Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/vQWV1pYlCU0FXSj9NR7lSullj30.roa
File: vQWV1pYlCU0FXSj9NR7lSullj30.roa (raw, json)
Hash identifier: sy51u7zGghYJOBSf65dALTT087zsPExFgtS4V/w0WrU=
Subject key identifier: BD:05:95:D6:96:25:09:4D:05:5D:28:FD:35:1E:E5:4A:E9:65:8F:7D
Certificate issuer: /CN=95be849d9e7037cb502218a85b2c997eb21ad498
Certificate serial: 019F23691C355A53D900420A8191A68B75B5
Authority key identifier: 95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/vQWV1pYlCU0FXSj9NR7lSullj30.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198183
IP address blocks: 130.255.88.0/24 maxlen: 24
130.255.89.0/24 maxlen: 24
130.255.90.0/24 maxlen: 24
130.255.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1c:35:5a:53:d9:00:42:0a:81:91:a6:8b:75:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95be849d9e7037cb502218a85b2c997eb21ad498
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0595d69625094d055d28fd351ee54ae9658f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:0f:f4:6e:7d:8d:8f:ca:10:7e:ad:58:44:
f8:78:a2:80:60:69:50:4c:da:a9:d3:68:de:a7:55:
cc:42:3e:29:62:95:93:f4:54:5d:d8:57:ce:25:ed:
e5:e6:45:4a:b2:d7:72:4c:18:fd:e8:72:e8:48:02:
57:9c:e4:77:4b:49:31:c8:aa:29:7b:cd:98:49:d0:
72:f6:8a:e2:90:8a:bd:26:d4:f0:1d:7d:0f:5a:24:
59:db:04:4b:30:16:7d:f2:79:70:8c:1d:61:bc:9a:
10:10:bb:a9:14:5c:8c:7f:47:d4:95:c1:b2:e7:6a:
05:91:a3:6c:90:f8:00:5a:bd:73:57:fb:bb:a3:7a:
49:b8:4c:0e:ad:1f:02:5d:ca:ea:51:97:6a:dd:67:
44:46:0f:f1:a3:b1:5a:d0:40:bd:4a:40:2a:23:2c:
40:9b:fe:ba:57:2f:73:5e:29:65:cf:5c:5e:8a:06:
1e:8a:ab:66:ec:8f:d7:93:8f:5e:32:8d:b1:37:e0:
72:90:91:7b:e2:d4:99:4d:65:ac:6b:55:1e:bd:ae:
41:fb:e7:11:65:fa:0c:e0:a8:d4:41:67:b9:89:68:
bd:51:a3:0d:4f:8b:df:09:2e:53:1b:8e:37:0e:d5:
75:d6:fa:80:40:58:00:3b:64:38:70:83:c2:61:4b:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:95:D6:96:25:09:4D:05:5D:28:FD:35:1E:E5:4A:E9:65:8F:7D
X509v3 Authority Key Identifier:
keyid:95:BE:84:9D:9E:70:37:CB:50:22:18:A8:5B:2C:99:7E:B2:1A:D4:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/vQWV1pYlCU0FXSj9NR7lSullj30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/08b2c7-5907-435f-8ee6-abdaa2ba2c7f/1/lb6EnZ5wN8tQIhioWyyZfrIa1Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.88.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:81:73:15:11:52:85:d8:47:16:2f:0b:e2:61:c6:b0:b1:16:
e0:cd:c1:c5:04:73:43:d3:d5:48:39:94:0f:04:8a:7e:4f:ec:
89:eb:f6:88:66:18:51:ed:fa:db:4d:bd:5e:e7:f1:d2:b1:52:
d9:3d:9d:9a:1a:b3:99:8f:9e:7c:7b:c0:99:bd:68:52:75:23:
ba:ae:59:ad:2f:d5:f1:d8:aa:88:ad:9f:78:88:72:3f:f9:0e:
c6:b6:67:83:2d:0b:36:7f:be:59:73:ed:b0:8b:55:e3:a2:c6:
d9:b9:98:96:cd:bd:cf:5f:89:c4:c9:28:88:fd:87:e2:85:6e:
de:0e:54:2f:06:9b:9a:ab:82:0a:24:44:43:32:7d:79:ce:3c:
d6:3d:d4:22:f5:67:6c:11:9e:00:d4:2f:f8:49:1c:16:02:97:
ad:2b:c1:80:72:1a:c9:a5:69:e3:eb:b1:04:b2:d8:9c:d4:c9:
c1:ce:a3:73:19:8b:b7:e4:fe:56:50:1a:41:96:20:f5:88:95:
cd:e8:28:99:f7:cd:4d:4f:03:72:4e:bb:c9:ce:9e:45:c7:ec:
e1:70:eb:7c:89:b4:b0:6f:ee:76:7e:1c:4d:65:e0:00:24:46:
af:85:67:e3:40:4b:93:17:45:ec:84:ac:ea:4c:f7:0d:3c:4d:
08:a2:4d:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRw1WlPZAEIKgZGmi3W1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YmU4NDlkOWU3MDM3Y2I1MDIyMThhODViMmM5OTdlYjIx
YWQ0OTgwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDA1OTVkNjk2MjUwOTRkMDU1ZDI4ZmQzNTFlZTU0YWU5NjU4ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJAP9G59jY/KEH6tWET4eKKAYGlQ
TNqp02jep1XMQj4pYpWT9FRd2FfOJe3l5kVKstdyTBj96HLoSAJXnOR3S0kxyKop
e82YSdBy9orikIq9JtTwHX0PWiRZ2wRLMBZ98nlwjB1hvJoQELupFFyMf0fUlcGy
52oFkaNskPgAWr1zV/u7o3pJuEwOrR8CXcrqUZdq3WdERg/xo7Fa0EC9SkAqIyxA
m/66Vy9zXillz1xeigYeiqtm7I/Xk49eMo2xN+BykJF74tSZTWWsa1Ueva5B++cR
ZfoM4KjUQWe5iWi9UaMNT4vfCS5TG443DtV11vqAQFgAO2Q4cIPCYUtFWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL0FldaWJQlNBV0o/TUe5UrpZY99MB8GA1UdIwQY
MBaAFJW+hJ2ecDfLUCIYqFssmX6yGtSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGI2RW5aNXdOOHRRSWhpb1d5eVpmcklhMUpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYt
YWJkYWEyYmEyYzdmLzEvdlFXVjFwWWxDVTBGWFNqOU5SN2xTdWxsajMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wOGIyYzctNTkwNy00MzVmLThlZTYtYWJkYWEyYmEyYzdm
LzEvbGI2RW5aNXdOOHRRSWhpb1d5eVpmcklhMUpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgv9YMA0G
CSqGSIb3DQEBCwUAA4IBAQBcgXMVEVKF2EcWLwviYcawsRbgzcHFBHND09VIOZQP
BIp+T+yJ6/aIZhhR7frbTb1e5/HSsVLZPZ2aGrOZj558e8CZvWhSdSO6rlmtL9Xx
2KqIrZ94iHI/+Q7GtmeDLQs2f75Zc+2wi1XjosbZuZiWzb3PX4nEySiI/YfihW7e
DlQvBpuaq4IKJERDMn15zjzWPdQi9WdsEZ4A1C/4SRwWApetK8GAchrJpWnj67EE
stic1MnBzqNzGYu35P5WUBpBliD1iJXN6CiZ981NTwNyTrvJzp5Fx+zhcOt8ibSw
b+52fhxNZeAAJEavhWfjQEuTF0XshKzqTPcNPE0Iok2k
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:46:34 2026 by rpki-client