Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VWUb9dDntRWtKhAHNX_JOG9I_ag.roa
File: VWUb9dDntRWtKhAHNX_JOG9I_ag.roa (raw, json)
Hash identifier: S7M4OT1OJRPR1PHP2hGxnL77S06D4GqxKQWwh7aJ/NA=
Subject key identifier: 55:65:1B:F5:D0:E7:B5:15:AD:2A:10:07:35:7F:C9:38:6F:48:FD:A8
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019C89FB82D7C73EAE98152FE91D6CCA525C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VWUb9dDntRWtKhAHNX_JOG9I_ag.roa
Signing time: Mon 23 Feb 2026 10:11:27 +0000
ROA not before: Mon 23 Feb 2026 10:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 262191
IP address blocks: 181.41.156.0/23 maxlen: 23
181.41.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:89:fb:82:d7:c7:3e:ae:98:15:2f:e9:1d:6c:ca:52:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Feb 23 10:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55651bf5d0e7b515ad2a1007357fc9386f48fda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f9:27:9a:39:86:00:65:45:0d:0b:f4:69:6e:
5e:a0:78:b1:af:86:87:eb:6d:9b:b3:16:e2:cc:00:
b6:d3:90:91:af:40:28:1e:e6:5e:3f:d8:6d:d0:e4:
8c:a4:72:f8:23:6f:a3:ef:11:18:b5:ef:47:20:60:
fd:d2:c7:f1:bb:39:0e:31:66:4a:ad:74:d7:89:ef:
3d:62:3c:be:3e:f7:d7:b2:54:d0:cc:16:0d:af:6a:
fe:5e:cb:27:3e:59:8e:e9:a7:a2:23:ce:b3:24:47:
22:67:ae:8c:d0:ff:99:30:98:78:c3:1d:7f:f7:9d:
ad:11:4a:20:1f:2d:82:1d:9f:19:a2:b5:73:f4:da:
18:c8:f7:37:8f:ff:2d:ed:90:56:70:1c:c9:38:1e:
29:77:7d:3e:90:2f:8d:a2:a6:5c:c5:0a:4d:9e:fc:
34:00:8d:18:01:5c:0a:de:a9:82:5f:a2:02:f9:45:
0c:9d:55:ea:76:c3:6a:5a:7f:ae:6f:4b:ed:85:66:
3b:fb:ac:87:c2:f9:29:7c:0e:16:9a:33:09:20:6a:
fb:6b:b4:ed:42:5d:10:1b:82:90:00:bd:c6:cd:d2:
51:30:c1:eb:f0:37:ab:30:33:7f:eb:39:fd:65:f3:
5a:57:d2:c1:9a:8b:c6:0b:c2:ff:2f:76:96:d1:8a:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:1B:F5:D0:E7:B5:15:AD:2A:10:07:35:7F:C9:38:6F:48:FD:A8
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/VWUb9dDntRWtKhAHNX_JOG9I_ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.156.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:04:18:18:52:39:aa:27:fc:92:07:f0:da:2b:10:50:9b:23:
d3:a4:76:10:5a:8c:ef:eb:26:10:cd:dc:72:06:0f:12:c2:6c:
8b:f4:cd:a0:f1:d6:5c:cb:6e:62:a2:48:76:8f:99:9c:26:33:
6b:13:37:a8:85:25:fc:33:05:37:24:17:cd:a9:65:34:63:ce:
77:36:28:9f:ea:f8:ff:fb:1a:74:3a:f8:fa:3d:f1:9b:c7:67:
00:13:04:24:91:58:a8:59:12:16:a1:8a:7d:ca:10:f3:69:e9:
9d:35:d9:b0:36:eb:64:52:a4:21:23:c9:34:a0:1d:4e:c5:f2:
f7:95:8a:c1:84:b6:df:e9:ab:24:0a:7f:e8:61:d2:3a:20:ed:
bb:7e:ad:0a:94:29:e7:20:5f:1c:82:48:b0:5c:17:50:08:2c:
42:6d:72:a6:10:35:84:12:55:aa:b8:29:0c:82:8b:39:d6:a0:
92:dd:0d:0c:78:08:34:f7:d9:cf:33:76:b4:a7:c4:cf:48:e3:
e5:6a:d9:9f:5d:16:cc:7d:cd:62:5d:b2:3c:93:13:a9:cb:ce:
b0:4f:34:4f:ab:fe:7c:3d:1c:fb:c7:09:c0:ce:6b:a7:35:ec:
dc:47:d2:df:13:e3:55:8e:ba:b8:b5:2b:62:26:2f:eb:2c:cb:
e5:04:ca:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyJ+4LXxz6umBUv6R1sylJcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjYwMjIzMTAxMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTY1MWJmNWQwZTdiNTE1YWQyYTEwMDczNTdmYzkzODZmNDhmZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfknmjmGAGVFDQv0aW5eoHixr4aH
622bsxbizAC205CRr0AoHuZeP9ht0OSMpHL4I2+j7xEYte9HIGD90sfxuzkOMWZK
rXTXie89Yjy+PvfXslTQzBYNr2r+XssnPlmO6aeiI86zJEciZ66M0P+ZMJh4wx1/
952tEUogHy2CHZ8ZorVz9NoYyPc3j/8t7ZBWcBzJOB4pd30+kC+NoqZcxQpNnvw0
AI0YAVwK3qmCX6IC+UUMnVXqdsNqWn+ub0vthWY7+6yHwvkpfA4WmjMJIGr7a7Tt
Ql0QG4KQAL3GzdJRMMHr8DerMDN/6zn9ZfNaV9LBmovGC8L/L3aW0Yrz5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFVlG/XQ57UVrSoQBzV/yThvSP2oMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvVldVYjlkRG50Uld0S2hBSE5YX0pPRzlJX2FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBtSmcMA0G
CSqGSIb3DQEBCwUAA4IBAQDDBBgYUjmqJ/ySB/DaKxBQmyPTpHYQWozv6yYQzdxy
Bg8SwmyL9M2g8dZcy25iokh2j5mcJjNrEzeohSX8MwU3JBfNqWU0Y853Niif6vj/
+xp0Ovj6PfGbx2cAEwQkkVioWRIWoYp9yhDzaemdNdmwNutkUqQhI8k0oB1OxfL3
lYrBhLbf6askCn/oYdI6IO27fq0KlCnnIF8cgkiwXBdQCCxCbXKmEDWEElWquCkM
gos51qCS3Q0MeAg099nPM3a0p8TPSOPlatmfXRbMfc1iXbI8kxOpy86wTzRPq/58
PRz7xwnAzmunNezcR9LfE+NVjrq4tStiJi/rLMvlBMqA
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:50:15 2026 by rpki-client