Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/vOyidTyiIS9RXt084gFh3QAi7BY.roa
File: vOyidTyiIS9RXt084gFh3QAi7BY.roa (raw, json)
Hash identifier: TBJz0+Ix8YJsKWxa0n0dLVQdi5WM4OAHaQ/OM30EBD4=
Subject key identifier: BC:EC:A2:75:3C:A2:21:2F:51:5E:DD:3C:E2:01:61:DD:00:22:EC:16
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 019FA95F7937D8627BD6E054662D8CDD4250
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/vOyidTyiIS9RXt084gFh3QAi7BY.roa
Signing time: Tue 28 Jul 2026 15:37:14 +0000
ROA not before: Tue 28 Jul 2026 15:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 109.238.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:5f:79:37:d8:62:7b:d6:e0:54:66:2d:8c:dd:42:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jul 28 15:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bceca2753ca2212f515edd3ce20161dd0022ec16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:60:3f:47:c2:ba:66:44:3a:62:4d:d7:f0:ed:
0e:8c:48:75:58:38:2a:f7:26:cc:44:08:30:b7:6d:
8b:3f:ee:51:43:97:6a:5f:6a:a4:68:20:4a:9d:79:
ee:2c:d0:61:24:f8:79:2c:a6:31:6c:25:7b:29:63:
87:ad:54:f3:40:28:bc:d6:cf:82:93:f7:98:9d:4a:
9c:89:e1:3d:2f:ac:8e:1a:70:f7:fb:f2:f1:3b:86:
db:57:64:27:86:b9:f1:4f:c8:7f:6b:1f:cd:75:1e:
63:91:a7:71:af:ff:e2:f3:f8:cf:61:38:85:47:a1:
5e:8d:ad:b9:84:4a:de:b7:70:50:9e:44:4e:08:e9:
b9:74:57:21:f3:c4:a1:ec:55:7f:13:64:7a:28:62:
56:59:27:41:9d:a4:14:3e:00:f2:be:62:dc:0f:43:
89:ef:d8:21:19:d2:61:d3:ca:e3:2b:3a:e8:8a:10:
92:10:07:de:19:fc:ab:2d:ea:a3:37:b9:b2:7a:55:
8a:de:3d:ca:7c:6b:1b:7c:ff:31:5a:9d:b3:40:e8:
3d:59:43:6d:6d:c4:1f:ca:f2:a8:01:a6:f3:f9:76:
65:f7:9b:c6:17:ed:89:b8:2a:cf:44:b1:4d:bf:35:
ac:13:60:be:a0:25:03:ac:5e:b8:74:da:8d:39:35:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EC:A2:75:3C:A2:21:2F:51:5E:DD:3C:E2:01:61:DD:00:22:EC:16
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/vOyidTyiIS9RXt084gFh3QAi7BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.204.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b3:94:f0:3f:80:7a:23:45:a7:d1:38:da:b8:45:ce:62:5b:
1e:44:1f:dc:95:c6:e7:4e:af:2c:7e:3c:df:d6:d7:17:cb:cf:
e0:34:b6:28:41:39:ed:72:ea:ee:ed:60:05:c2:e1:0f:19:2e:
fb:86:00:29:41:ff:50:31:c3:e0:05:05:cd:c4:2f:1d:bb:29:
f7:f6:aa:1f:bf:d8:8f:aa:08:7c:86:ba:bd:0b:9b:14:31:84:
1a:75:b7:14:f6:21:22:f0:50:11:4c:0c:c3:d0:13:39:d1:b5:
e1:78:33:d8:d1:87:17:d3:84:4c:76:76:57:c4:d3:d8:c9:53:
ff:db:8e:9e:5a:09:4e:6b:54:03:03:70:d0:f4:78:56:1d:55:
06:1d:dd:2b:c1:5e:ef:f5:5e:22:cf:6b:5d:a0:56:ea:8d:5f:
2b:51:ed:b6:28:7a:f4:8f:0f:34:7b:52:6b:b4:e2:e3:f1:4b:
ae:7d:89:71:f0:5d:0c:fa:bb:a8:65:e0:74:42:87:7d:fa:74:
df:3c:da:d8:d3:44:d0:7b:a7:2c:7d:55:cb:49:62:2d:bc:a5:
ee:51:dd:d6:ed:03:41:a8:cf:6b:41:fc:a3:da:fe:9d:ce:ca:
c1:e8:8d:ce:a8:86:8e:e8:c0:87:db:5f:dd:a0:79:82:93:fe:
7b:62:0e:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+pX3k32GJ71uBUZi2M3UJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjM0NGE2M2RjYjcwZTg5MDU3ZGViOGUyNzYxZGM0NTE2
NTg4MWEwHhcNMjYwNzI4MTUzNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2VjYTI3NTNjYTIyMTJmNTE1ZWRkM2NlMjAxNjFkZDAwMjJlYzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGA/R8K6ZkQ6Yk3X8O0OjEh1WDgq
9ybMRAgwt22LP+5RQ5dqX2qkaCBKnXnuLNBhJPh5LKYxbCV7KWOHrVTzQCi81s+C
k/eYnUqcieE9L6yOGnD3+/LxO4bbV2QnhrnxT8h/ax/NdR5jkadxr//i8/jPYTiF
R6Feja25hEret3BQnkROCOm5dFch88Sh7FV/E2R6KGJWWSdBnaQUPgDyvmLcD0OJ
79ghGdJh08rjKzroihCSEAfeGfyrLeqjN7myelWK3j3KfGsbfP8xWp2zQOg9WUNt
bcQfyvKoAabz+XZl95vGF+2JuCrPRLFNvzWsE2C+oCUDrF64dNqNOTV9fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLzsonU8oiEvUV7dPOIBYd0AIuwWMB8GA1UdIwQY
MBaAFCLzRKY9y3DokFfeuOJ2HcRRZYgaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5Yzct
ZmViYjY0YjVlMTY0LzEvdk95aWRUeWlJUzlSWHQwODRnRmgzUUFpN0JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81MzYwZTctZjAyYS00NzM3LTk5YzctZmViYjY0YjVlMTY0
LzEvSXZORXBqM0xjT2lRVjk2NDRuWWR4RkZsaUJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbe7MMA0G
CSqGSIb3DQEBCwUAA4IBAQAXs5TwP4B6I0Wn0TjauEXOYlseRB/clcbnTq8sfjzf
1tcXy8/gNLYoQTntcuru7WAFwuEPGS77hgApQf9QMcPgBQXNxC8duyn39qofv9iP
qgh8hrq9C5sUMYQadbcU9iEi8FARTAzD0BM50bXheDPY0YcX04RMdnZXxNPYyVP/
246eWglOa1QDA3DQ9HhWHVUGHd0rwV7v9V4iz2tdoFbqjV8rUe22KHr0jw80e1Jr
tOLj8UuufYlx8F0M+ruoZeB0Qod9+nTfPNrY00TQe6csfVXLSWItvKXuUd3W7QNB
qM9rQfyj2v6dzsrB6I3OqIaO6MCH21/doHmCk/57Yg4l
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:46 2026 by rpki-client