Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vlc7uWnJl2B4mYgtp6SjoRp7q18.roa
File: vlc7uWnJl2B4mYgtp6SjoRp7q18.roa (raw, json)
Hash identifier: G2ish1xFS9gi9nkOYafjyqtzvQYFVK0Mu43jpgy2ABM=
Subject key identifier: BE:57:3B:B9:69:C9:97:60:78:99:88:2D:A7:A4:A3:A1:1A:7B:AB:5F
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 019E5F9EB41B69ABD1C7165A658F6F06B7F6
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vlc7uWnJl2B4mYgtp6SjoRp7q18.roa
Signing time: Mon 25 May 2026 14:51:36 +0000
ROA not before: Mon 25 May 2026 14:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8262
IP address blocks: 82.119.64.0/19 maxlen: 19
82.119.68.0/24 maxlen: 24
82.119.69.0/24 maxlen: 24
82.119.80.0/21 maxlen: 21
82.119.83.0/24 maxlen: 24
82.119.84.0/24 maxlen: 24
82.119.92.0/24 maxlen: 24
82.119.94.0/24 maxlen: 24
85.14.0.0/18 maxlen: 18
85.14.0.0/23 maxlen: 23
85.14.12.0/24 maxlen: 24
85.14.13.0/24 maxlen: 24
85.14.21.0/24 maxlen: 24
85.14.24.0/24 maxlen: 24
85.14.36.0/24 maxlen: 24
85.14.44.0/24 maxlen: 24
85.14.47.0/24 maxlen: 24
85.14.49.0/24 maxlen: 24
89.252.192.0/18 maxlen: 24
89.252.192.0/22 maxlen: 22
89.252.199.0/24 maxlen: 24
89.252.200.0/21 maxlen: 24
89.252.208.0/20 maxlen: 20
89.252.223.0/24 maxlen: 24
89.252.224.0/19 maxlen: 24
89.252.229.0/24 maxlen: 24
89.252.241.0/24 maxlen: 24
89.252.246.0/24 maxlen: 24
176.67.233.0/24 maxlen: 24
176.67.234.0/24 maxlen: 24
185.92.132.0/22 maxlen: 22
194.12.224.0/19 maxlen: 19
194.12.231.0/24 maxlen: 24
194.12.234.0/24 maxlen: 24
194.12.244.0/24 maxlen: 24
194.12.249.0/24 maxlen: 24
194.12.253.0/24 maxlen: 32
194.12.254.0/24 maxlen: 24
2001:1ae0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:9e:b4:1b:69:ab:d1:c7:16:5a:65:8f:6f:06:b7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: May 25 14:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be573bb969c997607899882da7a4a3a11a7bab5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:5b:a3:db:72:4b:c7:64:e6:d2:c6:7a:54:
bd:66:15:ab:5d:e3:1e:06:15:bb:92:12:7c:94:2d:
17:46:55:52:cc:11:0c:11:93:37:fe:0b:8e:ef:d9:
0f:88:5d:03:61:b1:6f:95:b3:ae:33:bd:4e:6a:ee:
2c:17:81:90:66:98:d1:37:ae:58:5f:22:0f:0c:19:
6b:88:f0:f4:1c:12:f4:8c:76:8b:80:f7:52:5a:b6:
f6:83:34:ce:da:23:41:ce:b2:62:ce:3e:66:67:41:
92:a4:4b:fc:42:42:e7:21:2f:af:69:d2:c0:0b:77:
51:5d:04:8e:84:8d:b9:96:af:d2:0c:75:23:56:b1:
78:15:03:ec:07:bc:a2:c2:e8:6a:f9:39:04:55:43:
28:21:00:d3:1f:1a:b0:4e:9e:ee:df:36:91:47:2d:
c5:24:f2:69:c2:6e:77:fb:81:f5:68:86:8e:92:82:
f2:ab:11:c1:21:36:bb:e5:4c:32:3e:c4:48:93:88:
9d:6c:8a:98:cf:ec:94:74:5a:24:43:30:56:6f:48:
81:20:e7:ce:28:41:f3:30:56:19:c3:e0:cd:03:b1:
26:36:51:97:10:06:00:bf:a2:37:38:f0:75:24:d2:
67:b0:10:a2:8b:33:40:74:19:26:fa:8f:32:51:1b:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:57:3B:B9:69:C9:97:60:78:99:88:2D:A7:A4:A3:A1:1A:7B:AB:5F
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/vlc7uWnJl2B4mYgtp6SjoRp7q18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.64.0/19
85.14.0.0/18
89.252.192.0/18
176.67.233.0-176.67.234.255
185.92.132.0/22
194.12.224.0/19
IPv6:
2001:1ae0::/32
Signature Algorithm: sha256WithRSAEncryption
3e:7d:46:54:c7:8f:3e:d8:4a:f3:0a:76:2a:2f:2d:81:37:3c:
73:93:b9:b3:79:e0:ea:cc:d4:6e:6e:28:e9:3a:71:62:47:e3:
c7:fe:85:bf:55:91:9a:59:dd:27:1a:b8:a3:26:d5:85:2e:a0:
cc:0e:20:b0:ba:8a:30:6c:fe:88:e8:bc:81:4e:fa:fa:de:67:
0a:fb:31:61:00:a6:ab:dc:85:d2:5b:43:93:f5:d6:d6:a5:0d:
5c:e4:a8:56:69:8c:04:93:86:af:18:66:48:15:34:98:ab:9e:
09:96:16:cc:34:c8:1f:af:e0:3d:c0:9e:90:13:b4:a6:7b:6f:
40:73:5a:a1:d1:d9:ee:7b:74:9d:9d:22:0a:76:9c:a1:38:bd:
42:dd:90:ed:06:95:2b:fa:6e:68:9a:f6:7e:6b:71:c5:ad:9a:
db:53:af:eb:4d:b2:27:10:bf:8b:14:56:86:b5:67:27:13:e3:
0e:d0:09:ef:9f:da:36:11:5a:48:d8:b1:33:1e:f4:18:6c:ec:
5b:ea:61:9e:d3:a9:b8:2a:90:c4:fd:3d:6e:6d:d1:39:7b:6d:
b7:5b:56:31:7c:e5:fd:2e:ff:75:1e:bf:b3:64:f3:49:48:2a:
d9:a6:70:7d:35:20:b0:1d:b2:ef:c9:5d:fa:ef:72:e0:fc:f5:
a4:d5:5f:5f
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZ5fnrQbaavRxxZaZY9vBrf2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj
M2YwMGEwHhcNMjYwNTI1MTQ1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTU3M2JiOTY5Yzk5NzYwNzg5OTg4MmRhN2E0YTNhMTFhN2JhYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLNbo9tyS8dk5tLGelS9ZhWrXeMe
BhW7khJ8lC0XRlVSzBEMEZM3/guO79kPiF0DYbFvlbOuM71Oau4sF4GQZpjRN65Y
XyIPDBlriPD0HBL0jHaLgPdSWrb2gzTO2iNBzrJizj5mZ0GSpEv8QkLnIS+vadLA
C3dRXQSOhI25lq/SDHUjVrF4FQPsB7yiwuhq+TkEVUMoIQDTHxqwTp7u3zaRRy3F
JPJpwm53+4H1aIaOkoLyqxHBITa75UwyPsRIk4idbIqYz+yUdFokQzBWb0iBIOfO
KEHzMFYZw+DNA7EmNlGXEAYAv6I3OPB1JNJnsBCiizNAdBkm+o8yURtZmwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFL5XO7lpyZdgeJmILaeko6Eae6tfMB8GA1UdIwQY
MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt
YjI3ZDZlMjc4ZTE4LzEvdmxjN3VXbkpsMkI0bVlndHA2U2pvUnA3cTE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4
LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQFUndAAwQG
VQ4AAwQGWfzAMAwDBACwQ+kDBACwQ+oDBAK5XIQDBAXCDOAwDQQCAAIwBwMFACAB
GuAwDQYJKoZIhvcNAQELBQADggEBAD59RlTHjz7YSvMKdiovLYE3PHOTubN54OrM
1G5uKOk6cWJH48f+hb9VkZpZ3ScauKMm1YUuoMwOILC6ijBs/ojovIFO+vreZwr7
MWEApqvchdJbQ5P11talDVzkqFZpjASThq8YZkgVNJirngmWFsw0yB+v4D3AnpAT
tKZ7b0BzWqHR2e57dJ2dIgp2nKE4vULdkO0GlSv6bmia9n5rccWtmttTr+tNsicQ
v4sUVoa1ZycT4w7QCe+f2jYRWkjYsTMe9Bhs7FvqYZ7TqbgqkMT9PW5t0Tl7bbdb
VjF85f0u/3Uev7Nk80lIKtmmcH01ILAdsu/JXfrvcuD89aTVX18=
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:20:20 2026 by rpki-client