Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa
File: V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa (raw, json)
Hash identifier: k7QFZGHM/ZMsVcAH78Z7/y2s4KVJ6ki/nf3Wx24haNo=
Subject key identifier: 57:A6:CA:55:2F:53:DD:E3:D4:08:7F:54:67:E5:53:AE:97:57:9A:D8
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 019F23691A2CDE3BBC146A2A070A456EDC31
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31027
IP address blocks: 185.72.140.0/24 maxlen: 24
185.72.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1a:2c:de:3b:bc:14:6a:2a:07:0a:45:6e:dc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57a6ca552f53dde3d4087f5467e553ae97579ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b8:f9:e8:84:1a:ba:0a:c0:05:9c:71:21:f6:
30:0c:f5:aa:48:78:84:c9:3d:53:0b:9d:f5:e9:ea:
8a:97:a0:ec:cd:4d:d7:64:85:3a:d5:32:cb:00:42:
66:5e:b4:5e:04:2e:9a:97:7e:f1:c8:9a:21:cb:72:
1f:25:13:d5:5c:6d:b5:82:2e:38:19:39:0c:ff:fa:
6c:68:1e:c1:fa:ed:0e:b4:e9:27:0d:9b:78:48:aa:
80:0c:b6:8b:d3:03:a8:e4:3f:32:7a:22:76:fb:bf:
0c:14:62:6c:bd:a0:0c:95:92:ca:18:1c:32:e1:00:
6f:31:33:a5:91:d8:89:db:59:87:06:b4:06:27:62:
c3:77:d8:a0:3d:5e:27:24:0f:aa:d2:e9:13:36:43:
41:df:75:2c:49:bd:24:2d:0c:c0:ae:e3:f1:57:f1:
c0:2e:c1:4d:3f:70:b8:b2:b4:a4:86:0b:8b:b4:19:
6c:b8:30:86:2a:76:bf:b5:12:38:d4:2b:bd:df:d6:
65:7c:09:82:d0:09:0d:cb:44:c6:bc:38:5d:62:4c:
2f:69:7b:f1:81:e4:b2:7b:c0:37:13:2f:b2:e3:f7:
9d:17:c3:0a:9d:0b:5e:6d:06:3f:0f:0f:60:4e:c0:
4d:b8:80:58:60:ff:f9:e6:9a:e8:9e:c3:98:97:66:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A6:CA:55:2F:53:DD:E3:D4:08:7F:54:67:E5:53:AE:97:57:9A:D8
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/V6bKVS9T3ePUCH9UZ-VTrpdXmtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.140.0/23
Signature Algorithm: sha256WithRSAEncryption
67:ec:65:dd:ef:8c:41:8d:fb:9f:89:75:86:09:5d:62:71:d8:
d8:7e:5a:00:db:6b:76:aa:0a:6c:ae:4d:0e:2f:31:f2:8d:b2:
90:05:16:99:fc:58:ee:9e:16:a2:2e:bf:1f:54:9f:49:ec:4a:
b0:17:dd:c9:3a:97:84:c3:95:39:48:f0:cc:09:b8:a8:5d:ee:
2a:3f:9d:4b:3f:a8:b7:c6:f8:32:4c:71:81:13:1c:ff:c9:7f:
fb:a2:06:5f:e9:64:83:96:2c:94:ab:60:13:ff:8f:12:1f:db:
8b:db:27:a7:25:42:8d:c3:b7:eb:96:da:ca:92:4c:a0:a5:6b:
56:5f:f7:b8:7e:bb:6c:6c:c4:eb:af:c8:3d:eb:76:a2:61:48:
1a:e0:2b:d4:84:34:23:3d:9f:56:3f:19:ac:25:b7:3e:3e:52:
31:fc:e6:91:62:5b:db:56:0e:d7:dd:47:fa:bc:bd:88:d9:67:
53:3a:95:b2:56:c9:25:06:f0:51:4f:1d:5b:74:3f:24:b0:63:
54:a6:f9:30:9b:1f:ba:e1:e2:db:ae:23:3d:bc:27:62:6e:86:
a2:f8:97:16:b7:c1:75:64:53:16:96:09:5c:16:fb:48:7d:b3:
ae:cd:57:bc:f7:50:1a:d3:64:84:94:43:47:15:a2:50:38:56:
41:10:fb:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaRos3ju8FGoqBwpFbtwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhNGViZDYxNTFmMWJmMzhkYzU3YTNhMjRkYmI1ZWRjNWE2
YmY5NjcwHhcNMjYwNzAyMTUxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2E2Y2E1NTJmNTNkZGUzZDQwODdmNTQ2N2U1NTNhZTk3NTc5YWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrj56IQaugrABZxxIfYwDPWqSHiE
yT1TC5316eqKl6DszU3XZIU61TLLAEJmXrReBC6al37xyJohy3IfJRPVXG21gi44
GTkM//psaB7B+u0OtOknDZt4SKqADLaL0wOo5D8yeiJ2+78MFGJsvaAMlZLKGBwy
4QBvMTOlkdiJ21mHBrQGJ2LDd9igPV4nJA+q0ukTNkNB33UsSb0kLQzAruPxV/HA
LsFNP3C4srSkhguLtBlsuDCGKna/tRI41Cu939ZlfAmC0AkNy0TGvDhdYkwvaXvx
geSye8A3Ey+y4/edF8MKnQtebQY/Dw9gTsBNuIBYYP/55pronsOYl2bHtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFemylUvU93j1Ah/VGflU66XV5rYMB8GA1UdIwQY
MBaAFMpOvWFR8b843Fejok27Xtxaa/lnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWs2OVlWSHh2empjVjZPaVRidGUzRnByLVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUt
MTMwZTRkYzAxNWFiLzEvVjZiS1ZTOVQzZVBVQ0g5VVotVlRycGRYbXRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iN2I5MzMtN2U4MC00YjM3LWEyODUtMTMwZTRkYzAxNWFi
LzEveWs2OVlWSHh2empjVjZPaVRidGUzRnByLVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUiMMA0G
CSqGSIb3DQEBCwUAA4IBAQBn7GXd74xBjfufiXWGCV1icdjYfloA22t2qgpsrk0O
LzHyjbKQBRaZ/FjunhaiLr8fVJ9J7EqwF93JOpeEw5U5SPDMCbioXe4qP51LP6i3
xvgyTHGBExz/yX/7ogZf6WSDliyUq2AT/48SH9uL2yenJUKNw7frltrKkkygpWtW
X/e4frtsbMTrr8g963aiYUga4CvUhDQjPZ9WPxmsJbc+PlIx/OaRYlvbVg7X3Uf6
vL2I2WdTOpWyVsklBvBRTx1bdD8ksGNUpvkwmx+64eLbriM9vCdiboai+JcWt8F1
ZFMWlglcFvtIfbOuzVe891Aa02SElENHFaJQOFZBEPsS
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:47 2026 by rpki-client