Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/VU_E5_vbKeph2ERkjiSVilUQng0.roa
File: VU_E5_vbKeph2ERkjiSVilUQng0.roa (raw, json)
Hash identifier: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=
Subject key identifier: 55:4F:C4:E7:FB:DB:29:EA:61:D8:44:64:8E:24:95:8A:55:10:9E:0D
Certificate issuer: /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial: 019B7BA4CBB1CFF4A8AD37E090F6FCEF9179
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/VU_E5_vbKeph2ERkjiSVilUQng0.roa
Signing time: Thu 01 Jan 2026 22:19:16 +0000
ROA not before: Thu 01 Jan 2026 22:19:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52088
IP address blocks: 46.30.30.0/23 maxlen: 23
2a02:22f0:13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a4:cb:b1:cf:f4:a8:ad:37:e0:90:f6:fc:ef:91:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Validity
Not Before: Jan 1 22:19:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=554fc4e7fbdb29ea61d844648e24958a55109e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:c5:95:00:87:59:cc:e1:57:b0:cb:a5:05:
66:81:e7:03:ad:2d:ee:10:39:d7:e0:f5:0d:86:50:
98:da:25:8a:0f:3a:ae:50:81:d2:17:a8:dd:d3:cd:
2d:d4:96:35:31:49:67:1c:15:be:0f:8a:2f:af:64:
4e:46:01:85:d0:1a:fe:ac:64:85:16:c2:0d:1b:6e:
10:4d:81:cb:38:98:8e:f7:30:06:8b:cc:52:53:50:
9f:4d:2c:94:0b:53:03:2e:3e:83:90:3c:a8:3e:76:
48:5e:38:4d:fc:a2:6d:21:65:df:0e:cc:ee:36:f0:
cb:d5:6d:cf:a4:25:ce:ef:0d:3c:30:ae:da:e2:3a:
a2:38:8f:81:cb:77:e9:bd:cd:30:1c:69:cf:8d:08:
ff:dd:4b:1b:d5:d2:75:09:58:4e:4c:78:42:8c:09:
46:cd:0e:c0:dd:c8:4d:d8:56:6d:c4:03:2e:55:76:
64:e2:bc:a3:19:ff:91:33:b7:3d:13:8e:86:30:1c:
4f:31:5b:3e:be:3f:a0:ed:3a:19:08:e6:c4:44:1c:
18:12:e6:f3:5e:89:60:52:67:0c:00:29:6e:8f:e6:
81:20:82:80:c3:ca:7e:8a:82:c2:1b:de:f6:5e:67:
a2:de:20:7b:e8:a9:3d:8b:de:ef:6e:cb:a8:23:a8:
87:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4F:C4:E7:FB:DB:29:EA:61:D8:44:64:8E:24:95:8A:55:10:9E:0D
X509v3 Authority Key Identifier:
keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/VU_E5_vbKeph2ERkjiSVilUQng0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.30.0/23
IPv6:
2a02:22f0:13::/48
Signature Algorithm: sha256WithRSAEncryption
00:d0:e8:f3:17:16:66:21:95:e8:5e:0d:a2:26:69:bd:13:4b:
66:93:b5:7a:79:07:01:56:07:13:fa:5b:e6:74:57:db:84:84:
07:13:0c:6c:b5:5f:be:88:44:22:c8:37:2e:e6:fb:22:86:27:
bf:66:d8:82:f3:70:b7:21:2f:84:8a:7c:8c:10:09:9a:91:27:
ec:cb:11:56:98:bb:56:0e:1f:ae:1c:de:c3:43:c1:ce:8b:c2:
0f:87:b3:69:e1:6e:20:10:ac:e8:eb:53:2a:8d:fd:28:41:59:
8b:07:3f:dc:a9:a5:54:42:19:b2:e6:f2:60:dc:a2:6f:65:54:
5e:d7:f3:19:01:e8:2b:d2:58:ab:ff:e3:a2:bf:75:34:5d:5e:
d1:5c:e9:31:fb:92:94:c6:82:6e:95:a4:a2:36:9a:a1:44:d9:
81:df:00:aa:ac:94:b4:ae:25:24:55:8a:dd:02:f8:46:09:35:
66:b2:06:98:2f:21:16:6d:56:46:80:12:1a:88:d7:bf:4e:92:
02:6a:6c:ec:e9:88:16:96:82:1c:f1:64:0b:28:68:03:70:ff:
b9:45:cc:fa:69:ae:c8:ac:0f:5d:a7:5e:72:f7:51:f7:04:40:
64:9b:d7:0f:ce:f8:84:ed:e4:5b:33:f5:94:fc:ef:8d:f1:87:
a3:63:8e:4c
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZt7pMuxz/SorTfgkPb875F5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NjZjNmQ5YWQyMWNkNDExOGEwNDQ4MjY0ZDZmYjM1ZDU1
ZjE0YzAwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRmYzRlN2ZiZGIyOWVhNjFkODQ0NjQ4ZTI0OTU4YTU1MTA5ZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/vFlQCHWczhV7DLpQVmgecDrS3u
EDnX4PUNhlCY2iWKDzquUIHSF6jd080t1JY1MUlnHBW+D4ovr2RORgGF0Br+rGSF
FsING24QTYHLOJiO9zAGi8xSU1CfTSyUC1MDLj6DkDyoPnZIXjhN/KJtIWXfDszu
NvDL1W3PpCXO7w08MK7a4jqiOI+By3fpvc0wHGnPjQj/3Usb1dJ1CVhOTHhCjAlG
zQ7A3chN2FZtxAMuVXZk4ryjGf+RM7c9E46GMBxPMVs+vj+g7ToZCObERBwYEubz
XolgUmcMACluj+aBIIKAw8p+ioLCG972Xmei3iB76Kk9i97vbsuoI6iHuwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFVPxOf72ynqYdhEZI4klYpVEJ4NMB8GA1UdIwQY
MBaAFEdmxtmtIc1BGKBEgmTW+zXVXxTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMt
ZjVlYzQwM2ZkYWNmLzEvVlVfRTVfdmJLZXBoMkVSa2ppU1ZpbFVRbmcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MWRjNzUtMWYzMi00ZWRkLWE5NGMtZjVlYzQwM2ZkYWNm
LzEvUjJiRzJhMGh6VUVZb0VTQ1pOYjdOZFZmRk1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLh4eMA8E
AgACMAkDBwAqAiLwABMwDQYJKoZIhvcNAQELBQADggEBAADQ6PMXFmYhleheDaIm
ab0TS2aTtXp5BwFWBxP6W+Z0V9uEhAcTDGy1X76IRCLINy7m+yKGJ79m2ILzcLch
L4SKfIwQCZqRJ+zLEVaYu1YOH64c3sNDwc6Lwg+Hs2nhbiAQrOjrUyqN/ShBWYsH
P9yppVRCGbLm8mDcom9lVF7X8xkB6CvSWKv/46K/dTRdXtFc6TH7kpTGgm6VpKI2
mqFE2YHfAKqslLSuJSRVit0C+EYJNWayBpgvIRZtVkaAEhqI179OkgJqbOzpiBaW
ghzxZAsoaANw/7lFzPpprsisD12nXnL3UfcEQGSb1w/O+ITt5Fsz9ZT8743xh6Nj
jkw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:36 2026 by rpki-client