Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/Vl8uczSnLZvnr4hJxmOltHRV27k.roa
File: Vl8uczSnLZvnr4hJxmOltHRV27k.roa (raw, json)
Hash identifier: HxK/vDt6JA/Pn8tCf3kJJHpGggMAkjgi5391zitvHTw=
Subject key identifier: 56:5F:2E:73:34:A7:2D:9B:E7:AF:88:49:C6:63:A5:B4:74:55:DB:B9
Certificate issuer: /CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Certificate serial: 019F2369215C640F982FF8BBE80B9B901985
Authority key identifier: 46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/Vl8uczSnLZvnr4hJxmOltHRV27k.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205845
IP address blocks: 45.154.168.0/22 maxlen: 24
185.204.120.0/22 maxlen: 24
185.204.120.0/24 maxlen: 24
185.204.121.0/24 maxlen: 24
2a0a:f740::/29 maxlen: 29
2a0a:f741::/32 maxlen: 48
2a0a:f741:22::/48 maxlen: 48
2a0a:f741:25::/48 maxlen: 48
2a0a:f741:27::/48 maxlen: 48
2a0a:f741:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:21:5c:64:0f:98:2f:f8:bb:e8:0b:9b:90:19:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4614ee344190197f543e71cd6f4e4f0e27515d5d
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=565f2e7334a72d9be7af8849c663a5b47455dbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:fb:03:cb:6a:ec:51:ff:dc:07:68:24:fa:bb:
0c:63:de:fa:fe:3f:d5:9c:a1:10:db:8c:14:f9:65:
0c:b7:43:cb:e5:8d:44:f9:3b:45:44:21:45:d8:fa:
c0:12:41:46:0f:dd:dc:18:70:16:7d:92:e3:0f:a7:
fc:e6:04:63:66:59:66:7d:1a:61:7e:e3:b5:d4:88:
38:ba:4f:77:60:6a:8a:70:9c:20:c6:64:75:15:b2:
05:99:fe:93:b4:b4:bb:a3:af:52:54:5f:a7:c1:73:
07:b5:b9:02:e8:c7:38:ea:6b:e0:e4:a6:ac:a8:c1:
ed:28:24:94:0f:c3:ee:03:32:35:c5:7c:d1:ce:52:
7c:29:1d:b0:31:61:d5:58:86:79:fa:03:c4:19:e7:
4e:d4:29:22:4d:98:3f:60:04:d5:aa:a7:c6:71:e8:
95:9c:d2:41:8f:52:fe:82:90:a9:56:d6:0b:f4:0d:
fb:5d:25:3f:0d:7d:00:c8:05:71:c9:bd:15:62:9a:
cf:09:2b:2e:bd:5a:cf:d5:0e:c6:f2:1d:14:0f:12:
fa:05:58:73:97:b6:22:62:1c:fc:90:2b:06:eb:7e:
e3:a4:2c:15:29:6b:51:05:b8:fc:fa:20:43:d4:5a:
ad:59:1d:0b:bb:f5:d0:c5:6d:53:cf:3a:a9:7f:00:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5F:2E:73:34:A7:2D:9B:E7:AF:88:49:C6:63:A5:B4:74:55:DB:B9
X509v3 Authority Key Identifier:
keyid:46:14:EE:34:41:90:19:7F:54:3E:71:CD:6F:4E:4F:0E:27:51:5D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhTuNEGQGX9UPnHNb05PDidRXV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/Vl8uczSnLZvnr4hJxmOltHRV27k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4c4894-80fc-48ef-b668-975a237ecd06/1/RhTuNEGQGX9UPnHNb05PDidRXV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.168.0/22
185.204.120.0/22
IPv6:
2a0a:f740::/29
Signature Algorithm: sha256WithRSAEncryption
d5:d2:0d:a0:ae:71:7b:a7:1d:52:29:03:a6:9c:25:1a:03:dc:
4d:95:35:aa:24:3d:94:63:18:d9:e6:aa:98:43:ad:50:4d:81:
f5:b2:f7:fc:de:22:af:a1:23:9d:82:41:5f:3c:f7:32:e1:ac:
d3:99:f4:74:20:8a:61:5a:17:61:13:16:7f:44:8e:6c:50:95:
a3:ce:35:a8:bd:da:40:aa:e7:ea:b9:83:16:5c:96:db:72:98:
bf:a8:23:91:ae:d1:6f:2d:be:71:00:bc:34:32:d4:7d:00:1a:
d4:45:c7:cf:c3:14:8b:bb:ef:1d:98:95:51:e0:ba:ac:0d:04:
50:c0:de:b8:05:d3:a4:da:5a:9f:33:be:5d:9a:57:d5:64:4b:
cc:4c:3f:b3:8f:ba:0b:bf:2c:81:db:38:a3:d6:b7:76:f6:86:
47:7f:49:72:6c:03:0c:36:53:30:1c:a6:ad:31:aa:04:36:55:
46:c7:c3:b5:45:e8:f6:bb:d4:a2:ca:be:a2:d8:ac:16:03:85:
82:1b:72:08:a2:6d:d5:b3:13:4b:fc:73:1d:b6:a9:fb:f3:7f:
60:45:57:9a:e9:e5:84:e5:9c:6b:7f:24:fa:30:56:41:d6:03:
49:73:79:f6:2d:dc:e9:6c:d4:ec:f0:fb:17:50:f0:95:08:7b:
1a:c0:55:70
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ8jaSFcZA+YL/i76AubkBmFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTRlZTM0NDE5MDE5N2Y1NDNlNzFjZDZmNGU0ZjBlMjc1
MTVkNWQwHhcNMjYwNzAyMTUxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjVmMmU3MzM0YTcyZDliZTdhZjg4NDljNjYzYTViNDc0NTVkYmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6fsDy2rsUf/cB2gk+rsMY976/j/V
nKEQ24wU+WUMt0PL5Y1E+TtFRCFF2PrAEkFGD93cGHAWfZLjD6f85gRjZllmfRph
fuO11Ig4uk93YGqKcJwgxmR1FbIFmf6TtLS7o69SVF+nwXMHtbkC6Mc46mvg5Kas
qMHtKCSUD8PuAzI1xXzRzlJ8KR2wMWHVWIZ5+gPEGedO1CkiTZg/YATVqqfGceiV
nNJBj1L+gpCpVtYL9A37XSU/DX0AyAVxyb0VYprPCSsuvVrP1Q7G8h0UDxL6BVhz
l7YiYhz8kCsG637jpCwVKWtRBbj8+iBD1FqtWR0Lu/XQxW1TzzqpfwBilwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFZfLnM0py2b56+IScZjpbR0Vdu5MB8GA1UdIwQY
MBaAFEYU7jRBkBl/VD5xzW9OTw4nUV1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhUdU5FR1FHWDlVUG5ITmIwNVBEaWRSWFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2Njgt
OTc1YTIzN2VjZDA2LzEvVmw4dWN6U25MWnZucjRoSnhtT2x0SFJWMjdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YzQ4OTQtODBmYy00OGVmLWI2NjgtOTc1YTIzN2VjZDA2
LzEvUmhUdU5FR1FHWDlVUG5ITmIwNVBEaWRSWFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZqoAwQC
ucx4MA0EAgACMAcDBQMqCvdAMA0GCSqGSIb3DQEBCwUAA4IBAQDV0g2grnF7px1S
KQOmnCUaA9xNlTWqJD2UYxjZ5qqYQ61QTYH1svf83iKvoSOdgkFfPPcy4azTmfR0
IIphWhdhExZ/RI5sUJWjzjWovdpAqufquYMWXJbbcpi/qCORrtFvLb5xALw0MtR9
ABrURcfPwxSLu+8dmJVR4LqsDQRQwN64BdOk2lqfM75dmlfVZEvMTD+zj7oLvyyB
2zij1rd29oZHf0lybAMMNlMwHKatMaoENlVGx8O1Rej2u9Siyr6i2KwWA4WCG3II
om3VsxNL/HMdtqn7839gRVea6eWE5ZxrfyT6MFZB1gNJc3n2LdzpbNTs8PsXUPCV
CHsawFVw
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:34 2026 by rpki-client