Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VzlTQUP4xxcFSP2rWKznuvpsGzM.roa
File: VzlTQUP4xxcFSP2rWKznuvpsGzM.roa (raw, json)
Hash identifier: OcalWU4oXbCnWYM5C6sRRluOG+TFabiLZyAeHp82xvA=
Subject key identifier: 57:39:53:41:43:F8:C7:17:05:48:FD:AB:58:AC:E7:BA:FA:6C:1B:33
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0CF2551361AFE1ED7A4159BC2EA4F193E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VzlTQUP4xxcFSP2rWKznuvpsGzM.roa
Signing time: Wed 23 Sep 2026 16:42:04 +0000
ROA not before: Wed 23 Sep 2026 16:42:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 5.181.183.0/24 maxlen: 24
185.176.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:25:51:36:1a:fe:1e:d7:a4:15:9b:c2:ea:4f:19:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 23 16:42:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5739534143f8c7170548fdab58ace7bafa6c1b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a7:e7:a3:05:fd:31:97:eb:38:2f:63:b2:43:
91:1a:9d:e4:c7:6d:05:cb:6b:32:49:0e:4b:65:ef:
c8:2a:d3:f4:f7:e9:26:84:87:75:03:e9:81:53:13:
f3:95:2c:9d:72:de:d2:19:94:7a:8d:ce:3f:68:54:
cf:05:23:d0:4a:db:20:a4:65:09:56:21:07:73:72:
48:1e:03:d5:de:2c:62:1e:ad:58:1a:de:2c:d5:fa:
25:43:cb:a0:a6:05:13:3c:12:7a:20:ac:bc:36:71:
cf:cb:b6:f0:6e:5e:e4:d1:83:7b:a6:34:ad:1e:63:
ff:30:13:3e:7b:e8:a7:9c:18:54:d1:56:72:93:3c:
fb:1f:c8:37:c8:8f:cf:04:69:f6:65:fe:91:b5:ee:
22:f7:d0:2e:71:ec:d1:08:ec:26:7a:0b:4b:ae:5c:
11:42:35:8f:96:6d:79:4c:e6:69:0c:cf:f5:da:23:
11:8c:e5:4f:3a:9e:b1:eb:1c:c3:81:99:79:43:4b:
e9:34:0f:56:83:fe:38:32:c4:61:13:5d:e8:01:ef:
cb:44:c0:00:ac:b7:68:c7:31:5e:06:c8:0a:a3:fe:
1a:76:df:36:62:80:3a:91:28:d6:0e:7c:de:b4:c9:
4c:dc:21:21:1b:5b:3d:0d:df:d7:7e:25:17:88:df:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:53:41:43:F8:C7:17:05:48:FD:AB:58:AC:E7:BA:FA:6C:1B:33
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/VzlTQUP4xxcFSP2rWKznuvpsGzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.183.0/24
185.176.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:23:8e:3a:13:a7:ef:70:8e:f1:69:1b:e2:57:a4:a7:d7:78:
8c:4b:fa:db:7e:85:4a:21:ac:16:75:13:2e:e1:e0:73:0f:6d:
91:b6:b7:28:ce:40:cf:cd:3b:1e:ca:69:dc:1b:30:91:d5:a7:
76:99:49:85:c7:83:50:74:0a:15:d7:38:b8:48:e9:85:89:6c:
aa:1a:63:de:9e:ab:20:f9:b2:1a:88:41:ea:c7:3d:aa:62:5c:
b4:d9:e7:6c:e3:df:49:c0:e6:04:8b:1f:6a:50:cd:1a:b3:d4:
7a:a8:2a:d3:aa:c6:1b:f1:94:ab:88:78:60:9b:c0:6c:c0:88:
e1:ee:c0:9d:d0:4e:7e:6c:77:db:af:58:14:9c:e3:48:14:5a:
71:4b:4e:f3:cd:77:25:c1:2d:63:9a:a6:e3:de:05:ed:4b:cf:
67:4b:5a:6e:08:d4:b5:e4:44:5b:25:dc:43:6a:4e:71:4b:b5:
82:ca:57:93:6d:55:5f:7e:87:0c:95:3b:8f:f6:d8:3f:84:6c:
ef:8c:dd:37:65:96:d9:38:a5:6a:bd:36:fc:d0:b2:56:0f:67:
a2:89:13:a6:cf:17:41:c6:4c:8e:77:87:d2:80:c0:b3:8e:48:
bd:85:8f:38:af:26:62:e8:b5:9c:54:7c:04:60:77:39:f7:c3:
9a:72:0f:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDPJVE2Gv4e16QVm8LqTxk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTIzMTY0MjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzM5NTM0MTQzZjhjNzE3MDU0OGZkYWI1OGFjZTdiYWZhNmMxYjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqfnowX9MZfrOC9jskORGp3kx20F
y2sySQ5LZe/IKtP09+kmhId1A+mBUxPzlSydct7SGZR6jc4/aFTPBSPQStsgpGUJ
ViEHc3JIHgPV3ixiHq1YGt4s1folQ8ugpgUTPBJ6IKy8NnHPy7bwbl7k0YN7pjSt
HmP/MBM+e+innBhU0VZykzz7H8g3yI/PBGn2Zf6Rte4i99AucezRCOwmegtLrlwR
QjWPlm15TOZpDM/12iMRjOVPOp6x6xzDgZl5Q0vpNA9Wg/44MsRhE13oAe/LRMAA
rLdoxzFeBsgKo/4adt82YoA6kSjWDnzetMlM3CEhG1s9Dd/XfiUXiN+IuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFc5U0FD+McXBUj9q1is57r6bBszMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVnpsVFFVUDR4eGNGU1AycldLem51dnBzR3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbW3AwQA
ubBdMA0GCSqGSIb3DQEBCwUAA4IBAQBcI446E6fvcI7xaRviV6Sn13iMS/rbfoVK
IawWdRMu4eBzD22RtrcozkDPzTseymncGzCR1ad2mUmFx4NQdAoV1zi4SOmFiWyq
GmPenqsg+bIaiEHqxz2qYly02eds499JwOYEix9qUM0as9R6qCrTqsYb8ZSriHhg
m8BswIjh7sCd0E5+bHfbr1gUnONIFFpxS07zzXclwS1jmqbj3gXtS89nS1puCNS1
5ERbJdxDak5xS7WCyleTbVVffocMlTuP9tg/hGzvjN03ZZbZOKVqvTb80LJWD2ei
iROmzxdBxkyOd4fSgMCzjki9hY84ryZi6LWcVHwEYHc598Oacg9j
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:23:51 2026 by rpki-client