bhb1a7K5Cu/5mXw
jdEo6iz4LAy5gIDo4PxolW/cEo4CHeTwa+DdOXBHJiGMImF4HExKiLCu/UzWCxPQ
EszAIXxrbOETejb7zKMWdlLL23Mf30yFti07WPC6r/eF+Qxtc2aRNXjnKjdOceiO
YXXM7AOkZ1+vikgBwLxecLPajKoJElFK3kBGQOeHIBlaC398eJvGS9rCc952nxO7
HE6CjLKH1dt6oBWhYToZbzhV20Z0W8XDOA5UIQaBrkIzL9Aqi9y9Ek2TUHU36aWz
mBplnY1rf+Owaf5Ro3156BAf1LHhQdsEGJolVy+654Y24DdlWRnyfOVelwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFf5WWSKmObPOUhdLoB5Ck1oyTCMMB8GA1UdIwQY
MBaAFBf9oaGgn97XopraoDdSRaTO0jxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl8yaG9hQ2YzdGVpbXRxZ04xSkZwTTdTUEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMWE2ZWMtNzk0MS00MDIyLTkwNzUt
MWIyYjY0ZjEwNjhlLzEvVl9sWlpJcVk1czg1U0YwdWdIa0tUV2pKTUl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wMWE2ZWMtNzk0MS00MDIyLTkwNzUtMWIyYjY0ZjEwNjhl
LzEvRl8yaG9hQ2YzdGVpbXRxZ04xSkZwTTdTUEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmUtYMA0G
CSqGSIb3DQEBCwUAA4IBAQC9XgHnUUmI7fxajj/vZrV/e+H6i3zX6AJecuVTmXqS
CEFnVdyHU9sT5SmDsGisKR99sgxcZQo9MOOZZnydZwQja9G/E4F4dnGWmHIpxQBB
vZ74viRovWRaJ0h7HRUoMb6dZvoMGcgs9rJMPPxTMcBB0WtqRJaRuO/yOAS5XD7A
adlLVzyhv4UXCcATVQz0fIriCBmw3xvi7V6UssTGCQADIG3WCAQNMqXJ3v3Bbukv
xqZ8fVykoCBpqFimTWy6CujbjDSKzGhZ9ipk9/Xi5F6M7Vf7IHJ5ovg2y8+oqtg8
aGqQi5E8haSI40GICwnkGfxzr7RaeKOjemEqCeq4DmwB
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:23 2026 by rpki-client