Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VlYJfL62zXlK9zhHkeRcXKHwzJw.roa
File: VlYJfL62zXlK9zhHkeRcXKHwzJw.roa (raw, json)
Hash identifier: pyF74z/76/0FbrDm7tHeWDaoslBZYA7e5eho0bYw5/4=
Subject key identifier: 56:56:09:7C:BE:B6:CD:79:4A:F7:38:47:91:E4:5C:5C:A1:F0:CC:9C
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A06BB158C749AE2F2E259609B701150998
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VlYJfL62zXlK9zhHkeRcXKHwzJw.roa
Signing time: Fri 04 Sep 2026 09:12:59 +0000
ROA not before: Fri 04 Sep 2026 09:12:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 95.111.152.0/21 maxlen: 24
149.232.189.0/24 maxlen: 24
185.235.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:b1:58:c7:49:ae:2f:2e:25:96:09:b7:01:15:09:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 4 09:12:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5656097cbeb6cd794af7384791e45c5ca1f0cc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:08:1e:63:36:2f:7d:00:4e:f0:2a:2b:0d:
14:65:54:e3:5b:28:cd:1e:a2:46:9e:b3:e7:17:0f:
04:46:79:a8:85:37:ea:52:75:79:ba:c4:15:98:a5:
ee:cd:f2:0d:6d:a3:26:9f:95:51:cb:40:ba:96:ad:
fa:24:45:91:52:bb:ce:08:a8:88:2e:64:06:b0:d3:
db:5a:95:b2:9d:2b:7e:02:c0:5c:6d:55:90:81:e5:
fc:5c:10:bd:06:29:21:40:64:85:7b:d2:ff:62:81:
d3:1a:91:79:fb:90:f4:4f:53:91:b2:a7:db:6a:6a:
25:a2:5b:35:df:cb:69:30:82:62:61:f8:82:90:5b:
7e:51:8b:18:d0:9e:5b:45:3e:72:2c:52:c8:e3:47:
ac:0d:91:df:52:b8:4f:47:69:f9:e5:26:8c:5b:1e:
65:03:6e:60:b2:e0:c4:b4:5f:bd:e1:ee:ff:ac:61:
89:15:e9:ca:a7:48:75:65:fb:64:a6:a8:58:df:11:
48:b1:5b:cf:3e:89:1b:25:fd:4f:b1:13:b1:d3:73:
98:1a:96:ff:85:ae:73:5d:96:fd:de:9c:e5:e1:80:
86:1c:80:9c:1d:82:b5:ba:55:27:5c:f0:49:b9:97:
a6:31:22:e7:f4:93:77:0a:4b:d4:e1:33:7d:b1:42:
1e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:56:09:7C:BE:B6:CD:79:4A:F7:38:47:91:E4:5C:5C:A1:F0:CC:9C
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/VlYJfL62zXlK9zhHkeRcXKHwzJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.152.0/21
149.232.189.0/24
185.235.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:f8:d0:19:3c:ef:cb:51:85:07:d5:b0:11:97:01:9c:b1:f0:
64:15:8a:77:3b:00:07:fd:5b:b4:5c:90:43:6f:c1:e0:12:98:
ba:69:23:da:4a:51:08:02:cf:09:ec:16:22:da:28:bf:c9:74:
db:fe:51:31:01:09:1f:2e:fd:5c:21:85:71:11:8c:ea:d7:e2:
14:0f:4e:70:e4:e8:e4:a6:7a:13:bb:6c:1b:bb:a5:84:f4:19:
86:23:f4:62:31:a8:ec:ad:e3:68:25:1a:83:e2:82:68:fa:13:
b9:ca:e6:10:fd:7c:76:e8:92:e2:ea:30:8e:c7:f5:d0:3c:17:
05:52:e5:25:22:fd:87:d4:24:69:10:00:95:bb:ed:4b:98:e7:
e9:a1:84:db:d4:30:82:03:fc:00:45:80:4a:06:41:e8:1e:7f:
50:b5:65:48:28:d8:45:d9:98:34:61:44:44:e4:4d:68:b4:19:
92:2e:f8:c0:37:27:61:e2:d3:17:c9:ee:45:d5:70:7f:08:55:
aa:f1:72:64:a2:1d:3b:bf:4e:d5:ba:c5:85:5f:20:71:d5:6c:
70:94:48:bc:56:8b:98:95:56:fb:54:06:6d:57:a0:3d:8b:f8:
ce:59:3e:0f:ef:aa:b1:d9:62:77:b6:3d:80:db:92:12:74:c8:
d8:2e:fa:6b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBrsVjHSa4vLiWWCbcBFQmYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYwOTA0MDkxMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjU2MDk3Y2JlYjZjZDc5NGFmNzM4NDc5MWU0NWM1Y2ExZjBjYzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8kIHmM2L30ATvAqKw0UZVTjWyjN
HqJGnrPnFw8ERnmohTfqUnV5usQVmKXuzfINbaMmn5VRy0C6lq36JEWRUrvOCKiI
LmQGsNPbWpWynSt+AsBcbVWQgeX8XBC9BikhQGSFe9L/YoHTGpF5+5D0T1ORsqfb
amolols138tpMIJiYfiCkFt+UYsY0J5bRT5yLFLI40esDZHfUrhPR2n55SaMWx5l
A25gsuDEtF+94e7/rGGJFenKp0h1ZftkpqhY3xFIsVvPPokbJf1PsROx03OYGpb/
ha5zXZb93pzl4YCGHICcHYK1ulUnXPBJuZemMSLn9JN3CkvU4TN9sUIeCQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFZWCXy+ts15Svc4R5HkXFyh8MycMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvVmxZSmZMNjJ6WGxLOXpoSGtlUmNYS0h3ekp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDX2+YAwQA
lei9AwQAuetHMA0GCSqGSIb3DQEBCwUAA4IBAQB7+NAZPO/LUYUH1bARlwGcsfBk
FYp3OwAH/Vu0XJBDb8HgEpi6aSPaSlEIAs8J7BYi2ii/yXTb/lExAQkfLv1cIYVx
EYzq1+IUD05w5OjkpnoTu2wbu6WE9BmGI/RiMajsreNoJRqD4oJo+hO5yuYQ/Xx2
6JLi6jCOx/XQPBcFUuUlIv2H1CRpEACVu+1LmOfpoYTb1DCCA/wARYBKBkHoHn9Q
tWVIKNhF2Zg0YURE5E1otBmSLvjANydh4tMXye5F1XB/CFWq8XJkoh07v07VusWF
XyBx1WxwlEi8VouYlVb7VAZtV6A9i/jOWT4P76qx2WJ3tj2A25ISdMjYLvpr
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:26 2026 by rpki-client