Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/VSD1KAdlgGbgmB2_Rmw11CWucJM.roa
File: VSD1KAdlgGbgmB2_Rmw11CWucJM.roa (raw, json)
Hash identifier: IUX57Wc+4W1jlF03sar3zmckuSPcQbXFlSgjM7+Gk0k=
Subject key identifier: 55:20:F5:28:07:65:80:66:E0:98:1D:BF:46:6C:35:D4:25:AE:70:93
Certificate issuer: /CN=399eb53226a660b7c93816c616b66d8c76550603
Certificate serial: 019B76EADBE275EDAD5AC02A192733E42633
Authority key identifier: 39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/VSD1KAdlgGbgmB2_Rmw11CWucJM.roa
Signing time: Thu 01 Jan 2026 00:17:41 +0000
ROA not before: Thu 01 Jan 2026 00:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59783
IP address blocks: 217.144.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:ea:db:e2:75:ed:ad:5a:c0:2a:19:27:33:e4:26:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399eb53226a660b7c93816c616b66d8c76550603
Validity
Not Before: Jan 1 00:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5520f52807658066e0981dbf466c35d425ae7093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:57:ae:3c:57:62:6b:44:e3:a8:42:66:55:
8c:73:a1:1c:4f:f3:a1:d7:b4:98:af:95:a2:4b:4d:
e7:6a:c4:b2:af:4f:71:bc:c8:e7:f6:0c:54:5f:26:
f0:3d:bd:58:3a:af:26:7c:96:91:b9:9d:9e:2c:7e:
85:97:42:81:97:21:35:e1:99:ea:ff:0a:a8:ca:b8:
63:5f:88:66:6b:0e:45:cd:39:a6:91:31:3f:87:f0:
03:b3:1c:9f:f9:28:f8:8f:e3:e0:65:3b:7c:a7:a7:
1c:97:e5:cb:66:34:31:15:74:46:60:fa:86:36:46:
e9:aa:f8:6a:60:4c:89:54:5d:7d:8c:d2:cf:2b:e0:
9d:d9:f3:41:e3:3e:32:92:fb:8e:7d:d1:04:ad:f3:
5d:02:b2:3e:09:c3:62:aa:a8:ea:e4:86:19:88:14:
74:69:1b:e0:e2:74:07:36:52:c7:a0:b5:3b:23:5f:
ab:21:e9:ca:52:75:70:5f:24:be:ca:ba:86:74:ea:
9f:0e:76:e6:25:60:04:9f:52:7e:95:79:47:4d:2a:
46:49:f1:4d:19:11:3b:7a:f2:4c:99:a8:80:85:31:
07:fb:bf:cc:ff:97:3e:21:09:4f:93:a2:e0:2f:93:
41:b9:d2:4d:f2:05:f5:01:47:f3:32:8a:94:8c:c7:
ac:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:F5:28:07:65:80:66:E0:98:1D:BF:46:6C:35:D4:25:AE:70:93
X509v3 Authority Key Identifier:
keyid:39:9E:B5:32:26:A6:60:B7:C9:38:16:C6:16:B6:6D:8C:76:55:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ61MiamYLfJOBbGFrZtjHZVBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/VSD1KAdlgGbgmB2_Rmw11CWucJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1106b1-9bdf-4f92-9754-abe52d7aa77e/1/OZ61MiamYLfJOBbGFrZtjHZVBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:19:52:06:ae:0d:98:c6:bc:e9:21:c2:2f:e1:04:5b:f0:36:
7f:dd:1c:0f:a9:7d:0f:95:12:66:9f:d9:b8:97:70:ad:81:54:
87:cf:45:4d:93:9b:08:ff:e2:17:8d:b2:3a:97:4d:a0:4b:d0:
c9:23:2d:ab:61:2d:95:d4:e3:06:10:ce:4d:6d:6d:04:42:97:
24:61:b0:73:05:3b:ed:a5:d7:c1:d3:5e:7f:13:f2:95:b7:71:
c1:42:36:12:ec:b4:ea:15:07:6b:e7:9b:ae:59:cc:2b:77:bf:
22:6b:03:90:8a:38:60:ac:8e:0f:52:f9:5d:0e:50:01:c4:af:
23:78:76:ff:b3:94:68:5d:1d:5f:3a:92:d0:11:9a:53:87:ad:
19:aa:15:e7:f3:73:05:35:fa:88:64:26:6d:c7:8f:96:4e:56:
f4:fb:eb:b3:13:c5:11:91:57:8c:f8:77:6b:52:cb:75:e2:83:
f2:a5:0b:5a:7e:23:1f:6a:2b:f5:a3:df:c5:67:d4:2a:2d:b6:
de:b4:ed:61:c7:b6:23:e2:4f:76:78:82:7f:4f:22:09:51:e4:
cd:e1:be:83:71:1d:37:db:bb:8d:c4:f4:02:c7:e7:1d:d3:c6:
ee:36:27:f5:47:59:f5:3e:ef:7d:e9:94:2c:89:0c:e8:55:01:
bd:7f:94:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt26tvide2tWsAqGScz5CYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5OWViNTMyMjZhNjYwYjdjOTM4MTZjNjE2YjY2ZDhjNzY1
NTA2MDMwHhcNMjYwMTAxMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTIwZjUyODA3NjU4MDY2ZTA5ODFkYmY0NjZjMzVkNDI1YWU3MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmahXrjxXYmtE46hCZlWMc6EcT/Oh
17SYr5WiS03nasSyr09xvMjn9gxUXybwPb1YOq8mfJaRuZ2eLH6Fl0KBlyE14Znq
/wqoyrhjX4hmaw5FzTmmkTE/h/ADsxyf+Sj4j+PgZTt8p6ccl+XLZjQxFXRGYPqG
NkbpqvhqYEyJVF19jNLPK+Cd2fNB4z4ykvuOfdEErfNdArI+CcNiqqjq5IYZiBR0
aRvg4nQHNlLHoLU7I1+rIenKUnVwXyS+yrqGdOqfDnbmJWAEn1J+lXlHTSpGSfFN
GRE7evJMmaiAhTEH+7/M/5c+IQlPk6LgL5NBudJN8gX1AUfzMoqUjMesYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFUg9SgHZYBm4Jgdv0ZsNdQlrnCTMB8GA1UdIwQY
MBaAFDmetTImpmC3yTgWxha2bYx2VQYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xMTA2YjEtOWJkZi00ZjkyLTk3NTQt
YWJlNTJkN2FhNzdlLzEvVlNEMUtBZGxnR2JnbUIyX1JtdzExQ1d1Y0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xMTA2YjEtOWJkZi00ZjkyLTk3NTQtYWJlNTJkN2FhNzdl
LzEvT1o2MU1pYW1ZTGZKT0JiR0ZyWnRqSFpWQmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2ZA0MA0G
CSqGSIb3DQEBCwUAA4IBAQCrGVIGrg2YxrzpIcIv4QRb8DZ/3RwPqX0PlRJmn9m4
l3CtgVSHz0VNk5sI/+IXjbI6l02gS9DJIy2rYS2V1OMGEM5NbW0EQpckYbBzBTvt
pdfB015/E/KVt3HBQjYS7LTqFQdr55uuWcwrd78iawOQijhgrI4PUvldDlABxK8j
eHb/s5RoXR1fOpLQEZpTh60ZqhXn83MFNfqIZCZtx4+WTlb0++uzE8URkVeM+Hdr
Ust14oPypQtafiMfaiv1o9/FZ9QqLbbetO1hx7Yj4k92eIJ/TyIJUeTN4b6DcR03
27uNxPQCx+cd08buNif1R1n1Pu996ZQsiQzoVQG9f5TH
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:36 2026 by rpki-client