Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa
File: VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa (raw, json)
Hash identifier: WP4UaUcxrdfBlAMFFsaXmggPZwSD/JcDZLDXI5e7by0=
Subject key identifier: 55:E2:49:9A:70:BE:F1:0F:F4:6B:5A:4B:CD:24:F8:8E:D3:35:1E:AF
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 019C41DCC3CF5396F019B1D701647D6A8231
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa
Signing time: Mon 09 Feb 2026 10:05:12 +0000
ROA not before: Mon 09 Feb 2026 10:05:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24685
IP address blocks: 31.172.136.0/23 maxlen: 32
31.172.136.0/24 maxlen: 32
31.172.137.0/24 maxlen: 32
31.172.140.0/24 maxlen: 32
31.172.141.0/24 maxlen: 32
80.92.231.0/24 maxlen: 32
80.92.233.0/24 maxlen: 32
80.92.234.0/24 maxlen: 32
80.92.235.0/24 maxlen: 32
82.117.229.0/24 maxlen: 32
82.117.244.0/24 maxlen: 32
85.90.211.0/24 maxlen: 32
91.226.1.0/24 maxlen: 32
92.60.178.0/23 maxlen: 32
92.60.178.0/24 maxlen: 32
92.60.179.0/24 maxlen: 32
128.0.170.0/24 maxlen: 32
128.0.172.0/24 maxlen: 32
128.0.174.0/24 maxlen: 32
185.38.209.0/24 maxlen: 32
185.39.196.0/24 maxlen: 32
185.45.244.0/22 maxlen: 32
185.45.245.0/24 maxlen: 32
185.45.246.0/24 maxlen: 32
185.170.195.0/24 maxlen: 32
193.111.0.0/24 maxlen: 32
193.111.48.0/23 maxlen: 32
212.110.134.0/23 maxlen: 32
212.110.152.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:dc:c3:cf:53:96:f0:19:b1:d7:01:64:7d:6a:82:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Feb 9 10:05:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e2499a70bef10ff46b5a4bcd24f88ed3351eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:33:69:a7:29:2e:4b:86:17:54:13:f1:0e:
b9:e4:96:36:57:59:23:60:8a:15:d8:09:b8:2c:f4:
2a:82:f8:04:49:03:29:c4:5c:47:28:3c:25:5f:e1:
10:b6:af:0b:82:27:75:c5:29:93:0f:05:69:b7:11:
c5:30:5e:3b:5a:86:4e:bc:fc:3f:ce:95:fd:e2:53:
29:42:b6:75:f3:c4:33:8a:e8:0f:84:18:9d:c7:60:
d5:0c:c1:c7:d4:0b:83:1f:d5:c3:b1:0c:28:8d:58:
74:59:f2:17:5d:e1:3f:cb:f4:c7:c7:a7:74:72:6d:
00:fe:a8:4d:34:74:40:c4:ba:11:a0:4d:75:91:e3:
57:85:e4:c7:d4:0d:49:b3:8f:55:b2:d5:3b:9e:f8:
57:17:85:ee:d5:56:41:cf:6d:a9:be:fe:d1:63:b8:
fd:7c:c2:47:e0:27:f5:cf:dc:36:d9:a1:e7:91:6e:
86:ea:73:92:ce:40:41:76:8b:67:e1:b0:61:40:fd:
3c:a6:4f:1e:f8:83:56:0f:97:72:67:1f:2d:d9:db:
69:c0:95:0d:26:10:91:b4:7d:1f:6d:26:5e:f5:a2:
b3:d1:e2:c7:4c:b2:d4:a3:73:93:c3:23:07:4e:0b:
65:61:5a:bd:b9:71:a4:87:a3:eb:ac:8b:75:10:85:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E2:49:9A:70:BE:F1:0F:F4:6B:5A:4B:CD:24:F8:8E:D3:35:1E:AF
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/VeJJmnC-8Q_0a1pLzST4jtM1Hq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.172.136.0/23
31.172.140.0/23
80.92.231.0/24
80.92.233.0-80.92.235.255
82.117.229.0/24
82.117.244.0/24
85.90.211.0/24
91.226.1.0/24
92.60.178.0/23
128.0.170.0/24
128.0.172.0/24
128.0.174.0/24
185.38.209.0/24
185.39.196.0/24
185.45.244.0/22
185.170.195.0/24
193.111.0.0/24
193.111.48.0/23
212.110.134.0/23
212.110.152.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:3d:e8:23:76:75:ff:ac:bc:2e:6b:cf:9f:39:09:c2:ab:9d:
75:b8:f6:61:78:12:86:65:aa:68:bb:4f:f6:bb:a4:28:1c:25:
b1:69:2d:68:d2:66:5a:b9:67:63:ac:1b:92:d4:39:2a:b5:92:
fc:e4:5b:41:9c:1a:c6:78:f3:ce:34:21:0b:ec:d0:f5:8d:d9:
b9:03:c0:dd:22:6d:39:6a:10:d6:ef:87:ac:b5:ae:a2:96:3b:
ca:c3:89:ac:ea:66:a7:87:4f:59:50:73:bb:1e:5d:cc:4c:d0:
f3:b0:e9:9d:c9:e2:dd:3f:96:39:f4:78:2c:15:77:4d:43:f6:
e7:51:a8:26:24:17:d5:4d:21:d4:56:ab:2b:7e:55:c5:fc:b7:
7a:7a:1b:c8:25:bf:0f:3e:82:37:2e:c0:c1:14:30:a8:57:0f:
4f:a2:6f:b1:41:28:c5:aa:a5:43:45:08:7b:84:f9:da:5c:c8:
a7:23:4f:1f:1b:0e:e1:fb:03:e8:b4:4a:cf:17:b0:e7:4a:1b:
a0:fc:01:e1:eb:ab:1b:24:bc:47:e9:5c:9f:e1:1c:2e:76:6a:
f9:b5:d9:4a:d0:14:f6:17:24:fa:8e:e0:3b:a1:86:2a:9f:27:
6d:f6:15:6d:14:c7:4e:cc:7a:e9:33:6b:25:79:6f:9f:4c:9d:
0f:24:df:8a
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZxB3MPPU5bwGbHXAWR9aoIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjYwMjA5MTAwNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWUyNDk5YTcwYmVmMTBmZjQ2YjVhNGJjZDI0Zjg4ZWQzMzUxZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2IzaacpLkuGF1QT8Q655JY2V1kj
YIoV2Am4LPQqgvgESQMpxFxHKDwlX+EQtq8Lgid1xSmTDwVptxHFMF47WoZOvPw/
zpX94lMpQrZ188QziugPhBidx2DVDMHH1AuDH9XDsQwojVh0WfIXXeE/y/THx6d0
cm0A/qhNNHRAxLoRoE11keNXheTH1A1Js49VstU7nvhXF4Xu1VZBz22pvv7RY7j9
fMJH4Cf1z9w22aHnkW6G6nOSzkBBdotn4bBhQP08pk8e+INWD5dyZx8t2dtpwJUN
JhCRtH0fbSZe9aKz0eLHTLLUo3OTwyMHTgtlYVq9uXGkh6PrrIt1EIWyaQIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFFXiSZpwvvEP9GtaS80k+I7TNR6vMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvVmVKSm1uQy04UV8wYTFwTHpTVDRqdE0xSHE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAEf
rIgDBAEfrIwDBABQXOcwDAMEAFBc6QMEAlBc6AMEAFJ15QMEAFJ19AMEAFVa0wME
AFviAQMEAVw8sgMEAIAAqgMEAIAArAMEAIAArgMEALkm0QMEALknxAMEArkt9AME
ALmqwwMEAMFvAAMEAcFvMAMEAdRuhgMEAdRumDANBgkqhkiG9w0BAQsFAAOCAQEA
rD3oI3Z1/6y8LmvPnzkJwquddbj2YXgShmWqaLtP9rukKBwlsWktaNJmWrlnY6wb
ktQ5KrWS/ORbQZwaxnjzzjQhC+zQ9Y3ZuQPA3SJtOWoQ1u+HrLWuopY7ysOJrOpm
p4dPWVBzux5dzEzQ87Dpncni3T+WOfR4LBV3TUP251GoJiQX1U0h1FarK35Vxfy3
enobyCW/Dz6CNy7AwRQwqFcPT6JvsUEoxaqlQ0UIe4T52lzIpyNPHxsO4fsD6LRK
zxew50oboPwB4eurGyS8R+lcn+EcLnZq+bXZStAU9hck+o7gO6GGKp8nbfYVbRTH
Tsx66TNrJXlvn0ydDyTfig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:42:00 2026 by rpki-client