Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa
File: vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa (raw, json)
Hash identifier: kvS6Muny5DxKn7c0ClorB/3JIoMx7iQSiPe4vnhIL2s=
Subject key identifier: BC:7A:52:7A:19:38:6E:76:45:7B:B2:47:54:AB:E1:F1:7A:36:91:1C
Certificate issuer: /CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Certificate serial: 019F2368D5EB2D2F3E5547A0EC119F5FABB8
Authority key identifier: 5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51728
IP address blocks: 80.66.160.0/20 maxlen: 20
91.190.192.0/21 maxlen: 21
146.66.24.0/22 maxlen: 22
185.40.88.0/22 maxlen: 22
185.40.88.0/24 maxlen: 24
185.40.89.0/24 maxlen: 24
185.40.90.0/24 maxlen: 24
185.40.91.0/24 maxlen: 24
2a00:ac00::/32 maxlen: 32
2a00:ac01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:eb:2d:2f:3e:55:47:a0:ec:11:9f:5f:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a7aca8dba5a49f9e9d9ceb31931ce2343a005bc
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc7a527a19386e76457bb24754abe1f17a36911c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:26:43:21:58:c6:10:cf:b8:87:d4:d7:d7:df:
6a:be:58:61:8a:21:56:4f:b4:d0:fb:53:1c:14:dc:
fc:7d:93:eb:1a:f7:58:7a:0f:3c:3f:ce:8f:74:5c:
c0:87:44:38:e7:f6:3f:66:70:37:25:dd:41:e8:ba:
dc:30:0e:b3:67:08:13:62:46:da:42:39:6c:ef:9e:
e7:b2:95:ae:b3:f3:57:23:cb:99:5a:34:db:19:94:
28:ea:24:06:7e:c8:b3:1c:24:0f:73:c4:99:d3:5e:
f6:20:a9:10:53:e6:57:c6:ce:9e:32:a4:3e:c8:6d:
fd:e3:fb:ae:60:f4:e6:2a:7b:a2:fb:33:40:37:7b:
65:e8:a0:50:45:cc:fe:60:8f:77:8b:09:aa:75:bd:
92:dc:a2:a8:e5:10:13:7c:db:09:af:d2:61:8f:2a:
d1:97:8c:55:bc:59:c4:21:87:4d:6f:1b:13:01:0d:
ce:ee:59:f1:ef:df:66:38:e5:cf:e2:4f:e2:37:e5:
39:f4:9e:ed:9a:30:30:cc:2e:4f:56:5a:f0:fb:5c:
7a:a4:a4:71:6b:62:4d:2d:20:73:1d:c0:51:6e:2c:
41:a0:77:42:1f:6f:8e:58:f5:76:73:73:fa:ef:41:
a4:ef:7d:5a:49:68:11:b6:a2:2f:e6:35:79:a7:e4:
75:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:52:7A:19:38:6E:76:45:7B:B2:47:54:AB:E1:F1:7A:36:91:1C
X509v3 Authority Key Identifier:
keyid:5A:7A:CA:8D:BA:5A:49:F9:E9:D9:CE:B3:19:31:CE:23:43:A0:05:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnrKjbpaSfnp2c6zGTHOI0OgBbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/vHpSehk4bnZFe7JHVKvh8Xo2kRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5bc1cc-d02c-48ee-9935-023b6c0793f1/1/WnrKjbpaSfnp2c6zGTHOI0OgBbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.160.0/20
91.190.192.0/21
146.66.24.0/22
185.40.88.0/22
IPv6:
2a00:ac00::/31
Signature Algorithm: sha256WithRSAEncryption
58:2b:39:4b:9d:dc:ce:54:0f:5a:54:3b:34:20:3d:f2:bb:d0:
a1:cc:04:ec:c1:fb:fc:e7:14:c2:2d:28:f3:89:01:4a:cb:47:
f9:ca:90:f5:17:20:55:90:62:2d:2c:fe:70:78:7c:ae:06:2f:
bc:4c:23:ed:f9:80:1b:1e:6c:52:46:35:4a:6a:e5:ed:75:e1:
75:46:f4:32:c4:93:67:08:e9:12:81:52:0e:58:45:7f:93:28:
de:66:57:1a:de:f6:45:c7:2c:88:ea:fb:8f:76:f4:37:f3:3e:
2f:86:3d:44:f6:17:76:79:f2:82:8c:36:c5:d2:9e:09:03:d4:
65:57:81:dc:cc:b8:b9:04:3a:5f:66:41:c1:b5:5a:65:d1:ec:
f9:f3:9f:ba:f6:50:1f:a2:e7:1e:50:9b:0c:98:06:d1:11:9e:
2c:57:b6:03:ce:35:5e:ba:f1:f9:f3:8e:5b:0b:d6:a4:ee:6d:
bb:e6:a7:34:52:47:73:44:ab:c7:36:dd:61:62:7f:1f:68:79:
5c:82:1d:70:36:e7:9c:d0:3c:5e:08:46:31:72:ea:14:97:ca:
90:5e:dc:ee:0c:7c:4f:55:5e:af:c9:1b:7e:f1:30:f5:db:29:
9a:c8:11:4f:43:aa:80:07:df:6b:d1:d0:59:e6:72:43:9d:0d:
9f:32:d3:f1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ8jaNXrLS8+VUeg7BGfX6u4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhN2FjYThkYmE1YTQ5ZjllOWQ5Y2ViMzE5MzFjZTIzNDNh
MDA1YmMwHhcNMjYwNzAyMTUxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzdhNTI3YTE5Mzg2ZTc2NDU3YmIyNDc1NGFiZTFmMTdhMzY5MTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CZDIVjGEM+4h9TX199qvlhhiiFW
T7TQ+1McFNz8fZPrGvdYeg88P86PdFzAh0Q45/Y/ZnA3Jd1B6LrcMA6zZwgTYkba
Qjls757nspWus/NXI8uZWjTbGZQo6iQGfsizHCQPc8SZ0172IKkQU+ZXxs6eMqQ+
yG394/uuYPTmKnui+zNAN3tl6KBQRcz+YI93iwmqdb2S3KKo5RATfNsJr9JhjyrR
l4xVvFnEIYdNbxsTAQ3O7lnx799mOOXP4k/iN+U59J7tmjAwzC5PVlrw+1x6pKRx
a2JNLSBzHcBRbixBoHdCH2+OWPV2c3P670Gk731aSWgRtqIv5jV5p+R16QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFLx6UnoZOG52RXuyR1Sr4fF6NpEcMB8GA1UdIwQY
MBaAFFp6yo26Wkn56dnOsxkxziNDoAW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUt
MDIzYjZjMDc5M2YxLzEvdkhwU2VoazRiblpGZTdKSFZLdmg4WG8ya1J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi81YmMxY2MtZDAyYy00OGVlLTk5MzUtMDIzYjZjMDc5M2Yx
LzEvV25yS2picGFTZm5wMmM2ekdUSE9JME9nQmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEUEKgAwQD
W77AAwQCkkIYAwQCuShYMA0EAgACMAcDBQEqAKwAMA0GCSqGSIb3DQEBCwUAA4IB
AQBYKzlLndzOVA9aVDs0ID3yu9ChzATswfv85xTCLSjziQFKy0f5ypD1FyBVkGIt
LP5weHyuBi+8TCPt+YAbHmxSRjVKauXtdeF1RvQyxJNnCOkSgVIOWEV/kyjeZlca
3vZFxyyI6vuPdvQ38z4vhj1E9hd2efKCjDbF0p4JA9RlV4HczLi5BDpfZkHBtVpl
0ez585+69lAfouceUJsMmAbREZ4sV7YDzjVeuvH5845bC9ak7m275qc0UkdzRKvH
Nt1hYn8faHlcgh1wNuec0DxeCEYxcuoUl8qQXtzuDHxPVV6vyRt+8TD12ymayBFP
Q6qAB99r0dBZ5nJDnQ2fMtPx
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:50 2026 by rpki-client