Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/bVsBZq4WzkZxlhW7gqbUK7dG0kE.roa
File: bVsBZq4WzkZxlhW7gqbUK7dG0kE.roa (raw, json)
Hash identifier: H/CexeKIrTnjFd2U3QPCHA+f9Gezq68mOPfLmBSg4YY=
Subject key identifier: 6D:5B:01:66:AE:16:CE:46:71:96:15:BB:82:A6:D4:2B:B7:46:D2:41
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019C6C4B7F0EA56D779169F785FC91F0FF33
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/bVsBZq4WzkZxlhW7gqbUK7dG0kE.roa
Signing time: Tue 17 Feb 2026 15:50:12 +0000
ROA not before: Tue 17 Feb 2026 15:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36239
IP address blocks: 185.65.146.0/24 maxlen: 24
2a0b:40c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:4b:7f:0e:a5:6d:77:91:69:f7:85:fc:91:f0:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Feb 17 15:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d5b0166ae16ce46719615bb82a6d42bb746d241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:94:7b:49:e8:73:97:a8:93:47:3d:52:21:
37:7e:80:7f:c0:92:cd:2e:e6:f3:9f:8c:4c:ba:8a:
8b:f2:12:a5:4e:41:24:52:ff:b0:b5:b3:8b:bf:88:
56:c9:fe:4f:8c:77:92:63:98:73:b2:40:a2:2f:1b:
ec:d9:74:66:27:7a:c0:62:65:a3:3c:74:e8:8c:5f:
f1:03:8d:9f:d3:72:dd:21:45:75:02:4a:b4:ec:69:
d5:5d:86:c4:c4:c7:c6:96:46:0b:2a:8f:a3:a9:9d:
f6:18:b3:91:6a:77:e3:37:55:15:c0:98:a4:f7:31:
ed:85:94:cc:49:eb:1a:3a:94:a9:f8:07:e7:ae:17:
c7:b9:50:c1:30:62:f9:76:cb:36:4e:ca:bd:7f:92:
e4:ff:f7:cf:c9:15:6d:0e:86:76:3f:5b:4f:68:34:
db:50:77:e0:cc:3f:f9:90:1a:9b:a9:5b:0b:aa:a9:
77:3a:cd:aa:d3:7e:2d:92:c1:14:4c:58:1a:70:ab:
78:b2:4b:b0:9c:15:c4:08:8c:a9:98:e0:78:9d:41:
95:7d:51:f4:32:de:4a:9b:17:0b:6c:be:cd:55:7e:
ad:8a:18:c2:00:8e:f6:47:ae:18:74:38:fd:b5:00:
91:01:2b:53:98:42:ef:07:5a:77:db:37:43:e9:12:
c1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5B:01:66:AE:16:CE:46:71:96:15:BB:82:A6:D4:2B:B7:46:D2:41
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/bVsBZq4WzkZxlhW7gqbUK7dG0kE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.146.0/24
IPv6:
2a0b:40c1::/48
Signature Algorithm: sha256WithRSAEncryption
1d:78:59:c5:35:67:db:73:d9:cc:bb:e5:92:db:62:4b:0d:54:
d7:4b:4e:4e:b9:63:b2:38:fb:a0:1d:d2:28:7e:b0:09:bd:04:
0c:99:25:dd:2c:0b:07:d0:8f:c7:ee:2f:4c:3a:c4:eb:3f:35:
14:70:0a:4d:ba:0a:ec:85:52:7c:18:fb:32:57:3a:f7:99:4c:
c6:f4:20:77:72:db:73:c8:87:23:ec:ce:44:12:49:a4:b5:92:
36:1a:fa:5e:db:f0:7f:7a:63:1c:c9:33:80:41:04:fe:c2:f0:
6f:3e:24:5e:37:09:4a:86:f8:fe:fe:3d:99:49:7f:cf:a4:29:
90:b6:3b:7a:9a:24:3b:ba:5e:30:5b:aa:ce:7a:22:70:55:b0:
f2:c3:d6:5a:4f:4e:d7:ad:d2:49:d6:2c:13:c4:86:da:91:e0:
fb:f7:f4:1d:83:c0:c7:cd:54:8d:ce:74:04:a9:3d:f6:ba:32:
81:44:f9:a9:5f:43:bf:65:c7:68:7a:21:0b:4b:b3:83:ad:e6:
ff:b9:56:7b:01:88:6e:ce:88:7c:de:ef:7e:57:5b:a4:37:c9:
46:75:3d:bb:a0:24:97:42:2b:38:00:bf:aa:d9:df:4f:49:cb:
ac:e1:a8:be:ef:28:1e:3e:71:42:66:6f:29:fe:f8:b0:f0:b5:
25:2f:6f:7b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZxsS38OpW13kWn3hfyR8P8zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2
NmIyMWUwHhcNMjYwMjE3MTU1MDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDViMDE2NmFlMTZjZTQ2NzE5NjE1YmI4MmE2ZDQyYmI3NDZkMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLaUe0noc5eok0c9UiE3foB/wJLN
Lubzn4xMuoqL8hKlTkEkUv+wtbOLv4hWyf5PjHeSY5hzskCiLxvs2XRmJ3rAYmWj
PHTojF/xA42f03LdIUV1Akq07GnVXYbExMfGlkYLKo+jqZ32GLORanfjN1UVwJik
9zHthZTMSesaOpSp+AfnrhfHuVDBMGL5dss2Tsq9f5Lk//fPyRVtDoZ2P1tPaDTb
UHfgzD/5kBqbqVsLqql3Os2q034tksEUTFgacKt4skuwnBXECIypmOB4nUGVfVH0
Mt5KmxcLbL7NVX6tihjCAI72R64YdDj9tQCRAStTmELvB1p32zdD6RLB/QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG1bAWauFs5GcZYVu4Km1Cu3RtJBMB8GA1UdIwQY
MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt
ODA5MWViY2UzYmJmLzEvYlZzQlpxNFd6a1p4bGhXN2dxYlVLN2RHMGtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm
LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuUGSMA8E
AgACMAkDBwAqC0DBAAAwDQYJKoZIhvcNAQELBQADggEBAB14WcU1Z9tz2cy75ZLb
YksNVNdLTk65Y7I4+6Ad0ih+sAm9BAyZJd0sCwfQj8fuL0w6xOs/NRRwCk26CuyF
UnwY+zJXOveZTMb0IHdy23PIhyPszkQSSaS1kjYa+l7b8H96YxzJM4BBBP7C8G8+
JF43CUqG+P7+PZlJf8+kKZC2O3qaJDu6XjBbqs56InBVsPLD1lpPTtet0knWLBPE
htqR4Pv39B2DwMfNVI3OdASpPfa6MoFE+alfQ79lx2h6IQtLs4Ot5v+5VnsBiG7O
iHze735XW6Q3yUZ1PbugJJdCKzgAv6rZ309Jy6zhqL7vKB4+cUJmbyn++LDwtSUv
b3s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:27:50 2026 by rpki-client