Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/VOA0hCAmccn3JFjBj1YG73p2_z4.roa
File: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (raw, json)
Hash identifier: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=
Subject key identifier: 54:E0:34:84:20:26:71:C9:F7:24:58:C1:8F:56:06:EF:7A:76:FF:3E
Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Certificate serial: 019F23690F48112A9158BA4AB5C2A3EA680F
Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/VOA0hCAmccn3JFjBj1YG73p2_z4.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201464
IP address blocks: 185.74.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0f:48:11:2a:91:58:ba:4a:b5:c2:a3:ea:68:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54e03484202671c9f72458c18f5606ef7a76ff3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:99:f9:1f:67:4c:01:28:23:d9:15:ac:d7:
91:e5:a7:62:6c:0e:83:31:2c:53:68:4e:26:fe:86:
bc:db:64:bb:84:06:2a:da:6c:cb:af:30:6c:d6:24:
f5:01:53:5a:c2:7d:21:4d:dc:8c:a5:b2:86:20:97:
e8:32:03:7d:7a:30:46:95:4c:e6:46:33:c4:11:f4:
39:50:e7:6c:da:a7:4f:95:86:86:ac:90:71:30:07:
8d:36:bc:c3:b8:58:e9:a1:4b:38:ae:b9:ea:6e:13:
ae:ae:68:34:a0:cc:17:5b:00:69:bd:8d:6d:08:fe:
dd:fa:e1:0f:cd:e8:6e:67:9e:76:ef:d1:e1:b2:5d:
d8:f6:82:cf:cd:6d:56:d8:62:76:92:60:d0:7e:a5:
c1:4a:60:21:c5:02:b9:4e:17:32:e1:75:a1:21:8a:
fc:39:19:a0:11:db:5d:05:01:4f:55:f3:60:9a:39:
cc:18:e9:ae:fd:e4:f8:5f:6d:dc:6b:ae:2c:92:03:
07:3d:e7:4e:8c:2c:fe:77:10:2b:61:fb:1b:1f:dd:
bb:3d:4e:b0:c2:e0:3f:07:f0:9c:3b:90:06:fc:dc:
5c:52:1a:57:b8:1f:aa:b6:49:4a:8c:50:1e:ed:9c:
1e:71:32:7f:50:74:65:aa:94:5f:92:6b:58:5c:9d:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E0:34:84:20:26:71:C9:F7:24:58:C1:8F:56:06:EF:7A:76:FF:3E
X509v3 Authority Key Identifier:
keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/VOA0hCAmccn3JFjBj1YG73p2_z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.61.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a3:dc:0a:d3:57:31:97:1a:6d:e7:28:c3:89:ef:80:0d:31:
a8:3d:bc:ef:16:f7:f2:84:a0:e9:64:f2:42:51:ae:5c:d2:66:
17:84:84:0a:b3:81:6d:17:5e:31:d7:f0:7a:d3:93:40:51:26:
1e:c3:61:df:6b:12:e3:b7:9c:2b:16:f4:20:57:11:43:69:3a:
89:c9:ee:c7:56:9c:e9:40:86:f1:d3:d7:1a:8c:f5:8d:0a:7a:
57:ec:81:dd:46:4e:3b:ca:74:ab:9b:5a:89:79:da:35:97:c6:
79:95:dd:5d:10:c8:ca:55:a8:f6:5e:5d:82:aa:e9:b3:17:e7:
35:f2:3c:3a:a1:91:ca:44:71:7e:14:45:c6:1d:0f:40:22:58:
91:4d:e3:66:c4:be:45:55:c2:c8:0f:d4:c0:26:ca:be:0e:6d:
8e:93:cd:94:23:fa:cb:38:92:b9:cd:3f:bf:a3:5b:41:6f:c9:
79:94:90:dd:ab:b4:ce:36:41:f8:6f:1d:79:78:33:94:7d:08:
ee:c0:38:60:72:2a:57:b3:7a:84:b3:9a:07:2e:37:b9:91:88:
83:49:db:84:6c:b5:c9:78:8f:57:f7:b4:4f:7c:e5:47:5a:81:
b4:9e:af:ea:b4:76:f5:29:5f:da:fe:c3:26:aa:a5:2a:32:ab:
84:25:f1:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQ9IESqRWLpKtcKj6mgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm
MGRhMmIwHhcNMjYwNzAyMTUxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGUwMzQ4NDIwMjY3MWM5ZjcyNDU4YzE4ZjU2MDZlZjdhNzZmZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBqZ+R9nTAEoI9kVrNeR5adibA6D
MSxTaE4m/oa822S7hAYq2mzLrzBs1iT1AVNawn0hTdyMpbKGIJfoMgN9ejBGlUzm
RjPEEfQ5UOds2qdPlYaGrJBxMAeNNrzDuFjpoUs4rrnqbhOurmg0oMwXWwBpvY1t
CP7d+uEPzehuZ55279Hhsl3Y9oLPzW1W2GJ2kmDQfqXBSmAhxQK5Thcy4XWhIYr8
ORmgEdtdBQFPVfNgmjnMGOmu/eT4X23ca64skgMHPedOjCz+dxArYfsbH927PU6w
wuA/B/CcO5AG/NxcUhpXuB+qtklKjFAe7ZwecTJ/UHRlqpRfkmtYXJ03pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTgNIQgJnHJ9yRYwY9WBu96dv8+MB8GA1UdIwQY
MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It
ZDFhYmY0ZWUzMmNiLzEvVk9BMGhDQW1jY24zSkZqQmoxWUc3M3AyX3o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi
LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUo9MA0G
CSqGSIb3DQEBCwUAA4IBAQA7o9wK01cxlxpt5yjDie+ADTGoPbzvFvfyhKDpZPJC
Ua5c0mYXhIQKs4FtF14x1/B605NAUSYew2HfaxLjt5wrFvQgVxFDaTqJye7HVpzp
QIbx09cajPWNCnpX7IHdRk47ynSrm1qJedo1l8Z5ld1dEMjKVaj2Xl2CqumzF+c1
8jw6oZHKRHF+FEXGHQ9AIliRTeNmxL5FVcLID9TAJsq+Dm2Ok82UI/rLOJK5zT+/
o1tBb8l5lJDdq7TONkH4bx15eDOUfQjuwDhgcipXs3qEs5oHLje5kYiDSduEbLXJ
eI9X97RPfOVHWoG0nq/qtHb1KV/a/sMmqqUqMquEJfHU
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:51 2026 by rpki-client