Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/VSTiw2oboQnkmXjBgIGhkxGhepE.roa
File: VSTiw2oboQnkmXjBgIGhkxGhepE.roa (raw, json)
Hash identifier: 4F/73GATV4uqNlUOzonR9d297kijNCKmpTNCvz9MLPA=
Subject key identifier: 55:24:E2:C3:6A:1B:A1:09:E4:99:78:C1:80:81:A1:93:11:A1:7A:91
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A10B72749D92792907EB186E49EE966F9E
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/VSTiw2oboQnkmXjBgIGhkxGhepE.roa
Signing time: Mon 05 Oct 2026 09:43:32 +0000
ROA not before: Mon 05 Oct 2026 09:43:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51713
IP address blocks: 65.98.29.0/24 maxlen: 24
65.98.121.0/24 maxlen: 24
65.98.127.0/24 maxlen: 24
69.72.248.0/24 maxlen: 24
77.95.113.0/24 maxlen: 24
93.113.110.0/23 maxlen: 23
93.114.86.0/23 maxlen: 23
93.114.184.0/23 maxlen: 23
93.114.234.0/23 maxlen: 23
176.56.56.0/21 maxlen: 21
185.17.180.0/22 maxlen: 22
185.65.40.0/22 maxlen: 22
185.164.196.0/22 maxlen: 22
188.212.34.0/23 maxlen: 23
192.250.224.0/24 maxlen: 24
192.250.234.0/24 maxlen: 24
192.250.239.0/24 maxlen: 24
195.250.23.0/24 maxlen: 24
198.38.80.0/24 maxlen: 24
198.38.82.0/24 maxlen: 24
198.38.92.0/24 maxlen: 24
209.42.16.0/24 maxlen: 24
209.42.17.0/24 maxlen: 24
209.42.18.0/24 maxlen: 24
209.42.19.0/24 maxlen: 24
209.42.20.0/24 maxlen: 24
209.42.21.0/24 maxlen: 24
209.42.22.0/24 maxlen: 24
209.42.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:72:74:9d:92:79:29:07:eb:18:6e:49:ee:96:6f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Oct 5 09:43:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5524e2c36a1ba109e49978c18081a19311a17a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:b4:54:8f:3d:64:5a:4f:95:2f:4e:b4:bf:
32:1b:99:4d:f8:37:90:ee:cc:20:5a:10:68:82:1d:
f2:5e:36:5f:0c:e0:96:d4:5c:5d:4f:d9:a6:fc:7d:
a5:63:a6:15:29:92:97:1d:31:0e:c3:fe:82:e2:79:
71:03:7e:46:95:f9:cd:dc:82:8b:93:f4:bf:ba:ad:
26:1e:1b:e8:4e:2f:df:71:20:90:c3:93:fb:18:40:
a3:15:0a:ce:16:12:80:b6:41:5d:70:34:3a:c5:be:
7d:0a:93:c9:43:73:79:d1:0d:2b:06:91:99:ce:09:
7d:21:bb:ad:fc:f6:9a:d0:8e:04:08:4b:58:56:91:
b1:e4:23:da:b3:e9:72:da:e7:1c:66:55:fe:d3:b5:
7e:bb:0c:04:a8:26:27:6a:f7:be:8e:49:eb:d3:42:
cb:a4:fa:2b:83:c4:f4:e1:85:0a:f1:d7:f1:bd:80:
76:04:82:ea:7f:5a:f9:c0:18:24:06:0d:fb:60:9a:
7a:c0:44:87:5d:1b:90:24:16:39:56:1b:6e:d6:26:
45:2c:37:9f:ae:d5:86:ea:26:66:9c:a1:c7:42:a7:
e3:b9:82:ea:ae:ab:c3:54:fa:33:fa:40:27:49:68:
0c:e6:cd:b6:88:c4:26:dc:1d:31:01:2e:c7:86:47:
c2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:24:E2:C3:6A:1B:A1:09:E4:99:78:C1:80:81:A1:93:11:A1:7A:91
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/VSTiw2oboQnkmXjBgIGhkxGhepE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.29.0/24
65.98.121.0/24
65.98.127.0/24
69.72.248.0/24
77.95.113.0/24
93.113.110.0/23
93.114.86.0/23
93.114.184.0/23
93.114.234.0/23
176.56.56.0/21
185.17.180.0/22
185.65.40.0/22
185.164.196.0/22
188.212.34.0/23
192.250.224.0/24
192.250.234.0/24
192.250.239.0/24
195.250.23.0/24
198.38.80.0/24
198.38.82.0/24
198.38.92.0/24
209.42.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:b0:3f:27:07:6c:56:49:d0:f0:aa:32:aa:38:11:b2:d6:e6:
d9:1d:41:95:6b:4e:76:98:09:f9:51:98:e5:8d:0f:c0:32:fb:
08:d7:26:44:ab:45:d8:d6:ff:4c:db:bf:a6:a6:3a:38:b5:67:
cc:8c:d3:a5:df:19:55:8b:08:12:52:d8:a4:f8:96:c0:ac:5a:
b5:66:3a:18:c8:2e:7e:b8:bd:0d:11:d3:1e:d4:d5:f9:33:8e:
1e:57:04:75:97:16:7a:92:b0:62:34:1b:dd:5d:66:ab:da:84:
2b:14:da:4f:49:ef:cd:cf:a4:3f:50:10:d0:df:6d:29:4c:4f:
6f:25:48:a8:ce:b8:68:73:34:ce:89:ed:a6:f8:30:bb:d7:c6:
ea:5d:5e:7e:1f:5b:04:f2:bc:9f:a7:29:28:25:9b:dd:aa:43:
35:ab:a2:b2:5b:8a:f5:59:14:60:48:f7:45:0c:ab:43:49:31:
88:d7:d6:b6:7c:e8:46:20:30:af:30:4b:b0:01:3b:6f:d5:65:
85:00:ef:b0:74:bd:17:c1:dc:72:5c:67:0c:86:d1:09:62:6f:
60:d6:4d:3c:6e:b5:c4:ab:82:04:f5:f7:c6:09:ee:b7:c6:bc:
29:fa:be:5b:23:2f:83:86:12:44:d8:3f:39:37:4c:fd:55:e0:
2a:d3:4f:6f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAaELcnSdknkpB+sYbknulm+eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjYxMDA1MDk0MzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI0ZTJjMzZhMWJhMTA5ZTQ5OTc4YzE4MDgxYTE5MzExYTE3YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQO0VI89ZFpPlS9OtL8yG5lN+DeQ
7swgWhBogh3yXjZfDOCW1FxdT9mm/H2lY6YVKZKXHTEOw/6C4nlxA35GlfnN3IKL
k/S/uq0mHhvoTi/fcSCQw5P7GECjFQrOFhKAtkFdcDQ6xb59CpPJQ3N50Q0rBpGZ
zgl9Ibut/Paa0I4ECEtYVpGx5CPas+ly2uccZlX+07V+uwwEqCYnave+jknr00LL
pPorg8T04YUK8dfxvYB2BILqf1r5wBgkBg37YJp6wESHXRuQJBY5Vhtu1iZFLDef
rtWG6iZmnKHHQqfjuYLqrqvDVPoz+kAnSWgM5s22iMQm3B0xAS7HhkfCgQIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFFUk4sNqG6EJ5Jl4wYCBoZMRoXqRMB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvVlNUaXcyb2JvUW5rbVhqQmdJR2hreEdoZXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBABB
Yh0DBABBYnkDBABBYn8DBABFSPgDBABNX3EDBAFdcW4DBAFdclYDBAFdcrgDBAFd
cuoDBAOwODgDBAK5EbQDBAK5QSgDBAK5pMQDBAG81CIDBADA+uADBADA+uoDBADA
+u8DBADD+hcDBADGJlADBADGJlIDBADGJlwDBAPRKhAwDQYJKoZIhvcNAQELBQAD
ggEBAAywPycHbFZJ0PCqMqo4EbLW5tkdQZVrTnaYCflRmOWND8Ay+wjXJkSrRdjW
/0zbv6amOji1Z8yM06XfGVWLCBJS2KT4lsCsWrVmOhjILn64vQ0R0x7U1fkzjh5X
BHWXFnqSsGI0G91dZqvahCsU2k9J783PpD9QENDfbSlMT28lSKjOuGhzNM6J7ab4
MLvXxupdXn4fWwTyvJ+nKSglm92qQzWrorJbivVZFGBI90UMq0NJMYjX1rZ86EYg
MK8wS7ABO2/VZYUA77B0vRfB3HJcZwyG0Qlib2DWTTxutcSrggT198YJ7rfGvCn6
vlsjL4OGEkTYPzk3TP1V4CrTT28=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:47:32 2026 by rpki-client