Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/VEwNY5P1vuA23oPruHvqJ6HFtjs.roa
File: VEwNY5P1vuA23oPruHvqJ6HFtjs.roa (raw, json)
Hash identifier: eZpyIVZzTVU8RDs8Mn5Dvw3csgwI8cTA6KbGalIl4hA=
Subject key identifier: 54:4C:0D:63:93:F5:BE:E0:36:DE:83:EB:B8:7B:EA:27:A1:C5:B6:3B
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 019D49B89151605FBE95E8E4411942EDCC64
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/VEwNY5P1vuA23oPruHvqJ6HFtjs.roa
Signing time: Wed 01 Apr 2026 15:45:25 +0000
ROA not before: Wed 01 Apr 2026 15:45:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19793
IP address blocks: 185.236.8.0/24 maxlen: 24
185.255.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:b8:91:51:60:5f:be:95:e8:e4:41:19:42:ed:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Apr 1 15:45:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=544c0d6393f5bee036de83ebb87bea27a1c5b63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:77:47:92:1d:94:53:26:ec:b7:7f:dc:ef:0e:
31:4f:ed:e5:bd:c4:85:1b:a2:f7:c1:b8:57:8f:4c:
27:37:b9:93:f8:70:f3:6c:b6:36:2a:de:53:7b:e2:
6f:ef:a3:98:01:1f:0a:ee:9b:c8:64:25:aa:79:d8:
ff:4f:39:91:9c:5f:07:0a:34:f5:e7:54:ea:e3:f3:
e0:d7:bb:52:d7:29:2f:30:58:b0:28:81:b1:56:83:
da:88:f2:cd:b2:f2:11:99:d2:1e:8e:93:77:06:77:
ec:21:16:ef:c8:83:54:a2:e8:c7:b2:7b:48:a1:fb:
45:a8:98:6d:e8:0e:33:b4:a9:f9:a9:17:56:44:38:
05:f6:2e:6f:c7:c4:88:df:7c:64:06:9a:6c:a7:89:
a6:77:db:f4:4f:c8:03:3a:76:2e:05:2e:11:0a:cb:
58:76:da:3d:22:7e:43:55:48:e9:6d:a2:3b:58:c2:
da:4d:c4:01:d7:2d:e1:71:d2:7f:c4:77:54:f2:e8:
1a:ee:e5:9a:a5:e6:9f:91:36:1e:78:e9:da:43:a8:
99:db:90:9b:67:bf:99:9e:9e:a7:06:ee:3d:66:7b:
49:79:0d:64:2f:af:77:4e:c9:52:e5:cd:a3:5c:a6:
78:15:0a:39:3a:ae:47:34:f4:5a:65:73:6e:0a:8b:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:0D:63:93:F5:BE:E0:36:DE:83:EB:B8:7B:EA:27:A1:C5:B6:3B
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/VEwNY5P1vuA23oPruHvqJ6HFtjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.8.0/24
185.255.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:02:2a:20:29:e7:cc:03:09:47:a6:9e:61:50:f3:c3:42:b5:
73:00:90:b5:f3:f4:ea:c5:99:16:e6:8d:e4:92:d5:89:ad:eb:
4b:9e:9c:56:58:84:4e:be:b6:66:4c:9a:fa:d5:79:e2:1a:21:
d4:9c:c0:83:b8:40:6e:b5:08:f4:05:98:5e:12:9a:2f:9d:3e:
f3:0f:8b:22:2d:5a:76:82:d4:d3:a7:bc:95:fc:82:9e:df:09:
83:6e:fc:1b:5f:50:57:30:ec:36:fe:b8:81:6e:81:ea:31:aa:
a7:97:09:a9:61:76:57:5e:d9:73:4c:63:f9:cb:98:27:50:6a:
5d:43:0f:3e:f9:9c:97:7e:81:af:09:ab:9e:ac:43:5c:48:5a:
b8:12:6a:0a:54:73:6e:96:02:b0:fb:c3:5b:f8:71:42:b6:43:
50:99:46:25:2c:bc:87:8c:9a:54:b5:be:66:31:19:4c:c5:31:
a9:fb:f4:91:b5:13:5a:7d:a1:d8:b8:21:90:ab:4f:6a:a4:42:
f7:28:48:41:11:8d:41:56:0f:70:9b:af:a6:b1:87:cb:ad:85:
0d:a0:08:7e:6b:4d:da:3f:01:aa:6d:b4:31:fc:a3:01:e4:ae:
c7:10:d1:a6:14:16:4c:c3:11:f0:3c:5c:f0:b4:4b:e2:c9:8a:
10:52:db:c4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ1JuJFRYF++lejkQRlC7cxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk
YTEzNzAwHhcNMjYwNDAxMTU0NTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDRjMGQ2MzkzZjViZWUwMzZkZTgzZWJiODdiZWEyN2ExYzViNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HdHkh2UUybst3/c7w4xT+3lvcSF
G6L3wbhXj0wnN7mT+HDzbLY2Kt5Te+Jv76OYAR8K7pvIZCWqedj/TzmRnF8HCjT1
51Tq4/Pg17tS1ykvMFiwKIGxVoPaiPLNsvIRmdIejpN3BnfsIRbvyINUoujHsntI
oftFqJht6A4ztKn5qRdWRDgF9i5vx8SI33xkBppsp4mmd9v0T8gDOnYuBS4RCstY
dto9In5DVUjpbaI7WMLaTcQB1y3hcdJ/xHdU8uga7uWapeafkTYeeOnaQ6iZ25Cb
Z7+Znp6nBu49ZntJeQ1kL693TslS5c2jXKZ4FQo5Oq5HNPRaZXNuCotaaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFRMDWOT9b7gNt6D67h76iehxbY7MB8GA1UdIwQY
MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt
NjA4MDk1MmYwZTA0LzEvVkV3Tlk1UDF2dUEyM29QcnVIdnFKNkhGdGpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0
LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuewIAwQA
uf9yMA0GCSqGSIb3DQEBCwUAA4IBAQBOAiogKefMAwlHpp5hUPPDQrVzAJC18/Tq
xZkW5o3kktWJretLnpxWWIROvrZmTJr61XniGiHUnMCDuEButQj0BZheEpovnT7z
D4siLVp2gtTTp7yV/IKe3wmDbvwbX1BXMOw2/riBboHqMaqnlwmpYXZXXtlzTGP5
y5gnUGpdQw8++ZyXfoGvCauerENcSFq4EmoKVHNulgKw+8Nb+HFCtkNQmUYlLLyH
jJpUtb5mMRlMxTGp+/SRtRNafaHYuCGQq09qpEL3KEhBEY1BVg9wm6+msYfLrYUN
oAh+a03aPwGqbbQx/KMB5K7HENGmFBZMwxHwPFzwtEviyYoQUtvE
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:21 2026 by rpki-client