Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vJwdRuKVmb3B0mNtIGek-h8sEEs.roa
File: vJwdRuKVmb3B0mNtIGek-h8sEEs.roa (raw, json)
Hash identifier: BsNuYxe3U4INSr3oBEkWmuPEzjIhq/b3EaKdJzKFSt8=
Subject key identifier: BC:9C:1D:46:E2:95:99:BD:C1:D2:63:6D:20:67:A4:FA:1F:2C:10:4B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A15CA0F43223ED1C0A31090AEBE41D53FA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vJwdRuKVmb3B0mNtIGek-h8sEEs.roa
Signing time: Wed 21 Oct 2026 04:03:34 +0000
ROA not before: Wed 21 Oct 2026 04:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219529
IP address blocks: 94.249.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:a0:f4:32:23:ed:1c:0a:31:09:0a:eb:e4:1d:53:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 21 04:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc9c1d46e29599bdc1d2636d2067a4fa1f2c104b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1c:25:1f:db:77:f1:b1:bd:13:80:06:1d:3a:
7d:5c:8e:48:9b:9b:45:8f:2e:cf:ca:7e:36:30:fd:
30:6e:bd:52:76:4f:59:9d:d3:39:95:17:be:19:c7:
4f:a9:be:40:bc:67:f2:ae:c1:b1:55:d9:94:42:1f:
12:0d:7b:ae:26:ea:18:d8:36:fa:cf:00:14:07:38:
65:4a:1f:e7:93:7d:ed:5f:8f:da:10:8f:f6:fc:c4:
56:8a:b0:2a:27:b3:89:26:b6:e8:1a:a5:5e:a3:43:
80:6f:fc:bb:50:38:a0:f2:54:2e:bb:e3:13:e3:16:
d5:2d:45:9e:ce:60:9a:b5:8b:a3:99:63:de:2d:0d:
b9:fd:a3:bc:9b:a0:77:53:1f:91:b0:88:a9:87:14:
e7:85:76:ec:6b:18:de:41:13:4f:6d:53:1f:a6:ce:
6a:a9:e5:a8:59:c8:bd:be:1c:0d:41:3c:e9:33:c1:
71:fd:50:4f:01:27:70:cd:4e:fc:21:98:c1:72:68:
2f:89:24:f4:27:b6:ae:f1:ab:d6:d2:58:4d:52:8b:
f6:3d:07:8b:ca:8d:a1:82:8f:df:1b:60:eb:33:0a:
8a:25:fb:cf:48:88:b2:a7:e2:9d:20:e1:8f:54:14:
e1:dd:c7:af:7d:11:2d:c9:1f:fa:92:cb:3e:99:36:
66:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9C:1D:46:E2:95:99:BD:C1:D2:63:6D:20:67:A4:FA:1F:2C:10:4B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/vJwdRuKVmb3B0mNtIGek-h8sEEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.134.0/24
Signature Algorithm: sha256WithRSAEncryption
75:02:fa:12:59:5d:38:04:7e:8c:78:30:05:2c:00:1d:8b:cb:
b8:e9:51:e6:42:dc:93:b7:3c:75:63:81:c0:fd:50:96:e9:51:
1d:8b:ed:c9:46:7e:8e:6e:bd:d6:5e:d2:1d:79:5f:98:f5:20:
13:45:76:a3:11:d5:2f:fb:7a:49:51:c4:20:47:6e:28:3d:a1:
85:22:de:5a:4e:04:16:78:3f:b9:02:36:76:44:44:98:34:48:
f4:6b:f2:eb:94:d0:76:df:1b:28:d1:77:91:eb:cc:2a:75:4b:
47:5e:22:16:bf:e9:ad:28:a3:70:3c:57:e2:f4:c6:4c:82:f0:
f5:ae:e7:08:09:a7:b3:df:c7:86:73:c3:41:3c:51:22:c9:0b:
0c:9f:3b:a8:d1:4c:85:d4:cf:48:ec:e5:9a:3c:b7:df:7b:15:
a0:9b:02:ad:3d:76:e8:54:6b:64:8b:ed:93:73:a5:76:8d:4b:
b8:9a:1d:19:5c:3c:d1:d1:18:0b:9a:a2:ce:16:4c:d6:c9:2f:
e9:f8:65:6f:2d:98:ab:7f:4e:87:cb:7e:bf:e2:bf:6b:71:48:
80:ff:2b:78:4d:87:3c:b1:d7:f1:52:9f:a7:b5:5b:cb:0e:f4:
ce:8b:0b:d9:55:e2:94:28:ab:4c:21:f1:09:7d:95:48:24:c3:
a8:7e:d3:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFcoPQyI+0cCjEJCuvkHVP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYxMDIxMDQwMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzljMWQ0NmUyOTU5OWJkYzFkMjYzNmQyMDY3YTRmYTFmMmMxMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRwlH9t38bG9E4AGHTp9XI5Im5tF
jy7Pyn42MP0wbr1Sdk9ZndM5lRe+GcdPqb5AvGfyrsGxVdmUQh8SDXuuJuoY2Db6
zwAUBzhlSh/nk33tX4/aEI/2/MRWirAqJ7OJJrboGqVeo0OAb/y7UDig8lQuu+MT
4xbVLUWezmCatYujmWPeLQ25/aO8m6B3Ux+RsIiphxTnhXbsaxjeQRNPbVMfps5q
qeWoWci9vhwNQTzpM8Fx/VBPASdwzU78IZjBcmgviST0J7au8avW0lhNUov2PQeL
yo2hgo/fG2DrMwqKJfvPSIiyp+KdIOGPVBTh3cevfREtyR/6kss+mTZmaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLycHUbilZm9wdJjbSBnpPofLBBLMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvdkp3ZFJ1S1ZtYjNCMG1OdElHZWstaDhzRUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvmGMA0G
CSqGSIb3DQEBCwUAA4IBAQB1AvoSWV04BH6MeDAFLAAdi8u46VHmQtyTtzx1Y4HA
/VCW6VEdi+3JRn6Obr3WXtIdeV+Y9SATRXajEdUv+3pJUcQgR24oPaGFIt5aTgQW
eD+5AjZ2RESYNEj0a/LrlNB23xso0XeR68wqdUtHXiIWv+mtKKNwPFfi9MZMgvD1
rucICaez38eGc8NBPFEiyQsMnzuo0UyF1M9I7OWaPLffexWgmwKtPXboVGtki+2T
c6V2jUu4mh0ZXDzR0RgLmqLOFkzWyS/p+GVvLZirf06Hy36/4r9rcUiA/yt4TYc8
sdfxUp+ntVvLDvTOiwvZVeKUKKtMIfEJfZVIJMOoftNR
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:40:52 2026 by rpki-client