Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vFDDC8oGhU5omqPELECV1f9lUsg.roa
File: vFDDC8oGhU5omqPELECV1f9lUsg.roa (raw, json)
Hash identifier: Z5+GUGL2NAKJsabQouUbJr+0GRrmTe73mw/0segmG5E=
Subject key identifier: BC:50:C3:0B:CA:06:85:4E:68:9A:A3:C4:2C:40:95:D5:FF:65:52:C8
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0CDA6E64B454DD3C143B0DDCC16D3C992
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vFDDC8oGhU5omqPELECV1f9lUsg.roa
Signing time: Wed 23 Sep 2026 09:44:22 +0000
ROA not before: Wed 23 Sep 2026 09:44:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 176.98.179.0/24 maxlen: 24
176.98.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:a6:e6:4b:45:4d:d3:c1:43:b0:dd:cc:16:d3:c9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 23 09:44:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc50c30bca06854e689aa3c42c4095d5ff6552c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:1b:39:57:d3:0d:4b:7a:cf:a5:63:aa:f8:
00:d9:37:1c:ef:da:5e:17:18:c7:d3:4e:eb:05:59:
03:1c:1d:be:b2:74:68:aa:b0:6c:ec:a8:bf:9d:ef:
db:85:4b:49:05:f8:ca:5a:51:e0:33:6d:1a:bf:a3:
b1:c0:5b:db:00:05:41:06:54:90:58:c1:79:15:c2:
12:2e:c5:1c:dc:6d:04:80:b2:de:6f:1f:96:3a:15:
4a:a9:ed:a1:14:a2:95:e8:f0:aa:a7:29:fe:69:57:
51:6c:3d:30:28:96:4f:49:d9:66:09:45:7c:d1:40:
57:b7:a0:01:e0:3a:c3:5c:94:08:77:b2:d3:67:4f:
24:70:8d:db:f5:9d:f1:a2:98:b9:94:55:71:22:5e:
8c:fa:1e:e9:53:3f:35:b0:3c:a5:07:a0:ce:f9:3c:
17:86:79:fe:cd:25:0c:0f:89:b6:fe:b0:42:1e:e2:
5e:4b:17:09:d6:d3:a0:21:ca:59:34:35:42:fd:ef:
67:9c:f4:b4:0b:4c:ae:fe:99:d8:ad:82:32:b8:8d:
cf:7f:08:8a:33:0b:4a:31:9b:68:18:4e:a2:c9:ee:
53:33:ca:35:37:29:d4:54:0f:95:5b:ef:f6:63:76:
3f:e2:1f:bb:c8:31:88:0f:00:e7:5d:87:5f:4f:cf:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:50:C3:0B:CA:06:85:4E:68:9A:A3:C4:2C:40:95:D5:FF:65:52:C8
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/vFDDC8oGhU5omqPELECV1f9lUsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.179.0/24
176.98.185.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:b2:cc:6b:28:ee:1f:a6:14:02:49:4f:e1:e2:3c:e5:06:8b:
e6:12:e2:64:f4:04:70:03:2c:62:8e:31:c7:8c:fa:54:44:44:
c5:0a:c3:d5:df:e2:10:30:5a:68:85:8b:c9:2d:02:be:02:05:
7f:9d:cc:d2:7d:b3:66:61:90:35:6a:2d:c1:cc:b6:e7:cc:57:
b0:43:29:a4:c2:98:8a:e6:43:23:8f:4a:45:4b:62:01:cc:6d:
21:18:8a:1d:8b:f5:ac:6a:d2:28:d8:a9:70:63:6a:5b:fe:9c:
21:c4:18:f7:e8:82:b2:8d:b2:a0:6e:ea:2f:9a:7a:a7:41:16:
54:a8:ad:2a:27:41:ed:dd:90:0a:2a:38:af:31:dc:58:76:dd:
cc:94:00:c1:86:e7:16:2c:bb:3e:c1:bb:b5:4a:98:5b:78:c0:
d0:18:98:d2:c5:77:35:a0:32:99:18:d6:3a:6f:78:fe:b2:b1:
f2:aa:82:c0:19:cc:be:e2:56:44:22:97:8c:0b:d6:0f:6d:0e:
18:07:03:7c:5c:d0:69:cb:5e:d4:65:26:a4:44:f6:49:11:bc:
1d:c0:90:cf:07:8e:8e:79:bb:16:16:e7:12:e7:bd:af:b5:60:
72:57:b0:43:50:4b:4f:26:2c:f9:e5:c2:40:11:ae:76:0a:f2:
ce:69:65:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDNpuZLRU3TwUOw3cwW08mSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjYwOTIzMDk0NDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzUwYzMwYmNhMDY4NTRlNjg5YWEzYzQyYzQwOTVkNWZmNjU1MmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjQbOVfTDUt6z6VjqvgA2Tcc79pe
FxjH007rBVkDHB2+snRoqrBs7Ki/ne/bhUtJBfjKWlHgM20av6OxwFvbAAVBBlSQ
WMF5FcISLsUc3G0EgLLebx+WOhVKqe2hFKKV6PCqpyn+aVdRbD0wKJZPSdlmCUV8
0UBXt6AB4DrDXJQId7LTZ08kcI3b9Z3xopi5lFVxIl6M+h7pUz81sDylB6DO+TwX
hnn+zSUMD4m2/rBCHuJeSxcJ1tOgIcpZNDVC/e9nnPS0C0yu/pnYrYIyuI3PfwiK
MwtKMZtoGE6iye5TM8o1NynUVA+VW+/2Y3Y/4h+7yDGIDwDnXYdfT88JKwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLxQwwvKBoVOaJqjxCxAldX/ZVLIMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvdkZEREM4b0doVTVvbXFQRUxFQ1YxZjlsVXNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsGKzAwQA
sGK5MA0GCSqGSIb3DQEBCwUAA4IBAQB/ssxrKO4fphQCSU/h4jzlBovmEuJk9ARw
AyxijjHHjPpURETFCsPV3+IQMFpohYvJLQK+AgV/nczSfbNmYZA1ai3BzLbnzFew
QymkwpiK5kMjj0pFS2IBzG0hGIodi/WsatIo2KlwY2pb/pwhxBj36IKyjbKgbuov
mnqnQRZUqK0qJ0Ht3ZAKKjivMdxYdt3MlADBhucWLLs+wbu1SphbeMDQGJjSxXc1
oDKZGNY6b3j+srHyqoLAGcy+4lZEIpeMC9YPbQ4YBwN8XNBpy17UZSakRPZJEbwd
wJDPB46OebsWFucS572vtWByV7BDUEtPJiz55cJAEa52CvLOaWVG
-----END CERTIFICATE-----
Generated at Thu Sep 24 06:07:36 2026 by rpki-client