Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/va2s2dfv8Ozbz2OcdO_E8MnEwWM.roa
File: va2s2dfv8Ozbz2OcdO_E8MnEwWM.roa (raw, json)
Hash identifier: VKxCGawL0Ee08qk7NoqWfzbUbd6mtw8giudG6L+Ikx4=
Subject key identifier: BD:AD:AC:D9:D7:EF:F0:EC:DB:CF:63:9C:74:EF:C4:F0:C9:C4:C1:63
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019F70881845CF4110F8E8F4A23058B0F4EF
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/va2s2dfv8Ozbz2OcdO_E8MnEwWM.roa
Signing time: Fri 17 Jul 2026 14:43:15 +0000
ROA not before: Fri 17 Jul 2026 14:43:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209396
IP address blocks: 45.86.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:88:18:45:cf:41:10:f8:e8:f4:a2:30:58:b0:f4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 17 14:43:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdadacd9d7eff0ecdbcf639c74efc4f0c9c4c163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:33:d1:e3:26:96:f6:9e:34:27:4c:e8:37:c0:
b5:ae:20:df:e5:01:80:7e:3d:8b:3f:9d:65:f9:65:
06:b5:62:d4:0f:74:fa:8a:fa:5d:85:d8:c4:3d:18:
5a:f8:56:46:a8:33:fc:42:fc:39:0c:78:74:4a:49:
0f:0f:ae:af:b6:c2:1f:a9:5d:a0:8a:2c:1d:39:5a:
53:11:6b:71:77:5a:a1:ef:df:e2:ca:ed:14:f3:42:
8f:f8:cc:4c:ec:43:d7:ba:61:ba:54:26:cc:81:ff:
a8:a1:6e:ff:92:46:1e:3b:48:60:89:1f:4e:1e:98:
1d:75:6b:b4:27:fc:58:c7:dc:ce:4b:9a:9e:61:b8:
3c:f1:00:c1:8c:90:44:28:cc:1c:85:b9:33:96:22:
86:9e:18:bc:be:01:b1:b6:71:91:0b:ea:06:30:68:
f3:0e:25:df:bb:71:81:c5:99:a1:8e:16:92:d4:f7:
a7:1a:07:c2:49:f1:d7:49:54:36:cc:59:2d:9f:ac:
36:47:04:58:6c:04:68:34:5e:08:56:37:d8:fc:c2:
1a:4b:5e:3c:4f:06:e5:e2:5f:66:78:68:d6:d0:fd:
cd:ac:ce:bc:51:3d:83:48:fb:f3:d5:ab:85:5e:7e:
2b:f1:f4:56:7c:f5:a9:12:a2:2f:77:4e:62:aa:f3:
65:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:AC:D9:D7:EF:F0:EC:DB:CF:63:9C:74:EF:C4:F0:C9:C4:C1:63
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/va2s2dfv8Ozbz2OcdO_E8MnEwWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.20.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:35:d3:0e:17:2c:f1:a4:16:ec:17:f1:5f:da:68:c0:e5:a9:
b7:81:d3:a9:22:67:5d:03:ec:4c:d8:65:70:ba:66:b9:d1:de:
1e:37:5e:94:2c:47:01:55:a6:0b:ae:65:be:ab:64:39:30:76:
60:b5:6e:ed:2b:f6:1a:ad:a2:82:a9:ed:7e:bc:f8:7b:70:14:
80:2a:74:e9:fe:98:bd:f8:c0:4b:31:a0:73:02:5f:90:d9:2a:
69:43:32:c2:c1:14:d3:ca:33:d2:db:3f:b5:2b:c4:11:18:84:
22:82:48:37:59:0a:e1:e1:eb:09:eb:58:03:52:c9:c1:2a:13:
92:18:01:1f:2b:79:4d:be:39:9b:9a:27:a9:cc:58:bf:bb:35:
33:2a:8a:22:4a:6d:5a:ce:df:fa:09:a1:25:da:36:8f:2b:b7:
69:96:b5:90:f2:e9:f9:64:eb:49:74:7c:4a:09:1f:8d:b5:f0:
ab:5d:2a:8d:29:07:99:46:ec:89:c5:f5:8d:6c:98:14:5d:1a:
7b:1d:67:32:11:95:d8:24:52:d7:f6:13:d4:92:0b:08:19:d1:
40:95:5d:ce:15:47:1f:21:ed:de:6b:97:e6:05:1d:8a:84:4e:
3b:26:71:ed:7f:10:f7:7e:db:55:e0:4b:06:a2:4f:af:b4:11:
bb:23:2a:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9wiBhFz0EQ+Oj0ojBYsPTvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjYwNzE3MTQ0MzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGFkYWNkOWQ3ZWZmMGVjZGJjZjYzOWM3NGVmYzRmMGM5YzRjMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zPR4yaW9p40J0zoN8C1riDf5QGA
fj2LP51l+WUGtWLUD3T6ivpdhdjEPRha+FZGqDP8Qvw5DHh0SkkPD66vtsIfqV2g
iiwdOVpTEWtxd1qh79/iyu0U80KP+MxM7EPXumG6VCbMgf+ooW7/kkYeO0hgiR9O
HpgddWu0J/xYx9zOS5qeYbg88QDBjJBEKMwchbkzliKGnhi8vgGxtnGRC+oGMGjz
DiXfu3GBxZmhjhaS1PenGgfCSfHXSVQ2zFktn6w2RwRYbARoNF4IVjfY/MIaS148
Twbl4l9meGjW0P3NrM68UT2DSPvz1auFXn4r8fRWfPWpEqIvd05iqvNlBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2trNnX7/Ds289jnHTvxPDJxMFjMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvdmEyczJkZnY4T3piejJPY2RPX0U4TW5Fd1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVYUMA0G
CSqGSIb3DQEBCwUAA4IBAQBsNdMOFyzxpBbsF/Ff2mjA5am3gdOpImddA+xM2GVw
uma50d4eN16ULEcBVaYLrmW+q2Q5MHZgtW7tK/YaraKCqe1+vPh7cBSAKnTp/pi9
+MBLMaBzAl+Q2SppQzLCwRTTyjPS2z+1K8QRGIQigkg3WQrh4esJ61gDUsnBKhOS
GAEfK3lNvjmbmiepzFi/uzUzKooiSm1azt/6CaEl2jaPK7dplrWQ8un5ZOtJdHxK
CR+NtfCrXSqNKQeZRuyJxfWNbJgUXRp7HWcyEZXYJFLX9hPUkgsIGdFAlV3OFUcf
Ie3ea5fmBR2KhE47JnHtfxD3fttV4EsGok+vtBG7IyqK
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:45 2026 by rpki-client