Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/fOZjMq6DWjoIdxKxNEmi3Y-VPxc.roa
File: fOZjMq6DWjoIdxKxNEmi3Y-VPxc.roa (raw, json)
Hash identifier: X150bVB3bSd2kaIkmxlixqWqD9eth8YYVF/OW12Kk2g=
Subject key identifier: 7C:E6:63:32:AE:83:5A:3A:08:77:12:B1:34:49:A2:DD:8F:95:3F:17
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019EEEFDC21A6516675D090D1A5BC1E77FC6
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/fOZjMq6DWjoIdxKxNEmi3Y-VPxc.roa
Signing time: Mon 22 Jun 2026 11:01:07 +0000
ROA not before: Mon 22 Jun 2026 11:01:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 95.85.192.0/22 maxlen: 22
95.85.192.0/24 maxlen: 24
95.85.193.0/24 maxlen: 24
95.85.194.0/24 maxlen: 24
95.85.195.0/24 maxlen: 24
95.85.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:fd:c2:1a:65:16:67:5d:09:0d:1a:5b:c1:e7:7f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Jun 22 11:01:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ce66332ae835a3a087712b13449a2dd8f953f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8d:49:9e:ee:93:cb:03:9b:d3:1c:c6:3d:e7:
01:33:c1:7b:5c:3e:1f:24:62:48:f9:04:e0:e9:6e:
39:27:aa:1d:cb:69:5b:ed:5e:7d:22:55:5b:5b:bf:
89:dd:6d:d4:2b:a8:2c:84:ff:35:75:00:6d:9a:ca:
f5:6c:e5:0c:f7:f2:50:4e:cc:68:12:f3:61:cc:ac:
c3:f5:c0:94:6e:e2:7b:f1:92:53:15:8a:bb:49:5a:
a0:cf:8b:01:1e:bf:2f:45:04:0c:7b:22:c5:a8:be:
2a:4e:67:3c:98:b7:3b:db:2a:2a:d0:48:d7:d9:96:
a4:fd:95:eb:dd:83:6d:a6:d6:c8:d2:f8:42:f3:5f:
b5:27:34:ad:12:73:ff:e2:42:d1:4b:0a:8c:c5:86:
82:05:3e:cf:0f:c9:c2:b8:ef:a8:2f:73:f7:1e:1b:
40:0a:77:79:f6:f6:85:5f:28:05:ee:c1:fa:df:b9:
23:15:f0:2b:a6:5a:8b:d3:68:ec:ed:a9:6c:90:51:
86:17:d4:95:a4:0d:3d:31:c2:5e:71:3a:7b:70:b7:
16:6a:3f:c7:0c:7f:1d:2f:c3:ee:bb:6d:79:b6:49:
38:a0:4a:1e:59:0b:91:8b:5a:b6:cd:65:e1:d2:26:
f6:3a:fd:d1:e7:14:f9:9f:c1:b7:39:62:f2:73:9e:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:63:32:AE:83:5A:3A:08:77:12:B1:34:49:A2:DD:8F:95:3F:17
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/fOZjMq6DWjoIdxKxNEmi3Y-VPxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/22
95.85.216.0/22
Signature Algorithm: sha256WithRSAEncryption
60:f9:84:73:c9:16:04:b5:3d:fb:e5:c5:15:f7:e3:18:7d:14:
ab:dd:c9:a9:85:9e:95:84:8d:5f:7a:88:7c:86:30:12:55:82:
57:4f:aa:30:da:45:b3:23:1b:ed:60:a6:0a:3d:d3:9d:15:30:
be:de:13:85:87:46:eb:4d:d5:16:2d:10:cb:6c:bf:ee:d5:45:
1d:70:74:06:fe:04:80:d0:cb:7c:85:8e:f8:9a:eb:51:10:28:
43:15:d9:97:be:45:04:f7:9e:ce:d8:6e:3a:20:4b:29:e8:d3:
2f:f2:d5:64:43:29:03:0f:a4:5e:fe:d0:11:7c:07:c6:ff:67:
4c:a6:7e:aa:0a:74:1d:9d:4f:c0:4d:11:79:bc:6c:8b:39:5b:
24:a6:ed:bf:dc:b2:5c:65:e8:32:06:40:3b:d5:c4:a3:92:44:
45:b1:cd:1c:7e:ee:b8:51:ac:b0:a2:e1:d5:4b:2c:88:8d:54:
be:2e:07:e8:5c:9d:64:d8:c3:09:c5:7e:c4:77:46:0d:db:39:
12:36:60:7a:32:9b:42:0b:23:6d:fb:34:fc:11:92:5d:e7:1f:
7d:36:4b:8e:e6:54:12:77:c3:40:75:40:06:10:6d:14:1f:4d:
38:15:fe:5b:c0:29:0f:af:3a:32:9f:93:fb:6a:8e:f3:56:3b:
cf:25:e3:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7u/cIaZRZnXQkNGlvB53/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjYwNjIyMTEwMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2U2NjMzMmFlODM1YTNhMDg3NzEyYjEzNDQ5YTJkZDhmOTUzZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjI1Jnu6TywOb0xzGPecBM8F7XD4f
JGJI+QTg6W45J6ody2lb7V59IlVbW7+J3W3UK6gshP81dQBtmsr1bOUM9/JQTsxo
EvNhzKzD9cCUbuJ78ZJTFYq7SVqgz4sBHr8vRQQMeyLFqL4qTmc8mLc72yoq0EjX
2Zak/ZXr3YNtptbI0vhC81+1JzStEnP/4kLRSwqMxYaCBT7PD8nCuO+oL3P3HhtA
Cnd59vaFXygF7sH637kjFfArplqL02js7alskFGGF9SVpA09McJecTp7cLcWaj/H
DH8dL8Puu215tkk4oEoeWQuRi1q2zWXh0ib2Ov3R5xT5n8G3OWLyc56TcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHzmYzKug1o6CHcSsTRJot2PlT8XMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvZk9aak1xNkRXam9JZHhLeE5FbWkzWS1WUHhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1XAAwQC
X1XYMA0GCSqGSIb3DQEBCwUAA4IBAQBg+YRzyRYEtT375cUV9+MYfRSr3cmphZ6V
hI1feoh8hjASVYJXT6ow2kWzIxvtYKYKPdOdFTC+3hOFh0brTdUWLRDLbL/u1UUd
cHQG/gSA0Mt8hY74mutREChDFdmXvkUE957O2G46IEsp6NMv8tVkQykDD6Re/tAR
fAfG/2dMpn6qCnQdnU/ATRF5vGyLOVskpu2/3LJcZegyBkA71cSjkkRFsc0cfu64
UaywouHVSyyIjVS+LgfoXJ1k2MMJxX7Ed0YN2zkSNmB6MptCCyNt+zT8EZJd5x99
NkuO5lQSd8NAdUAGEG0UH004Ff5bwCkPrzoyn5P7ao7zVjvPJePL
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:29 2026 by rpki-client