Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VGwoAgl1RYVsTjPeHQPtISle1Ic.roa
File: VGwoAgl1RYVsTjPeHQPtISle1Ic.roa (raw, json)
Hash identifier: k+JlXdQgafoQFpihzDnQwcU/y5ErjIcbSpK01WO4fWU=
Subject key identifier: 54:6C:28:02:09:75:45:85:6C:4E:33:DE:1D:03:ED:21:29:5E:D4:87
Certificate issuer: /CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Certificate serial: 01A0B583C717BE2AE86730CF0D39EEF04373
Authority key identifier: 6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VGwoAgl1RYVsTjPeHQPtISle1Ic.roa
Signing time: Fri 18 Sep 2026 17:15:07 +0000
ROA not before: Fri 18 Sep 2026 17:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.111.48.0/20 maxlen: 20
109.111.54.0/23 maxlen: 24
109.111.56.0/22 maxlen: 24
185.65.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:83:c7:17:be:2a:e8:67:30:cf:0d:39:ee:f0:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f75e4e94b5cb74517b7b01568015da9e6eecdb6
Validity
Not Before: Sep 18 17:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546c2802097545856c4e33de1d03ed21295ed487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e5:30:59:4c:48:61:d3:e2:51:d2:ce:a6:86:
b4:18:25:9c:ec:36:b6:f9:f9:c1:0c:ab:f4:4d:c3:
68:50:b0:91:4c:bb:69:4d:0e:48:a4:ca:0d:e9:fb:
32:75:b5:51:a9:ac:f3:34:d2:d8:72:2c:cd:4f:5b:
d2:6f:48:cd:95:6c:8a:73:f7:74:04:8b:bb:3c:9d:
ed:47:90:8d:8c:0e:4d:ca:90:13:a2:43:c9:80:8c:
98:f8:86:7e:2e:b4:f6:05:78:3e:a5:d1:8a:46:a2:
dc:e3:a2:9f:37:16:02:ae:c1:0b:ad:bd:f5:b9:60:
51:74:de:d7:88:15:75:a8:7b:a8:fd:e8:b3:d2:ab:
19:94:f1:63:9f:a4:4a:31:22:ae:8e:1e:02:9b:71:
ea:a9:39:19:f7:79:2f:2f:87:14:27:8a:40:69:a5:
c6:fb:24:87:20:21:38:f3:d1:e5:b8:91:38:d2:6d:
d7:69:a0:11:66:9b:34:85:13:8c:ff:81:f5:b8:6f:
8c:25:d3:93:23:2d:ef:89:65:50:3e:87:7f:6a:8b:
68:0c:33:5a:f4:de:65:07:b4:b0:6e:e9:d5:a0:04:
40:10:77:25:dc:e2:85:c7:1d:5c:77:74:87:18:47:
6d:c3:13:87:0a:21:64:1a:e7:b6:5b:9b:a6:26:07:
ed:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6C:28:02:09:75:45:85:6C:4E:33:DE:1D:03:ED:21:29:5E:D4:87
X509v3 Authority Key Identifier:
keyid:6F:75:E4:E9:4B:5C:B7:45:17:B7:B0:15:68:01:5D:A9:E6:EE:CD:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3Xk6Utct0UXt7AVaAFdqebuzbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/VGwoAgl1RYVsTjPeHQPtISle1Ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/57a34f-e33b-4e17-bc32-66457724c2d3/1/b3Xk6Utct0UXt7AVaAFdqebuzbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.48.0/20
185.65.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:95:71:45:f3:14:65:6d:d9:0e:79:6f:73:2c:36:3c:e9:d9:
4a:dd:e9:d7:4e:da:e4:e2:29:9d:fe:a8:6c:b2:e9:99:b1:bd:
e8:83:99:8c:b8:19:3e:1a:f8:49:1e:14:8d:25:bc:cd:bf:4c:
a7:af:0c:cd:2f:75:8d:dc:a8:a3:a5:5d:9a:65:fb:f9:e3:64:
a3:db:65:f2:57:49:4f:47:b1:d7:a7:d8:78:6e:18:0b:aa:42:
a9:e9:8a:b1:c4:02:e6:8f:44:54:e3:3d:29:a4:42:c9:64:aa:
b0:e3:29:40:e9:18:b0:70:99:78:98:3d:ae:51:2f:24:ab:c8:
a8:c2:76:4d:58:67:b1:0e:f6:03:50:06:00:ce:0c:82:94:08:
d9:d5:18:ff:f2:41:b0:11:3b:57:3c:e2:56:53:9f:81:97:ef:
c4:a0:0e:ba:43:bb:85:16:fe:66:6a:e0:6d:a6:81:2c:ec:49:
07:c4:7c:b4:8c:c6:a4:04:9a:fc:7a:fd:25:50:3a:4c:74:e3:
e6:88:40:c6:03:57:84:ee:b7:ed:01:4d:d2:19:9e:e5:af:8a:
30:b8:6f:ac:47:7a:83:12:eb:98:6c:26:e5:44:77:98:fb:1c:
09:28:bf:eb:6a:b3:1b:14:0f:d0:19:5e:31:9e:0a:fd:4e:55:
fa:3e:d6:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaC1g8cXviroZzDPDTnu8ENzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNzVlNGU5NGI1Y2I3NDUxN2I3YjAxNTY4MDE1ZGE5ZTZl
ZWNkYjYwHhcNMjYwOTE4MTcxNTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDZjMjgwMjA5NzU0NTg1NmM0ZTMzZGUxZDAzZWQyMTI5NWVkNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuUwWUxIYdPiUdLOpoa0GCWc7Da2
+fnBDKv0TcNoULCRTLtpTQ5IpMoN6fsydbVRqazzNNLYcizNT1vSb0jNlWyKc/d0
BIu7PJ3tR5CNjA5NypATokPJgIyY+IZ+LrT2BXg+pdGKRqLc46KfNxYCrsELrb31
uWBRdN7XiBV1qHuo/eiz0qsZlPFjn6RKMSKujh4Cm3HqqTkZ93kvL4cUJ4pAaaXG
+ySHICE489HluJE40m3XaaARZps0hROM/4H1uG+MJdOTIy3viWVQPod/aotoDDNa
9N5lB7SwbunVoARAEHcl3OKFxx1cd3SHGEdtwxOHCiFkGue2W5umJgftxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFRsKAIJdUWFbE4z3h0D7SEpXtSHMB8GA1UdIwQY
MBaAFG915OlLXLdFF7ewFWgBXanm7s22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzIt
NjY0NTc3MjRjMmQzLzEvVkd3b0FnbDFSWVZzVGpQZUhRUHRJU2xlMUljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi81N2EzNGYtZTMzYi00ZTE3LWJjMzItNjY0NTc3MjRjMmQz
LzEvYjNYazZVdGN0MFVYdDdBVmFBRmRxZWJ1emJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEbW8wAwQA
uUE/MA0GCSqGSIb3DQEBCwUAA4IBAQCclXFF8xRlbdkOeW9zLDY86dlK3enXTtrk
4imd/qhssumZsb3og5mMuBk+GvhJHhSNJbzNv0ynrwzNL3WN3KijpV2aZfv542Sj
22XyV0lPR7HXp9h4bhgLqkKp6YqxxALmj0RU4z0ppELJZKqw4ylA6RiwcJl4mD2u
US8kq8iownZNWGexDvYDUAYAzgyClAjZ1Rj/8kGwETtXPOJWU5+Bl+/EoA66Q7uF
Fv5mauBtpoEs7EkHxHy0jMakBJr8ev0lUDpMdOPmiEDGA1eE7rftAU3SGZ7lr4ow
uG+sR3qDEuuYbCblRHeY+xwJKL/rarMbFA/QGV4xngr9TlX6PtZ1
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:17:56 2026 by rpki-client