Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/V99A7EjggQv3Pr9BHK8mFwxwTmw.roa
File: V99A7EjggQv3Pr9BHK8mFwxwTmw.roa (raw, json)
Hash identifier: lALqQhy5XAVkswl9pOglczFvqQUixVBufeGEEPvIg9c=
Subject key identifier: 57:DF:40:EC:48:E0:81:0B:F7:3E:BF:41:1C:AF:26:17:0C:70:4E:6C
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019F8DCA03DA055FB6B8573B6633D52CE1F8
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/V99A7EjggQv3Pr9BHK8mFwxwTmw.roa
Signing time: Thu 23 Jul 2026 07:04:14 +0000
ROA not before: Thu 23 Jul 2026 07:04:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209956
IP address blocks: 213.238.184.0/24 maxlen: 24
213.238.187.0/24 maxlen: 24
213.238.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:ca:03:da:05:5f:b6:b8:57:3b:66:33:d5:2c:e1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jul 23 07:04:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57df40ec48e0810bf73ebf411caf26170c704e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:cf:c8:98:89:cb:d8:b9:09:94:ac:05:e9:
fe:6d:99:82:69:bb:e7:e1:45:e8:56:47:64:90:0a:
16:1e:c5:28:af:eb:df:a5:cb:3b:42:ee:20:81:82:
54:0b:78:18:89:d6:3b:0d:98:77:83:fb:52:6b:7b:
ef:d1:8a:3d:76:cb:dd:66:d2:56:af:ad:85:d8:af:
f7:e8:0d:4a:ce:f8:93:da:50:f0:28:83:f1:a8:11:
ed:95:38:89:ec:6e:4c:f8:dd:b3:22:80:62:27:29:
42:d1:23:cd:07:0f:bf:de:21:fe:16:76:cf:75:ae:
63:01:47:f0:c6:c5:37:50:db:58:e7:7b:12:2f:a8:
e0:2b:bb:18:bd:0f:26:60:a6:c2:46:bb:4e:a1:fe:
86:f5:34:5b:de:06:91:ee:8a:4a:0e:13:89:51:43:
82:24:d0:88:59:42:03:12:94:59:68:3a:08:b8:da:
ec:8b:7f:04:f1:a9:43:38:87:46:67:7a:26:25:63:
c0:0d:68:30:06:56:7a:64:76:0f:2a:95:7a:20:a1:
df:8b:76:63:df:ad:06:19:89:22:60:01:38:94:88:
b2:e0:c8:49:5b:ca:10:94:9a:ed:cb:63:3a:61:d0:
b3:36:f2:45:29:26:1b:dd:85:df:a1:34:16:fa:b3:
47:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:40:EC:48:E0:81:0B:F7:3E:BF:41:1C:AF:26:17:0C:70:4E:6C
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/V99A7EjggQv3Pr9BHK8mFwxwTmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.184.0/24
213.238.187.0/24
213.238.189.0/24
Signature Algorithm: sha256WithRSAEncryption
be:af:49:87:64:93:b4:3f:21:b6:16:d7:c2:90:1a:fd:fe:99:
2c:5d:1b:32:b1:3f:70:f5:5d:4f:8f:ae:39:eb:bd:fa:04:77:
50:4d:ae:3a:e4:26:41:34:12:07:2f:0b:ca:d7:4c:df:93:c2:
3c:77:7c:87:60:02:aa:29:89:51:84:00:7d:29:25:ab:16:62:
33:d1:6d:5a:87:ab:1f:3c:81:fe:8e:b3:4f:65:6f:41:6a:15:
24:b0:6a:bf:ef:24:19:6c:53:0c:bd:75:26:ec:da:1e:41:47:
e0:d9:8f:a9:52:d2:2f:1c:10:c3:e9:b0:68:2b:82:b7:e6:98:
ff:ab:1b:64:34:cb:df:ba:31:be:ca:ed:15:6a:2b:df:38:ad:
67:54:76:44:02:f0:be:55:85:dd:0c:03:09:65:6f:50:77:2c:
15:8e:9f:6d:86:44:61:a2:e7:c6:66:1b:9f:c4:1f:8d:b4:a4:
36:3b:be:02:a6:fa:9c:b8:06:0d:37:89:65:e8:eb:d1:fb:c9:
c9:96:88:00:4f:6c:e4:92:08:51:32:fa:41:3d:9f:bc:ac:d8:
69:37:b1:78:94:68:45:78:29:9c:76:a6:27:a1:fb:1c:08:5f:
f4:59:57:21:c4:bd:67:58:89:07:8f:39:d1:3c:14:66:9c:7e:
6e:2a:57:18
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+NygPaBV+2uFc7ZjPVLOH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjYwNzIzMDcwNDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2RmNDBlYzQ4ZTA4MTBiZjczZWJmNDExY2FmMjYxNzBjNzA0ZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHfPyJiJy9i5CZSsBen+bZmCabvn
4UXoVkdkkAoWHsUor+vfpcs7Qu4ggYJUC3gYidY7DZh3g/tSa3vv0Yo9dsvdZtJW
r62F2K/36A1KzviT2lDwKIPxqBHtlTiJ7G5M+N2zIoBiJylC0SPNBw+/3iH+FnbP
da5jAUfwxsU3UNtY53sSL6jgK7sYvQ8mYKbCRrtOof6G9TRb3gaR7opKDhOJUUOC
JNCIWUIDEpRZaDoIuNrsi38E8alDOIdGZ3omJWPADWgwBlZ6ZHYPKpV6IKHfi3Zj
360GGYkiYAE4lIiy4MhJW8oQlJrty2M6YdCzNvJFKSYb3YXfoTQW+rNHiwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFffQOxI4IEL9z6/QRyvJhcMcE5sMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvVjk5QTdFamdnUXYzUHI5QkhLOG1Gd3h3VG13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1e64AwQA
1e67AwQA1e69MA0GCSqGSIb3DQEBCwUAA4IBAQC+r0mHZJO0PyG2FtfCkBr9/pks
XRsysT9w9V1Pj6456736BHdQTa465CZBNBIHLwvK10zfk8I8d3yHYAKqKYlRhAB9
KSWrFmIz0W1ah6sfPIH+jrNPZW9BahUksGq/7yQZbFMMvXUm7NoeQUfg2Y+pUtIv
HBDD6bBoK4K35pj/qxtkNMvfujG+yu0VaivfOK1nVHZEAvC+VYXdDAMJZW9QdywV
jp9thkRhoufGZhufxB+NtKQ2O74CpvqcuAYNN4ll6OvR+8nJlogAT2zkkghRMvpB
PZ+8rNhpN7F4lGhFeCmcdqYnofscCF/0WVchxL1nWIkHjznRPBRmnH5uKlcY
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:49 2026 by rpki-client