Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/vFD13EECI63i6INpfz5KMmXHVEk.roa
File: vFD13EECI63i6INpfz5KMmXHVEk.roa (raw, json)
Hash identifier: Xu061/sJ2Z4De52RiHTNj3+yQxv1II+U8nmD/HxX9DI=
Subject key identifier: BC:50:F5:DC:41:02:23:AD:E2:E8:83:69:7F:3E:4A:32:65:C7:54:49
Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Certificate serial: 019B7DCAFB89D7D292579F4F509FFC36DF5E
Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/vFD13EECI63i6INpfz5KMmXHVEk.roa
Signing time: Fri 02 Jan 2026 08:20:13 +0000
ROA not before: Fri 02 Jan 2026 08:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44319
IP address blocks: 185.255.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:ca:fb:89:d7:d2:92:57:9f:4f:50:9f:fc:36:df:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9
Validity
Not Before: Jan 2 08:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc50f5dc410223ade2e883697f3e4a3265c75449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:77:23:d4:f2:77:e3:c2:a9:99:e5:ec:c3:
3d:03:4c:f5:6c:08:0c:0d:cf:4e:e9:1e:83:9d:5c:
4f:8b:18:61:e6:8b:93:5c:bf:30:a9:da:4d:8a:36:
60:de:aa:cb:97:1f:11:e4:b2:61:de:20:ee:53:7c:
f5:38:ed:18:31:57:9d:16:69:3b:4c:d3:c0:9c:a7:
9d:55:60:dc:22:34:b4:5f:94:37:23:53:7a:68:cb:
e3:ab:4a:57:0f:b4:a0:6c:b7:ea:34:06:71:02:65:
10:b7:bc:72:71:73:2d:fc:c4:7a:05:4b:59:a7:8c:
76:d7:5e:e9:e2:4e:89:fb:cc:ed:18:b3:59:7d:34:
9d:c2:fe:17:48:07:26:d4:dc:a6:bf:1d:f5:ab:f1:
85:7f:e5:a8:9b:5c:a9:39:20:22:98:4f:6b:cb:d2:
d3:c7:42:31:62:4b:5d:0f:bc:82:80:44:ac:46:b5:
20:95:3e:24:60:b1:3b:55:7b:5a:c7:f7:dc:ef:ec:
74:38:26:05:be:c5:10:96:6c:35:85:17:48:66:20:
ab:b8:c8:b3:72:1f:8d:68:33:15:68:e9:02:40:ed:
86:5a:22:7e:db:22:98:ff:eb:77:df:36:91:f1:6b:
97:12:6b:69:b2:3c:69:4d:b3:5c:e2:e8:ed:a6:67:
6d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:F5:DC:41:02:23:AD:E2:E8:83:69:7F:3E:4A:32:65:C7:54:49
X509v3 Authority Key Identifier:
keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/vFD13EECI63i6INpfz5KMmXHVEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.172.0/22
Signature Algorithm: sha256WithRSAEncryption
30:b0:a9:fd:d2:d0:04:39:c4:4e:31:21:00:7d:c9:0a:75:5d:
13:e6:17:43:51:b1:ae:27:fe:9e:e6:a6:dd:16:23:85:a2:2e:
0a:98:d2:59:2d:3e:16:cb:88:e6:26:f2:aa:0f:cf:48:a6:98:
e8:ff:79:3b:32:09:ad:e1:d1:d8:ee:10:70:e9:bb:b7:60:6a:
32:d8:10:5a:52:d7:f7:e7:88:b0:36:bb:58:c7:23:d1:8d:46:
b9:1f:da:b0:a2:ca:7e:12:44:79:8d:25:55:f6:1d:ed:67:39:
6d:0e:99:a9:7b:c1:9b:cb:e3:03:59:78:4f:fa:b6:15:fd:ec:
64:90:d7:44:7a:eb:b3:33:31:98:46:05:d6:7a:ca:27:73:4f:
9b:2b:08:fb:ce:e3:ab:87:b4:d9:15:b1:f9:46:4c:14:13:9e:
ff:a4:ae:e7:77:c0:9d:c0:f3:86:61:4e:46:c2:1a:8d:e6:65:
50:f5:b1:81:92:89:ba:5e:29:40:8d:5b:23:3b:3f:24:82:1e:
e2:4b:d7:1f:86:b7:86:33:75:cf:6c:a5:a0:ca:d8:b8:f0:68:
3a:e9:a7:35:ce:06:b6:ff:b3:22:d4:11:63:9b:27:43:a1:55:
76:41:3e:0e:0a:a2:d0:d0:9b:33:26:38:a2:17:76:63:4c:f2:
e9:f2:45:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9yvuJ19KSV59PUJ/8Nt9eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGEyMDdmOGQwZmQyNjMzMGJjZDU5ZmE4NDczNTQ5ZGM5
MmRlZTkwHhcNMjYwMTAyMDgyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzUwZjVkYzQxMDIyM2FkZTJlODgzNjk3ZjNlNGEzMjY1Yzc1NDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTt3I9Tyd+PCqZnl7MM9A0z1bAgM
Dc9O6R6DnVxPixhh5ouTXL8wqdpNijZg3qrLlx8R5LJh3iDuU3z1OO0YMVedFmk7
TNPAnKedVWDcIjS0X5Q3I1N6aMvjq0pXD7SgbLfqNAZxAmUQt7xycXMt/MR6BUtZ
p4x2117p4k6J+8ztGLNZfTSdwv4XSAcm1Nymvx31q/GFf+Wom1ypOSAimE9ry9LT
x0IxYktdD7yCgESsRrUglT4kYLE7VXtax/fc7+x0OCYFvsUQlmw1hRdIZiCruMiz
ch+NaDMVaOkCQO2GWiJ+2yKY/+t33zaR8WuXEmtpsjxpTbNc4ujtpmdtIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxQ9dxBAiOt4uiDaX8+SjJlx1RJMB8GA1UdIwQY
MBaAFIcKIH+ND9JjMLzVn6hHNUnckt7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQt
ZjAwYTE5Mzg4ODFmLzEvdkZEMTNFRUNJNjNpNklOcGZ6NUtNbVhIVkVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQtZjAwYTE5Mzg4ODFm
LzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf+sMA0G
CSqGSIb3DQEBCwUAA4IBAQAwsKn90tAEOcROMSEAfckKdV0T5hdDUbGuJ/6e5qbd
FiOFoi4KmNJZLT4Wy4jmJvKqD89Ippjo/3k7Mgmt4dHY7hBw6bu3YGoy2BBaUtf3
54iwNrtYxyPRjUa5H9qwosp+EkR5jSVV9h3tZzltDpmpe8Gby+MDWXhP+rYV/exk
kNdEeuuzMzGYRgXWesonc0+bKwj7zuOrh7TZFbH5RkwUE57/pK7nd8CdwPOGYU5G
whqN5mVQ9bGBkom6XilAjVsjOz8kgh7iS9cfhreGM3XPbKWgyti48Gg66ac1zga2
/7Mi1BFjmydDoVV2QT4OCqLQ0JszJjiiF3ZjTPLp8kUb
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:20:18 2026 by rpki-client