Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/vnF9EvcfI-7kYq34-IY7bnUdmlo.roa
File: vnF9EvcfI-7kYq34-IY7bnUdmlo.roa (raw, json)
Hash identifier: W8m5Gh0nOl5EVAy+/ig/+nvn/Z9/xuqglmDOFhR3bg8=
Subject key identifier: BE:71:7D:12:F7:1F:23:EE:E4:62:AD:F8:F8:86:3B:6E:75:1D:9A:5A
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 01A0C21983FB4470E0E478710AB1D7279A33
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/vnF9EvcfI-7kYq34-IY7bnUdmlo.roa
Signing time: Mon 21 Sep 2026 03:54:07 +0000
ROA not before: Mon 21 Sep 2026 03:54:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48159
IP address blocks: 178.251.208.0/24 maxlen: 24
178.251.212.0/24 maxlen: 24
178.251.213.0/24 maxlen: 24
178.251.214.0/24 maxlen: 24
178.251.215.0/24 maxlen: 24
185.11.88.0/22 maxlen: 22
185.11.88.0/24 maxlen: 24
185.11.88.136/29 maxlen: 29
185.11.89.0/24 maxlen: 24
185.11.90.0/24 maxlen: 24
185.11.91.0/24 maxlen: 24
2a03:57c0::/32 maxlen: 32
2a03:57c0:7c00::1208:3/128 maxlen: 128
2a03:57c0:7c00::1208:25/128 maxlen: 128
2a03:57c0:7c00::1208:27/128 maxlen: 128
2a03:57c0:7c00::1208:45/128 maxlen: 128
2a03:57c0:7c00::1208:55/128 maxlen: 128
2a03:57c0:7c00::1208:65/128 maxlen: 128
2a03:57c0:7c00::1208:75/128 maxlen: 128
2a03:57c0:7c00::1208:95/128 maxlen: 128
2a03:57c0:7c00::1208:137/128 maxlen: 128
2a03:57c0:7c00::1208:143/128 maxlen: 128
2a03:57c0:7c00::1208:165/128 maxlen: 128
2a03:57c0:7c00::1208:175/128 maxlen: 128
2a03:57c0:7c00::1208:177/128 maxlen: 128
2a03:57c0:7c00::1208:185/128 maxlen: 128
2a03:57c0:7c00::1208:201/128 maxlen: 128
2a03:57c0:7c00::1208:215/128 maxlen: 128
2a03:57c0:7c00::1208:220/128 maxlen: 128
2a03:57c0:7c00::1208:235/128 maxlen: 128
2a03:57c0:7c00::1209:25/128 maxlen: 128
2a03:57c0:7c00::1209:27/128 maxlen: 128
2a03:57c0:7c00::1209:55/128 maxlen: 128
2a03:57c0:7c00::1209:75/128 maxlen: 128
2a03:57c0:7c00::1209:85/128 maxlen: 128
2a03:57c0:7c00::1209:95/128 maxlen: 128
2a03:57c0:7c00::1209:135/128 maxlen: 128
2a03:57c0:7c00::1209:155/128 maxlen: 128
2a03:57c0:7c00::1209:165/128 maxlen: 128
2a03:57c0:7c00::1209:177/128 maxlen: 128
2a03:57c0:7c00::1209:211/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:19:83:fb:44:70:e0:e4:78:71:0a:b1:d7:27:9a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Sep 21 03:54:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be717d12f71f23eee462adf8f8863b6e751d9a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ce:72:4d:1f:58:ea:ae:c1:64:bc:97:04:ac:
54:28:c1:fe:11:67:0e:ce:d7:96:33:cc:6a:7f:fc:
fe:36:eb:95:76:d6:7e:95:5f:fb:ef:92:c4:69:3e:
0c:54:58:b3:a5:fb:35:d1:1a:10:1e:9c:72:80:c8:
65:a7:42:a4:79:5a:87:1e:ab:4d:91:ce:93:cb:80:
00:4e:52:0f:03:b2:49:c1:31:63:c0:3d:7f:fa:4f:
68:0d:6c:f9:f6:d8:82:7b:68:ea:37:2b:07:35:7f:
28:f5:63:11:11:e4:ab:30:91:8b:ce:31:52:a1:9f:
d7:a0:da:d1:88:c7:c5:bf:f1:6e:15:47:48:43:47:
ba:de:bf:28:16:3a:d0:1f:19:64:af:fa:9b:3f:1f:
ef:e1:9d:77:02:7d:f0:3d:36:b7:28:e5:ed:1e:9c:
0e:6a:9f:25:2c:19:86:f2:28:d0:fe:09:e1:17:6b:
c6:11:a6:fd:f1:27:19:1d:d7:b6:c7:58:ff:4a:23:
11:d1:c4:30:a2:96:b5:3b:31:3b:de:e8:40:2d:99:
05:a3:e3:a9:89:9f:2a:56:7d:84:e0:e0:54:ee:19:
7a:91:ae:ac:3c:df:9b:65:50:ca:96:89:bd:8a:db:
8e:78:3b:30:4c:35:b6:1f:e7:44:72:ed:3b:12:bc:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:71:7D:12:F7:1F:23:EE:E4:62:AD:F8:F8:86:3B:6E:75:1D:9A:5A
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/vnF9EvcfI-7kYq34-IY7bnUdmlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.251.208.0/24
178.251.212.0/22
185.11.88.0/22
IPv6:
2a03:57c0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:37:43:0b:c2:08:e9:13:2a:0d:c8:83:de:c0:45:b5:7d:d5:
59:19:51:ba:38:ff:5e:71:43:68:5a:35:8a:9b:d2:1d:c7:b9:
4f:8f:70:cf:59:07:eb:ae:dc:c7:1c:2d:ca:d1:c1:8e:fc:95:
57:b2:3a:88:2e:e7:ee:c3:91:b1:26:cf:d2:9b:3e:2e:94:11:
e1:56:92:cc:91:8a:3b:59:ba:db:a4:36:4a:49:42:3d:55:04:
35:91:4c:ba:2b:7c:b2:0e:1c:84:4d:7d:7b:57:49:9b:07:0d:
9d:f6:d9:b6:ad:4b:df:5f:5a:06:2e:d4:63:cc:43:2c:de:80:
25:05:d6:a0:8c:93:91:60:02:ef:9f:07:e6:39:c4:d8:58:76:
58:43:11:75:81:a3:03:68:5c:4c:12:f1:9e:04:d1:b2:f0:2a:
96:a1:81:9b:6e:07:84:1e:6d:38:de:9e:54:71:6e:cb:0c:29:
38:23:9b:cf:ac:fe:8d:b9:30:1e:e2:97:0b:33:f5:26:fb:bb:
41:61:f2:e5:4f:ea:0c:f7:99:48:fc:81:7d:ec:72:d3:70:78:
95:a3:e9:1e:27:8d:bb:e2:f0:ea:45:2e:4b:30:0a:11:66:be:
6d:7e:37:8a:1b:34:de:d5:5b:0b:dd:af:d2:f5:46:dc:f8:29:
80:7a:7b:9c
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaDCGYP7RHDg5HhxCrHXJ5ozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMGMyN2Y4NTU4MWUyZTdiZGUwYzk4ZmJkNTRiZTFkNDk2
NzA1MTcwHhcNMjYwOTIxMDM1NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTcxN2QxMmY3MWYyM2VlZTQ2MmFkZjhmODg2M2I2ZTc1MWQ5YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM5yTR9Y6q7BZLyXBKxUKMH+EWcO
zteWM8xqf/z+NuuVdtZ+lV/775LEaT4MVFizpfs10RoQHpxygMhlp0KkeVqHHqtN
kc6Ty4AATlIPA7JJwTFjwD1/+k9oDWz59tiCe2jqNysHNX8o9WMREeSrMJGLzjFS
oZ/XoNrRiMfFv/FuFUdIQ0e63r8oFjrQHxlkr/qbPx/v4Z13An3wPTa3KOXtHpwO
ap8lLBmG8ijQ/gnhF2vGEab98ScZHde2x1j/SiMR0cQwopa1OzE73uhALZkFo+Op
iZ8qVn2E4OBU7hl6ka6sPN+bZVDKlom9ituOeDswTDW2H+dEcu07Erx3GwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFL5xfRL3HyPu5GKt+PiGO251HZpaMB8GA1UdIwQY
MBaAFF0MJ/hVgeLnveDJj71Uvh1JZwUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMt
MzQxZjUxNzNmY2Y3LzEvdm5GOUV2Y2ZJLTdrWXEzNC1JWTdiblVkbWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mNzg3YTktNTc2My00YzM2LThjNzMtMzQxZjUxNzNmY2Y3
LzEvWFF3bi1GV0I0dWU5NE1tUHZWUy1IVWxuQlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAsvvQAwQC
svvUAwQCuQtYMA0EAgACMAcDBQAqA1fAMA0GCSqGSIb3DQEBCwUAA4IBAQAPN0ML
wgjpEyoNyIPewEW1fdVZGVG6OP9ecUNoWjWKm9Idx7lPj3DPWQfrrtzHHC3K0cGO
/JVXsjqILufuw5GxJs/Smz4ulBHhVpLMkYo7WbrbpDZKSUI9VQQ1kUy6K3yyDhyE
TX17V0mbBw2d9tm2rUvfX1oGLtRjzEMs3oAlBdagjJORYALvnwfmOcTYWHZYQxF1
gaMDaFxMEvGeBNGy8CqWoYGbbgeEHm043p5UcW7LDCk4I5vPrP6NuTAe4pcLM/Um
+7tBYfLlT+oM95lI/IF97HLTcHiVo+keJ4274vDqRS5LMAoRZr5tfjeKGzTe1VsL
3a/S9Ubc+CmAenuc
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:05 2026 by rpki-client