Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/VEOXlbCEYPXuq0fRxQy_0buCUmo.roa
File: VEOXlbCEYPXuq0fRxQy_0buCUmo.roa (raw, json)
Hash identifier: 1UgV51kONbQoeYkLuDiM4fOStjiZf9fRzxoncm+9qmI=
Subject key identifier: 54:43:97:95:B0:84:60:F5:EE:AB:47:D1:C5:0C:BF:D1:BB:82:52:6A
Certificate issuer: /CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Certificate serial: 019F11FF8B89CA5BC9D05D7663EAD839DF35
Authority key identifier: 98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/VEOXlbCEYPXuq0fRxQy_0buCUmo.roa
Signing time: Mon 29 Jun 2026 06:09:47 +0000
ROA not before: Mon 29 Jun 2026 06:09:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 150.204.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:ff:8b:89:ca:5b:c9:d0:5d:76:63:ea:d8:39:df:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981164ab796aad3cfaf28390f64ddec3dd96d290
Validity
Not Before: Jun 29 06:09:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54439795b08460f5eeab47d1c50cbfd1bb82526a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b0:1c:58:59:64:a9:01:ab:a9:85:1b:21:52:
2d:fe:09:c6:5a:0f:44:e1:07:4e:85:3d:d7:f6:5a:
8a:e5:12:4f:43:45:06:2b:bb:03:cd:f0:24:51:02:
05:ea:c0:fe:7b:da:64:29:7c:2f:b7:ab:45:67:32:
63:f4:84:a3:bb:e9:74:d5:4c:4f:e1:d3:f9:0b:43:
82:d9:8b:53:07:03:8b:a8:92:6b:32:f8:e9:2a:85:
39:b8:0d:8a:41:42:da:92:be:0d:fc:ed:69:92:37:
bf:f3:0d:cf:85:9e:b6:00:5a:5f:43:4d:2f:b4:9b:
47:52:59:2c:c1:e1:8d:11:be:fa:f0:89:0f:e3:ac:
2c:f2:dc:94:4a:e5:bc:97:89:a8:91:fc:b6:a7:e0:
49:97:26:ae:2a:c0:56:df:1d:9e:73:8f:da:3a:43:
07:d4:7c:e8:e1:7a:a8:21:92:e4:0a:7a:9f:72:15:
80:2e:76:7a:7c:36:df:52:78:95:bc:7c:55:86:db:
b5:3f:45:90:83:59:e2:cc:ab:17:6b:44:60:9d:fa:
4a:01:a7:c9:71:5e:52:f0:b1:18:09:ae:3d:b7:b0:
65:59:c6:55:ff:e4:47:75:14:f4:90:68:a7:88:a9:
3a:b4:1c:48:26:d9:37:43:fb:d0:52:e1:7f:fd:7e:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:43:97:95:B0:84:60:F5:EE:AB:47:D1:C5:0C:BF:D1:BB:82:52:6A
X509v3 Authority Key Identifier:
keyid:98:11:64:AB:79:6A:AD:3C:FA:F2:83:90:F6:4D:DE:C3:DD:96:D2:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBFkq3lqrTz68oOQ9k3ew92W0pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/VEOXlbCEYPXuq0fRxQy_0buCUmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cc0364-da1b-43b3-865e-fdea2fcea144/1/mBFkq3lqrTz68oOQ9k3ew92W0pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
92:5b:15:be:f5:9f:94:d2:ee:e3:32:46:93:f0:53:e3:b4:e0:
b9:35:43:27:5d:21:17:c0:a4:86:17:61:60:3e:27:60:ff:60:
15:29:b9:24:42:db:a2:a6:54:ff:53:34:5d:4a:ea:b9:41:25:
1c:9d:ef:99:96:b9:3a:d1:ac:ae:3a:06:26:82:24:96:52:6e:
93:c3:2a:81:45:c2:d2:ff:6e:c3:82:77:0a:4c:14:79:7d:07:
5d:83:65:32:55:34:cd:0a:65:35:77:81:57:6d:2d:52:bc:27:
9a:1b:7a:72:d0:cb:bc:59:2b:d6:8e:4f:16:3f:d3:e2:19:4d:
a7:93:da:1c:60:41:c3:9e:8f:b8:b8:4b:fd:8f:5c:60:84:09:
e8:51:02:31:31:92:43:08:f2:34:b7:39:ba:05:47:2d:1e:51:
6b:e9:38:c5:6d:07:80:0c:2f:82:ec:53:ea:92:be:eb:c7:8c:
b8:bb:60:50:bd:a4:19:7a:83:35:b8:41:0c:3c:31:61:31:f3:
37:06:9d:89:4c:e2:a4:1e:79:d3:4f:bd:ff:1e:48:24:49:ad:
7c:56:3f:f0:e7:7b:97:77:c3:50:8a:50:5e:77:c2:60:53:eb:
ed:d9:c6:c1:69:7d:e4:b4:b2:46:87:d1:2f:25:80:51:d6:ae:
1e:79:03:d9
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ8R/4uJylvJ0F12Y+rYOd81MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTE2NGFiNzk2YWFkM2NmYWYyODM5MGY2NGRkZWMzZGQ5
NmQyOTAwHhcNMjYwNjI5MDYwOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQzOTc5NWIwODQ2MGY1ZWVhYjQ3ZDFjNTBjYmZkMWJiODI1MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7AcWFlkqQGrqYUbIVIt/gnGWg9E
4QdOhT3X9lqK5RJPQ0UGK7sDzfAkUQIF6sD+e9pkKXwvt6tFZzJj9ISju+l01UxP
4dP5C0OC2YtTBwOLqJJrMvjpKoU5uA2KQULakr4N/O1pkje/8w3PhZ62AFpfQ00v
tJtHUlksweGNEb768IkP46ws8tyUSuW8l4mokfy2p+BJlyauKsBW3x2ec4/aOkMH
1Hzo4XqoIZLkCnqfchWALnZ6fDbfUniVvHxVhtu1P0WQg1nizKsXa0RgnfpKAafJ
cV5S8LEYCa49t7BlWcZV/+RHdRT0kGiniKk6tBxIJtk3Q/vQUuF//X5vJwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFRDl5WwhGD17qtH0cUMv9G7glJqMB8GA1UdIwQY
MBaAFJgRZKt5aq08+vKDkPZN3sPdltKQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJGa3EzbHFyVHo2OG9PUTlrM2V3OTJXMHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jYzAzNjQtZGExYi00M2IzLTg2NWUt
ZmRlYTJmY2VhMTQ0LzEvVkVPWGxiQ0VZUFh1cTBmUnhReV8wYnVDVW1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9jYzAzNjQtZGExYi00M2IzLTg2NWUtZmRlYTJmY2VhMTQ0
LzEvbUJGa3EzbHFyVHo2OG9PUTlrM2V3OTJXMHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlswwDQYJ
KoZIhvcNAQELBQADggEBAJJbFb71n5TS7uMyRpPwU+O04Lk1QyddIRfApIYXYWA+
J2D/YBUpuSRC26KmVP9TNF1K6rlBJRyd75mWuTrRrK46BiaCJJZSbpPDKoFFwtL/
bsOCdwpMFHl9B12DZTJVNM0KZTV3gVdtLVK8J5obenLQy7xZK9aOTxY/0+IZTaeT
2hxgQcOej7i4S/2PXGCECehRAjExkkMI8jS3OboFRy0eUWvpOMVtB4AML4LsU+qS
vuvHjLi7YFC9pBl6gzW4QQw8MWEx8zcGnYlM4qQeedNPvf8eSCRJrXxWP/Dne5d3
w1CKUF53wmBT6+3ZxsFpfeS0skaH0S8lgFHWrh55A9k=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:35 2026 by rpki-client