Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa
File: vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa (raw, json)
Hash identifier: vGuE++T51Grc7iV5G51jVBx+3DOtyMCoT9ihsAdCu8I=
Subject key identifier: BE:2B:CA:2F:6A:EF:6C:8A:CD:45:9C:9D:67:9C:E4:77:C5:8C:7E:64
Certificate issuer: /CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Certificate serial: 019B7EA6B6B09EC8EDBC266324F0F123B32D
Authority key identifier: 6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa
Signing time: Fri 02 Jan 2026 12:20:13 +0000
ROA not before: Fri 02 Jan 2026 12:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 553
IP address blocks: 144.41.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a6:b6:b0:9e:c8:ed:bc:26:63:24:f0:f1:23:b3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a5d410f425d35e74d456f7f87bae8ed92b3c829
Validity
Not Before: Jan 2 12:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be2bca2f6aef6c8acd459c9d679ce477c58c7e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f1:d6:8d:e5:9b:38:c9:6f:2e:c3:27:d1:42:
dc:8b:46:f7:87:c1:60:5b:31:77:2d:fd:07:94:96:
7d:b8:90:8d:44:6d:3d:45:31:b5:83:e2:a6:6d:96:
4a:d7:7c:83:0c:81:9f:d0:9c:7b:e9:48:26:f1:f4:
4e:6e:e7:de:3b:c5:35:d9:92:db:1f:3e:6c:d5:80:
f8:0f:d7:74:b6:28:5a:3f:1e:85:a0:6b:35:1a:5d:
87:d2:26:2c:a1:da:d4:2f:6b:2a:20:8a:8b:86:84:
61:3a:16:7a:5d:56:db:72:45:70:4a:27:1c:1e:07:
47:56:c6:b8:7a:d9:0e:24:e6:a5:5c:ba:bd:60:f0:
1d:64:f7:50:d8:6f:ee:4c:6c:0e:7b:30:f5:e7:ed:
cd:03:10:6c:81:e5:f7:dd:df:b9:cf:88:5d:fe:03:
dc:01:2e:90:1b:38:99:fb:49:1d:2e:2c:4b:de:a6:
e1:32:3f:15:80:56:6d:78:1b:2b:e1:5d:1f:44:23:
a5:3f:3e:78:37:2c:48:ec:34:7b:3a:a5:1a:57:39:
31:b9:eb:99:8a:8d:e9:b4:14:ac:e1:37:fc:29:4d:
aa:54:78:a1:47:a2:30:01:4e:6f:bb:6d:14:63:6e:
89:8c:71:e1:e4:9f:76:b8:30:6f:71:99:61:dc:cd:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2B:CA:2F:6A:EF:6C:8A:CD:45:9C:9D:67:9C:E4:77:C5:8C:7E:64
X509v3 Authority Key Identifier:
keyid:6A:5D:41:0F:42:5D:35:E7:4D:45:6F:7F:87:BA:E8:ED:92:B3:C8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/al1BD0JdNedNRW9_h7ro7ZKzyCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/vivKL2rvbIrNRZydZ5zkd8WMfmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/d5f14f-2705-42ec-900f-6934cafb6bcd/1/al1BD0JdNedNRW9_h7ro7ZKzyCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.41.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:e2:4f:7b:02:70:07:6e:0d:bf:35:b9:28:6e:a4:6c:0f:48:
26:62:f0:dd:d1:1a:fe:f2:a4:5a:61:a9:53:bc:a6:a8:d5:89:
a4:3f:a6:83:c2:ab:3d:f5:bf:23:24:25:33:f2:2a:78:5f:08:
da:d6:89:67:0d:3a:e2:c0:83:58:a5:b4:b8:78:c9:4d:ac:ee:
e5:54:39:33:6d:8d:33:31:f7:46:b1:2f:dc:8f:db:9d:88:06:
9f:60:93:91:b7:74:09:4e:82:ac:2b:02:9a:07:07:54:7b:ed:
56:94:03:93:fa:72:66:77:02:eb:e9:c6:88:f9:10:2d:11:9b:
69:87:16:c7:0c:df:d4:b9:f6:0d:23:0e:22:ca:6a:4f:53:e1:
a7:0b:c7:8d:e3:b7:8b:c9:ec:7b:96:ed:9e:a4:56:42:53:33:
60:44:81:7a:d7:34:d4:a1:37:02:0a:b2:a8:f9:77:04:9e:12:
e1:b1:b2:48:25:42:ec:3a:00:8b:72:28:f9:f2:7d:09:32:0e:
40:fe:05:d9:81:7d:16:d6:9f:f5:d8:e2:90:1b:44:d2:fe:3e:
0b:f7:e9:10:c2:f8:fb:85:21:64:0e:f6:3b:11:5a:ee:87:24:
29:1c:06:35:8e:f7:19:dd:6e:f0:ac:c9:e4:8b:1b:40:eb:90:
55:16:2a:1a
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZt+prawnsjtvCZjJPDxI7MtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNWQ0MTBmNDI1ZDM1ZTc0ZDQ1NmY3Zjg3YmFlOGVkOTJi
M2M4MjkwHhcNMjYwMTAyMTIyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTJiY2EyZjZhZWY2YzhhY2Q0NTljOWQ2NzljZTQ3N2M1OGM3ZTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fHWjeWbOMlvLsMn0ULci0b3h8Fg
WzF3Lf0HlJZ9uJCNRG09RTG1g+KmbZZK13yDDIGf0Jx76Ugm8fRObufeO8U12ZLb
Hz5s1YD4D9d0tihaPx6FoGs1Gl2H0iYsodrUL2sqIIqLhoRhOhZ6XVbbckVwSicc
HgdHVsa4etkOJOalXLq9YPAdZPdQ2G/uTGwOezD15+3NAxBsgeX33d+5z4hd/gPc
AS6QGziZ+0kdLixL3qbhMj8VgFZteBsr4V0fRCOlPz54NyxI7DR7OqUaVzkxueuZ
io3ptBSs4Tf8KU2qVHihR6IwAU5vu20UY26JjHHh5J92uDBvcZlh3M3rjQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFL4ryi9q72yKzUWcnWec5HfFjH5kMB8GA1UdIwQY
MBaAFGpdQQ9CXTXnTUVvf4e66O2Ss8gpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYt
NjkzNGNhZmI2YmNkLzEvdml2S0wycnZiSXJOUlp5ZFo1emtkOFdNZm1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kNWYxNGYtMjcwNS00MmVjLTkwMGYtNjkzNGNhZmI2YmNk
LzEvYWwxQkQwSmROZWROUlc5X2g3cm83Wkt6eUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkCkwDQYJ
KoZIhvcNAQELBQADggEBAGniT3sCcAduDb81uShupGwPSCZi8N3RGv7ypFphqVO8
pqjViaQ/poPCqz31vyMkJTPyKnhfCNrWiWcNOuLAg1iltLh4yU2s7uVUOTNtjTMx
90axL9yP252IBp9gk5G3dAlOgqwrApoHB1R77VaUA5P6cmZ3Auvpxoj5EC0Rm2mH
FscM39S59g0jDiLKak9T4acLx43jt4vJ7HuW7Z6kVkJTM2BEgXrXNNShNwIKsqj5
dwSeEuGxskglQuw6AItyKPnyfQkyDkD+BdmBfRbWn/XY4pAbRNL+Pgv36RDC+PuF
IWQO9jsRWu6HJCkcBjWO9xndbvCsyeSLG0DrkFUWKho=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:43 2026 by rpki-client