Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/VVwrQKZhl8GWDVud5MS8pGppgyQ.roa
File: VVwrQKZhl8GWDVud5MS8pGppgyQ.roa (raw, json)
Hash identifier: HHtl2ZMLvvKM+U6JATQgi7CD2DahNQ9EqlIGvJv0TEw=
Subject key identifier: 55:5C:2B:40:A6:61:97:C1:96:0D:5B:9D:E4:C4:BC:A4:6A:69:83:24
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A03E00FEB208C6BE98010210533DF5ABDF
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/VVwrQKZhl8GWDVud5MS8pGppgyQ.roa
Signing time: Wed 26 Aug 2026 12:17:27 +0000
ROA not before: Wed 26 Aug 2026 12:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218944
IP address blocks: 178.214.105.0/24 maxlen: 24
2a07:e000:35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:00:fe:b2:08:c6:be:98:01:02:10:53:3d:f5:ab:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Aug 26 12:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=555c2b40a66197c1960d5b9de4c4bca46a698324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:21:bf:fd:90:2f:10:fb:e7:34:3e:e0:38:
95:c2:ec:22:90:4c:82:c0:b3:3c:b4:ba:de:17:b1:
ec:68:46:6e:5c:17:56:47:e3:68:29:9a:1e:54:d2:
79:e0:c9:6a:9d:9c:2f:d2:9c:bc:ca:2d:3a:cb:69:
07:01:38:b4:75:14:27:34:2c:ec:da:29:d8:7f:d9:
56:2b:45:3c:f6:3b:ba:b6:7f:5c:7c:34:94:8a:0e:
50:98:54:ec:eb:5e:a6:8b:75:11:15:54:c0:8f:f5:
0c:7a:de:6d:c7:d4:1d:ae:de:9a:a3:2f:8d:70:0c:
e2:a4:f0:9a:f8:04:85:16:59:f5:28:5b:2f:26:40:
f6:6a:db:4b:66:a7:4e:33:3b:48:c0:92:49:ab:dc:
53:ba:c0:a6:93:5a:00:56:53:a8:67:70:1c:ed:dd:
4c:52:82:4d:80:dd:71:25:ea:0b:30:a0:65:7f:52:
9e:62:f4:39:31:da:05:d8:28:c2:f2:33:96:1f:84:
6c:d4:a5:a1:da:c0:f6:06:8a:18:ec:f9:1d:6c:bc:
0b:99:73:51:e6:84:47:66:c8:16:7c:95:d2:d4:4d:
a9:6b:61:00:e5:cc:49:20:a1:cf:3c:d1:5f:73:c0:
06:9b:ac:14:33:92:47:df:66:ff:51:08:b1:72:06:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:2B:40:A6:61:97:C1:96:0D:5B:9D:E4:C4:BC:A4:6A:69:83:24
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/VVwrQKZhl8GWDVud5MS8pGppgyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.105.0/24
IPv6:
2a07:e000:35::/48
Signature Algorithm: sha256WithRSAEncryption
26:bb:6c:dd:a9:6b:9e:2e:85:2f:f6:90:77:9e:82:cd:97:4b:
c1:9e:ca:24:51:81:5d:17:ea:80:b1:17:1c:40:d0:be:d4:1c:
ce:1c:c4:f3:b3:2a:cf:53:5c:ed:ef:fc:f2:f8:63:8d:a3:78:
8c:df:f4:0b:e8:0b:b0:18:41:3e:ea:62:40:c9:83:db:9d:d8:
04:b4:fd:5e:39:5f:1b:e6:ff:f1:6c:c8:46:fe:e5:82:25:00:
eb:d0:3f:8f:ea:07:69:58:71:a8:57:d7:fa:e7:aa:59:17:73:
78:be:b3:c3:01:73:1c:b2:1a:2d:2a:be:4a:2f:3c:cd:63:bb:
01:60:c2:cf:0b:f1:b1:b4:d3:32:eb:64:3c:90:bb:27:6d:50:
f7:d2:0e:5c:56:32:7d:67:b4:01:7d:8a:db:94:b5:8b:a2:9c:
54:6a:94:f2:dc:c9:f3:96:ae:38:56:f8:d1:4b:a0:e8:be:d2:
34:41:c4:01:68:df:e7:4a:5e:b6:95:af:c2:27:f4:30:33:a8:
f8:22:60:a5:04:c5:a6:9e:b4:dd:ad:73:f1:13:3f:ab:75:ab:
51:a3:27:8c:e1:47:01:8f:5d:16:45:23:12:ac:fd:4f:28:99:
7d:a5:ea:18:9b:a2:94:3b:d1:c7:5a:ee:6f:a1:d2:61:e6:e7:
e9:fd:39:10
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaA+AP6yCMa+mAECEFM99avfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0
Y2FmZWIwHhcNMjYwODI2MTIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTVjMmI0MGE2NjE5N2MxOTYwZDViOWRlNGM0YmNhNDZhNjk4MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xYhv/2QLxD75zQ+4DiVwuwikEyC
wLM8tLreF7HsaEZuXBdWR+NoKZoeVNJ54MlqnZwv0py8yi06y2kHATi0dRQnNCzs
2inYf9lWK0U89ju6tn9cfDSUig5QmFTs616mi3URFVTAj/UMet5tx9Qdrt6aoy+N
cAzipPCa+ASFFln1KFsvJkD2attLZqdOMztIwJJJq9xTusCmk1oAVlOoZ3Ac7d1M
UoJNgN1xJeoLMKBlf1KeYvQ5MdoF2CjC8jOWH4Rs1KWh2sD2BooY7PkdbLwLmXNR
5oRHZsgWfJXS1E2pa2EA5cxJIKHPPNFfc8AGm6wUM5JH32b/UQixcgaGXwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFVcK0CmYZfBlg1bneTEvKRqaYMkMB8GA1UdIwQY
MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt
Zjk0MWNjMzlhNzFlLzEvVlZ3clFLWmhsOEdXRFZ1ZDVNUzhwR3BwZ3lRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl
LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAstZpMA8E
AgACMAkDBwAqB+AAADUwDQYJKoZIhvcNAQELBQADggEBACa7bN2pa54uhS/2kHee
gs2XS8GeyiRRgV0X6oCxFxxA0L7UHM4cxPOzKs9TXO3v/PL4Y42jeIzf9AvoC7AY
QT7qYkDJg9ud2AS0/V45Xxvm//FsyEb+5YIlAOvQP4/qB2lYcahX1/rnqlkXc3i+
s8MBcxyyGi0qvkovPM1juwFgws8L8bG00zLrZDyQuydtUPfSDlxWMn1ntAF9ituU
tYuinFRqlPLcyfOWrjhW+NFLoOi+0jRBxAFo3+dKXraVr8In9DAzqPgiYKUExaae
tN2tc/ETP6t1q1GjJ4zhRwGPXRZFIxKs/U8omX2l6hibopQ70cda7m+h0mHm5+n9
ORA=
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:21:12 2026 by rpki-client