Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vbDaiGlSYLP5Ch6cXTWC8b9lRyM.roa
File: vbDaiGlSYLP5Ch6cXTWC8b9lRyM.roa (raw, json)
Hash identifier: HL5VCqeTJ3EqoNaFNWF+J0H8OQtJid/sysJ9PXuKAwY=
Subject key identifier: BD:B0:DA:88:69:52:60:B3:F9:0A:1E:9C:5D:35:82:F1:BF:65:47:23
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0D184509923A6539D88CD8FBBC4FF7419
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vbDaiGlSYLP5Ch6cXTWC8b9lRyM.roa
Signing time: Thu 24 Sep 2026 03:45:04 +0000
ROA not before: Thu 24 Sep 2026 03:45:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 46.34.22.0/24 maxlen: 24
87.85.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:84:50:99:23:a6:53:9d:88:cd:8f:bb:c4:ff:74:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 24 03:45:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb0da88695260b3f90a1e9c5d3582f1bf654723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:03:b7:38:7f:96:9b:32:5a:7c:80:cc:02:49:
08:cc:27:46:0f:aa:4a:45:a0:3e:c4:68:e9:04:0c:
00:9c:5c:83:ad:e1:66:95:ed:b6:7a:f8:f3:e1:59:
29:b3:fd:ae:ce:55:55:fc:5c:ea:f6:a4:00:d1:8c:
11:63:45:15:f9:9f:9e:78:43:48:f4:12:82:df:df:
2b:fa:16:81:06:f0:a2:10:3f:78:07:3d:15:83:4d:
2a:cf:5f:1f:2e:22:1c:f7:b1:3a:42:16:d4:d6:df:
85:9e:eb:d7:0b:b5:e2:c3:13:ea:c0:20:7a:b8:36:
46:c0:fb:45:06:7a:2f:40:f3:df:67:02:f2:f3:b4:
e8:57:65:f9:3e:31:72:ed:9b:59:90:9d:f7:9e:42:
04:b5:e6:56:61:5d:d7:84:62:ba:6a:0b:d1:0c:fa:
da:d8:f6:8b:de:71:af:62:b6:f3:bf:c3:2a:54:bf:
d4:fc:47:d9:51:df:77:82:51:67:dd:b8:ea:28:a9:
b2:d4:db:7f:6a:ff:91:be:ba:34:c1:6b:2b:41:3c:
e2:1c:84:60:78:04:c8:c8:55:f9:88:8a:3c:1e:44:
c5:15:56:7a:01:43:e6:10:ed:f4:1d:f2:de:5e:80:
eb:39:d5:ba:1d:24:9e:51:a9:42:7c:c2:ee:c8:46:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:DA:88:69:52:60:B3:F9:0A:1E:9C:5D:35:82:F1:BF:65:47:23
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vbDaiGlSYLP5Ch6cXTWC8b9lRyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.22.0/24
87.85.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a4:1d:ac:61:25:d3:07:c9:b2:99:a3:b5:09:13:62:bf:d2:
de:2f:cb:b7:85:4d:6e:41:77:cb:a5:48:c2:ce:d9:df:9c:ba:
ed:53:b6:a8:88:11:a8:f7:36:8b:e8:a2:36:f3:4c:c5:55:cd:
fb:9e:64:89:bb:7e:6d:4a:6d:a0:be:7b:dc:74:2e:77:56:c9:
61:00:6d:dd:c5:7a:01:35:04:ff:da:f5:f9:32:7b:23:63:9f:
ad:45:70:db:26:1f:8f:20:d1:22:17:cc:91:40:d2:b5:53:c9:
52:59:cf:da:67:7f:d9:0f:c3:0d:ee:d8:66:a7:63:e7:00:0c:
85:98:f1:4b:2f:df:2f:42:d8:c4:42:4c:e4:e9:b7:91:e1:95:
f8:0b:e1:4c:e1:40:e6:95:73:a5:59:29:6e:d0:61:d6:b0:a0:
99:61:9a:d6:69:5e:ec:55:47:78:eb:3c:d3:fe:ba:54:87:1f:
8a:42:e0:2b:d8:02:eb:49:1a:3b:c7:f9:2d:64:1a:5a:b1:d6:
69:f5:68:cc:a4:40:90:d9:8e:8c:da:98:73:28:f4:2a:24:18:
02:2e:71:21:21:ee:82:34:23:e7:eb:6d:aa:de:0e:33:17:b9:
76:6a:28:05:18:eb:e6:39:2a:07:fa:83:2f:11:68:85:26:1d:
b1:80:71:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDRhFCZI6ZTnYjNj7vE/3QZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTI0MDM0NTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGIwZGE4ODY5NTI2MGIzZjkwYTFlOWM1ZDM1ODJmMWJmNjU0NzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QO3OH+WmzJafIDMAkkIzCdGD6pK
RaA+xGjpBAwAnFyDreFmle22evjz4Vkps/2uzlVV/Fzq9qQA0YwRY0UV+Z+eeENI
9BKC398r+haBBvCiED94Bz0Vg00qz18fLiIc97E6QhbU1t+FnuvXC7XiwxPqwCB6
uDZGwPtFBnovQPPfZwLy87ToV2X5PjFy7ZtZkJ33nkIEteZWYV3XhGK6agvRDPra
2PaL3nGvYrbzv8MqVL/U/EfZUd93glFn3bjqKKmy1Nt/av+Rvro0wWsrQTziHIRg
eATIyFX5iIo8HkTFFVZ6AUPmEO30HfLeXoDrOdW6HSSeUalCfMLuyEb0OwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL2w2ohpUmCz+QoenF01gvG/ZUcjMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdmJEYWlHbFNZTFA1Q2g2Y1hUV0M4YjlsUnlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiIWAwQA
V1WNMA0GCSqGSIb3DQEBCwUAA4IBAQAqpB2sYSXTB8mymaO1CRNiv9LeL8u3hU1u
QXfLpUjCztnfnLrtU7aoiBGo9zaL6KI280zFVc37nmSJu35tSm2gvnvcdC53Vslh
AG3dxXoBNQT/2vX5MnsjY5+tRXDbJh+PINEiF8yRQNK1U8lSWc/aZ3/ZD8MN7thm
p2PnAAyFmPFLL98vQtjEQkzk6beR4ZX4C+FM4UDmlXOlWSlu0GHWsKCZYZrWaV7s
VUd46zzT/rpUhx+KQuAr2ALrSRo7x/ktZBpasdZp9WjMpECQ2Y6M2phzKPQqJBgC
LnEhIe6CNCPn622q3g4zF7l2aigFGOvmOSoH+oMvEWiFJh2xgHGf
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:21:27 2026 by rpki-client