Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/vjQq9UampGvBxWRw_V3sL7pHCyY.roa
File: vjQq9UampGvBxWRw_V3sL7pHCyY.roa (raw, json)
Hash identifier: TlwNEPo1u7VkHjLKctu36XpzTUSwJOLmKhGzSZcego4=
Subject key identifier: BE:34:2A:F5:46:A6:A4:6B:C1:C5:64:70:FD:5D:EC:2F:BA:47:0B:26
Certificate issuer: /CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Certificate serial: 019E2A546DE0EBF0266FB6027F8D3E51A9DD
Authority key identifier: B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/vjQq9UampGvBxWRw_V3sL7pHCyY.roa
Signing time: Fri 15 May 2026 06:30:36 +0000
ROA not before: Fri 15 May 2026 06:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207192
IP address blocks: 185.161.48.0/22 maxlen: 22
185.161.48.0/24 maxlen: 24
185.161.49.0/24 maxlen: 24
185.161.50.0/24 maxlen: 24
185.161.51.0/24 maxlen: 24
194.56.214.0/24 maxlen: 24
212.2.232.0/23 maxlen: 24
2a0f:5240::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:54:6d:e0:eb:f0:26:6f:b6:02:7f:8d:3e:51:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d802667980944df4da2ab4b08e9d34b20a8d11
Validity
Not Before: May 15 06:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be342af546a6a46bc1c56470fd5dec2fba470b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:f9:89:53:f5:8b:0f:7b:13:5c:6d:c5:ae:
ec:93:76:4c:01:71:25:d0:d0:d5:75:95:cf:d6:8f:
a1:bc:18:5a:03:80:b0:d1:7c:d4:b5:0c:8a:9c:57:
56:f8:db:22:fc:bc:f8:b8:cf:07:61:45:6d:f6:df:
6c:2d:cb:a0:25:ae:80:b7:14:6c:eb:84:e8:41:55:
ac:be:df:e9:80:86:1b:76:c2:14:dc:79:2b:76:bb:
3d:e8:1f:e7:6e:e3:ce:d2:7f:bf:3c:65:99:c4:00:
a0:77:41:c6:3e:bc:25:1b:2a:19:be:04:4c:7d:9b:
5d:84:f4:bb:2d:50:b1:34:8d:46:77:37:c5:6b:b8:
b7:fe:3c:af:04:9a:b6:01:28:cd:5d:0f:4c:54:98:
00:53:37:92:9f:fb:be:0e:72:9f:78:0b:b2:c3:f4:
c0:3d:47:f3:29:61:13:a1:a7:d2:ff:b4:52:70:55:
c9:91:25:e4:32:30:88:f7:54:08:62:b7:02:b4:ef:
7f:07:97:a8:71:a4:3a:4a:19:b5:49:c8:c6:dc:7e:
24:a4:5f:89:e0:9a:c7:a4:f2:0f:21:9e:a8:f8:7f:
67:03:1b:66:14:15:ba:95:4c:3e:43:6d:33:fa:82:
3e:04:c2:9b:fd:d9:bc:7c:c5:24:30:8d:6c:1e:92:
b0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:34:2A:F5:46:A6:A4:6B:C1:C5:64:70:FD:5D:EC:2F:BA:47:0B:26
X509v3 Authority Key Identifier:
keyid:B1:D8:02:66:79:80:94:4D:F4:DA:2A:B4:B0:8E:9D:34:B2:0A:8D:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdgCZnmAlE302iq0sI6dNLIKjRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/vjQq9UampGvBxWRw_V3sL7pHCyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f153e7-07d9-4b81-aaed-cbec43fd92a1/1/sdgCZnmAlE302iq0sI6dNLIKjRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.48.0/22
194.56.214.0/24
212.2.232.0/23
IPv6:
2a0f:5240::/32
Signature Algorithm: sha256WithRSAEncryption
04:7f:58:79:af:a8:ba:e8:be:8d:00:9e:86:82:5b:70:c1:7f:
8e:6f:fe:f4:3e:f0:33:99:a9:e6:e0:11:5f:c0:26:25:8d:3b:
5f:d1:a4:e0:b4:df:70:64:f9:59:5e:e2:65:e4:13:db:69:3a:
50:f6:07:e8:4c:75:e1:95:1a:2b:02:33:92:bd:ff:35:91:27:
8f:bc:33:94:46:d7:ad:3d:cd:c4:23:d6:54:54:c0:d9:e8:a4:
53:03:e9:97:e4:aa:c4:da:3b:d3:02:74:97:ae:0f:1d:f7:81:
b8:ec:3d:bc:81:21:5f:67:65:1e:9d:5d:86:81:9e:62:96:6d:
f8:fd:64:79:c1:7c:60:89:80:3e:e4:92:75:cf:a7:db:ca:23:
92:e3:59:59:d6:02:f2:69:d6:49:5a:3f:19:29:60:99:33:03:
21:72:32:5d:e5:88:c6:db:67:d7:6a:48:44:43:75:97:b5:cd:
43:18:e7:5b:9e:60:a1:e3:4b:49:aa:5b:78:cc:97:20:91:3b:
9e:18:db:6a:9a:35:24:87:b2:46:63:eb:47:f7:32:21:64:e4:
62:84:d7:70:04:70:59:5e:2e:88:21:dd:f3:49:44:cf:24:63:
a4:48:9c:14:0f:47:a7:0b:d5:be:3e:cc:b2:5a:28:86:99:1e:
36:f4:89:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:49 2026 by rpki-client