Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/vTX4iIqH_CJW3BVeMGACQiGfVBw.roa
File: vTX4iIqH_CJW3BVeMGACQiGfVBw.roa (raw, json)
Hash identifier: B07mgx6eQq4EygaQx3Hss2ApntF23K/SLlLex5sG5XA=
Subject key identifier: BD:35:F8:88:8A:87:FC:22:56:DC:15:5E:30:60:02:42:21:9F:54:1C
Certificate issuer: /CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Certificate serial: 019F2368A03DAE4EE537265959D3581BF9FD
Authority key identifier: 73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/vTX4iIqH_CJW3BVeMGACQiGfVBw.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209836
IP address blocks: 185.209.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a0:3d:ae:4e:e5:37:26:59:59:d3:58:1b:f9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ff9b0da8cba8232bfd7c7710f0453767889e9d
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd35f8888a87fc2256dc155e30600242219f541c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:1e:21:46:96:89:18:6f:e5:95:81:ac:c6:
2e:51:de:62:21:77:43:5c:38:50:e7:21:cf:77:ed:
2a:a1:87:c4:57:9b:73:09:01:fa:f7:89:97:ce:7d:
8d:38:51:40:7d:24:28:8f:7a:c8:82:0d:ab:02:23:
03:80:43:06:fd:93:45:7b:5a:a3:6b:94:f8:c6:53:
18:27:1f:03:09:52:ab:06:8c:38:b3:e8:11:33:4d:
50:3d:fa:7e:8c:06:01:bb:08:50:7c:22:65:2c:9f:
f4:c3:88:9c:bd:de:b7:93:83:98:f6:2d:f3:52:fe:
5d:fa:0b:76:1e:10:fd:3b:94:70:0b:7f:98:ed:28:
04:e1:e3:8e:13:e8:59:4e:07:b2:43:43:8f:68:74:
d3:01:d3:2e:89:44:84:f5:c5:84:cd:ff:5a:8e:5c:
6b:64:9e:c0:eb:0c:85:17:74:3f:bd:80:35:a8:03:
42:8e:5a:22:81:32:18:f8:f3:e2:9b:d1:d7:d6:cb:
37:23:eb:e4:86:b9:4e:dc:06:f8:af:1d:5b:90:7f:
4f:91:dd:ba:61:fa:4e:29:8f:f3:27:88:24:8e:87:
ef:20:f3:d9:e6:14:69:98:06:73:38:20:e8:98:d6:
a6:87:88:5a:4f:26:ba:f0:c5:95:63:18:1a:6e:19:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:35:F8:88:8A:87:FC:22:56:DC:15:5E:30:60:02:42:21:9F:54:1C
X509v3 Authority Key Identifier:
keyid:73:FF:9B:0D:A8:CB:A8:23:2B:FD:7C:77:10:F0:45:37:67:88:9E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_-bDajLqCMr_Xx3EPBFN2eInp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/vTX4iIqH_CJW3BVeMGACQiGfVBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bd7209-44e9-423e-84a4-b89dc4fd6ee0/1/c_-bDajLqCMr_Xx3EPBFN2eInp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.42.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5c:b7:16:23:37:a2:19:6c:65:4f:4e:b0:ec:fb:b7:24:e9:
e1:2f:64:c9:4b:1f:b2:e2:7b:b1:59:8f:bb:6d:f2:5a:ad:ab:
f6:af:fb:f1:a9:6f:d4:b9:8a:42:b9:23:a5:27:8a:f8:b6:98:
f3:91:fb:aa:ac:ad:09:18:c5:2d:b6:76:ab:aa:5c:49:df:47:
0d:71:57:df:7d:ae:c6:da:b1:ef:43:68:62:2b:81:fc:b7:ca:
94:16:42:fb:0b:29:47:8f:8a:c2:fb:3f:96:11:c7:d6:fb:87:
dd:c9:f2:82:be:d2:91:26:08:48:82:1b:05:74:3e:51:ed:08:
b5:18:fd:ed:4a:11:7e:27:13:e0:5c:88:55:19:0a:8a:9b:36:
e3:a4:a6:8e:b2:9f:f2:cd:7b:ad:00:e7:58:71:15:a0:51:ce:
87:67:e9:ca:d9:71:1d:95:72:d4:f6:6a:11:5b:df:85:8f:36:
b9:9c:2c:4c:de:c8:d1:ac:17:58:fc:5e:62:ad:7d:f7:ec:68:
04:5b:5a:ae:66:c3:14:df:75:05:01:eb:b5:bf:77:35:67:75:
25:7a:84:7f:13:ed:6b:21:4b:e9:40:f6:dd:3a:ae:07:bf:36:
aa:eb:84:c3:d9:36:cf:ad:ad:86:80:77:fc:79:fd:77:4f:af:
6e:20:7c:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaKA9rk7lNyZZWdNYG/n9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmY5YjBkYThjYmE4MjMyYmZkN2M3NzEwZjA0NTM3Njc4
ODllOWQwHhcNMjYwNzAyMTUxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDM1Zjg4ODhhODdmYzIyNTZkYzE1NWUzMDYwMDI0MjIxOWY1NDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL4eIUaWiRhv5ZWBrMYuUd5iIXdD
XDhQ5yHPd+0qoYfEV5tzCQH694mXzn2NOFFAfSQoj3rIgg2rAiMDgEMG/ZNFe1qj
a5T4xlMYJx8DCVKrBow4s+gRM01QPfp+jAYBuwhQfCJlLJ/0w4icvd63k4OY9i3z
Uv5d+gt2HhD9O5RwC3+Y7SgE4eOOE+hZTgeyQ0OPaHTTAdMuiUSE9cWEzf9ajlxr
ZJ7A6wyFF3Q/vYA1qANCjloigTIY+PPim9HX1ss3I+vkhrlO3Ab4rx1bkH9Pkd26
YfpOKY/zJ4gkjofvIPPZ5hRpmAZzOCDomNamh4haTya68MWVYxgabhmfNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL01+IiKh/wiVtwVXjBgAkIhn1QcMB8GA1UdIwQY
MBaAFHP/mw2oy6gjK/18dxDwRTdniJ6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQt
Yjg5ZGM0ZmQ2ZWUwLzEvdlRYNGlJcUhfQ0pXM0JWZU1HQUNRaUdmVkJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZDcyMDktNDRlOS00MjNlLTg0YTQtYjg5ZGM0ZmQ2ZWUw
LzEvY18tYkRhakxxQ01yX1h4M0VQQkZOMmVJbnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudEqMA0G
CSqGSIb3DQEBCwUAA4IBAQAUXLcWIzeiGWxlT06w7Pu3JOnhL2TJSx+y4nuxWY+7
bfJarav2r/vxqW/UuYpCuSOlJ4r4tpjzkfuqrK0JGMUttnarqlxJ30cNcVfffa7G
2rHvQ2hiK4H8t8qUFkL7CylHj4rC+z+WEcfW+4fdyfKCvtKRJghIghsFdD5R7Qi1
GP3tShF+JxPgXIhVGQqKmzbjpKaOsp/yzXutAOdYcRWgUc6HZ+nK2XEdlXLU9moR
W9+Fjza5nCxM3sjRrBdY/F5irX337GgEW1quZsMU33UFAeu1v3c1Z3UleoR/E+1r
IUvpQPbdOq4Hvzaq64TD2TbPra2GgHf8ef13T69uIHwe
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:31 2026 by rpki-client