Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/vIuaHhw5-i00cPHH0vZ_LmseB00.roa
File: vIuaHhw5-i00cPHH0vZ_LmseB00.roa (raw, json)
Hash identifier: bHcmA3+3imH7FcDE4PSlxFxFCMqyJAFjvPvcad59hYc=
Subject key identifier: BC:8B:9A:1E:1C:39:FA:2D:34:70:F1:C7:D2:F6:7F:2E:6B:1E:07:4D
Certificate issuer: /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial: 019EEED9D735A0610D45D3E482D93133C1FE
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/vIuaHhw5-i00cPHH0vZ_LmseB00.roa
Signing time: Mon 22 Jun 2026 10:21:54 +0000
ROA not before: Mon 22 Jun 2026 10:21:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61976
IP address blocks: 79.141.64.0/20 maxlen: 24
79.141.64.0/24 maxlen: 24
79.141.65.0/24 maxlen: 24
79.141.66.0/24 maxlen: 24
92.242.62.0/23 maxlen: 23
92.255.62.0/23 maxlen: 24
109.172.96.0/22 maxlen: 22
136.234.124.0/23 maxlen: 23
185.42.164.0/22 maxlen: 24
185.193.90.0/23 maxlen: 24
2a00:ab00:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:d9:d7:35:a0:61:0d:45:d3:e4:82:d9:31:33:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Validity
Not Before: Jun 22 10:21:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc8b9a1e1c39fa2d3470f1c7d2f67f2e6b1e074d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:af:34:95:2c:d6:da:df:ec:59:2b:57:1d:df:
ea:22:b4:fe:af:96:8b:12:a0:42:97:ec:37:11:52:
11:a2:d5:92:ef:aa:70:19:ec:3c:bd:dc:ca:02:fd:
f0:fa:ab:9b:83:69:bc:db:e8:b3:4f:ef:ee:dc:1e:
4b:a3:1a:4a:54:5c:4e:ef:ae:cb:66:17:06:18:ce:
d1:06:82:50:3a:8b:f1:97:f3:f3:fd:da:83:e7:3b:
78:05:1b:0c:0d:22:cc:37:a1:82:6a:94:b3:c2:63:
36:f3:6b:94:57:b0:c4:59:9e:62:4d:01:96:ad:08:
77:39:39:61:fe:bb:65:04:8d:e3:db:69:2f:06:66:
85:5e:f9:7c:51:6f:09:8a:70:bf:5a:38:8c:4f:7a:
d5:20:13:ac:9c:f0:b6:0a:35:bb:f2:70:56:d0:b4:
7b:b6:92:73:9a:61:aa:70:f9:4e:f3:aa:65:5d:b3:
a4:05:42:e5:86:fe:a4:3b:57:0a:1f:ff:22:1f:22:
4f:ab:e0:5e:bb:7b:c3:88:c6:30:20:bf:6c:89:e7:
c4:1c:be:c3:b8:84:8c:bb:83:41:9c:d9:9e:62:72:
e2:66:99:24:be:98:d5:0f:9b:8a:cb:b2:81:da:48:
d5:ae:dd:e2:89:2a:dd:ce:f2:99:3b:40:1e:9b:a9:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:8B:9A:1E:1C:39:FA:2D:34:70:F1:C7:D2:F6:7F:2E:6B:1E:07:4D
X509v3 Authority Key Identifier:
keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/vIuaHhw5-i00cPHH0vZ_LmseB00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.64.0/20
92.242.62.0/23
92.255.62.0/23
109.172.96.0/22
136.234.124.0/23
185.42.164.0/22
185.193.90.0/23
IPv6:
2a00:ab00:6000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:20:5b:0b:f7:55:04:73:f1:24:d7:18:a5:19:78:64:4f:82:
08:d1:19:43:f8:03:92:73:a1:21:ed:4f:07:9b:12:9e:d7:f7:
15:8d:d3:9b:f6:65:c9:93:12:2c:34:a7:b7:81:c2:b1:a8:31:
b0:71:a2:9d:1e:bf:2e:13:4d:3e:a8:f8:eb:62:ae:81:64:9b:
b4:d1:a7:57:46:1f:65:61:e9:8f:d9:98:fb:00:53:e2:b0:db:
e1:bc:83:b9:fe:74:2b:93:0e:25:18:b4:0f:d2:42:69:a3:45:
f5:26:d3:01:25:46:61:b5:26:7e:c8:fb:5f:dc:8f:9f:62:15:
bc:81:18:d6:40:87:91:2e:7d:ce:b0:eb:4e:ed:7a:2c:a2:79:
0b:d2:1f:76:70:fa:17:d7:ff:5c:a0:d1:81:63:4d:e0:5f:fe:
ff:74:0a:f2:7e:ce:4f:1f:16:34:bf:1d:c2:34:f9:ce:7d:e4:
d1:86:36:a8:29:05:38:99:ea:8e:6a:02:1e:87:42:d0:e2:f2:
55:ed:df:08:11:3d:99:17:ed:ca:32:42:39:46:03:04:70:e3:
27:ec:05:45:03:99:db:36:ab:75:fe:86:4a:a6:d4:a6:a9:13:
1a:dc:20:ed:b9:e3:4b:93:07:90:44:ef:24:d1:27:67:0e:f4:
0a:26:4f:0e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZ7u2dc1oGENRdPkgtkxM8H+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYjY5YjU5ZDE5ZjI5ODdlNDlmMTg1MmQ2MGJiMTc3N2Y4
MGEzMDEwHhcNMjYwNjIyMTAyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzhiOWExZTFjMzlmYTJkMzQ3MGYxYzdkMmY2N2YyZTZiMWUwNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/q80lSzW2t/sWStXHd/qIrT+r5aL
EqBCl+w3EVIRotWS76pwGew8vdzKAv3w+qubg2m82+izT+/u3B5LoxpKVFxO767L
ZhcGGM7RBoJQOovxl/Pz/dqD5zt4BRsMDSLMN6GCapSzwmM282uUV7DEWZ5iTQGW
rQh3OTlh/rtlBI3j22kvBmaFXvl8UW8JinC/WjiMT3rVIBOsnPC2CjW78nBW0LR7
tpJzmmGqcPlO86plXbOkBULlhv6kO1cKH/8iHyJPq+Beu3vDiMYwIL9siefEHL7D
uISMu4NBnNmeYnLiZpkkvpjVD5uKy7KB2kjVrt3iiSrdzvKZO0Aem6lEnwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFLyLmh4cOfotNHDxx9L2fy5rHgdNMB8GA1UdIwQY
MBaAFBG2m1nRnymH5J8YUtYLsXd/gKMBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTIt
ZDE2OWMwODhiNDEyLzEvdkl1YUhodzUtaTAwY1BISDB2Wl9MbXNlQjAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZWRmN2EtYWI5YS00NWU3LWE2MTItZDE2OWMwODhiNDEy
LzEvRWJhYldkR2ZLWWZrbnhoUzFndXhkMy1Bb3dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAwBAIAATAqAwQET41AAwQB
XPI+AwQBXP8+AwQCbaxgAwQBiOp8AwQCuSqkAwQBucFaMA4EAgACMAgDBgQqAKsA
YDANBgkqhkiG9w0BAQsFAAOCAQEAPiBbC/dVBHPxJNcYpRl4ZE+CCNEZQ/gDknOh
Ie1PB5sSntf3FY3Tm/ZlyZMSLDSnt4HCsagxsHGinR6/LhNNPqj462KugWSbtNGn
V0YfZWHpj9mY+wBT4rDb4byDuf50K5MOJRi0D9JCaaNF9SbTASVGYbUmfsj7X9yP
n2IVvIEY1kCHkS59zrDrTu16LKJ5C9IfdnD6F9f/XKDRgWNN4F/+/3QK8n7OTx8W
NL8dwjT5zn3k0YY2qCkFOJnqjmoCHodC0OLyVe3fCBE9mRftyjJCOUYDBHDjJ+wF
RQOZ2zardf6GSqbUpqkTGtwg7bnjS5MHkETvJNEnZw70CiZPDg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:31:47 2026 by rpki-client