Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/vvVsYWWoAOYdpjYQrdRCqadNLp0.roa
File: vvVsYWWoAOYdpjYQrdRCqadNLp0.roa (raw, json)
Hash identifier: 7wSWVSVEK2tx71oit1iR5MZZ41C88wL0lV1CJmf846k=
Subject key identifier: BE:F5:6C:61:65:A8:00:E6:1D:A6:36:10:AD:D4:42:A9:A7:4D:2E:9D
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 01A0383C4001E97785EE3E8E1F6D7B1D90E1
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/vvVsYWWoAOYdpjYQrdRCqadNLp0.roa
Signing time: Tue 25 Aug 2026 09:24:27 +0000
ROA not before: Tue 25 Aug 2026 09:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51265
IP address blocks: 62.240.128.0/19 maxlen: 24
62.240.135.0/24 maxlen: 24
62.240.136.0/24 maxlen: 24
62.240.137.0/24 maxlen: 24
62.240.144.0/21 maxlen: 21
83.216.32.0/19 maxlen: 23
83.216.32.0/20 maxlen: 20
83.216.48.0/20 maxlen: 20
83.216.48.0/21 maxlen: 21
83.216.60.0/22 maxlen: 22
176.126.39.0/24 maxlen: 24
178.157.4.0/22 maxlen: 24
185.44.52.0/22 maxlen: 23
185.69.244.0/22 maxlen: 24
193.9.252.0/23 maxlen: 24
193.9.252.0/24 maxlen: 24
193.9.253.0/24 maxlen: 24
2a04:9540::/29 maxlen: 30
2a07:1740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:3c:40:01:e9:77:85:ee:3e:8e:1f:6d:7b:1d:90:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Aug 25 09:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bef56c6165a800e61da63610add442a9a74d2e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:97:cf:f3:59:54:11:d0:19:89:70:fe:c6:e5:
87:48:98:68:d9:50:cc:05:d9:8b:e0:37:44:40:23:
4e:c0:3d:01:7e:94:16:7c:df:ee:eb:92:01:ae:b0:
63:60:15:c0:41:f9:73:a5:7f:68:4a:8d:74:7c:76:
cc:a3:9b:73:cf:7d:d7:7b:bb:06:6c:bf:22:3e:fb:
8e:82:a7:d1:22:69:29:66:0d:89:97:5d:ad:da:d0:
a5:8d:d5:ed:c5:5f:fe:a2:bc:96:fc:51:3b:fd:ef:
ae:ef:62:74:46:c9:09:f1:80:51:d8:c5:b8:4f:7c:
9c:83:89:18:63:79:14:58:34:82:ef:d6:58:bd:dd:
e9:80:65:d0:6d:68:fc:bf:9c:e1:e8:cb:01:04:0f:
18:9f:bb:9d:72:35:04:7c:a2:c9:83:95:85:a7:ab:
b6:67:af:89:85:e7:5e:92:7f:93:67:a6:27:8e:79:
74:db:92:3c:ff:0a:f4:8a:eb:53:4d:53:0a:2d:5d:
cb:38:a3:31:6e:6b:7c:88:03:f6:af:35:ef:6d:fd:
d4:ce:8d:57:e7:b2:ec:e4:58:d6:f3:56:4f:77:8b:
f7:fe:ab:3e:c7:81:35:af:0b:e4:c6:d7:49:18:02:
45:45:8f:1e:6a:d6:7e:1a:75:35:e3:0f:dc:33:3a:
ee:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F5:6C:61:65:A8:00:E6:1D:A6:36:10:AD:D4:42:A9:A7:4D:2E:9D
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/vvVsYWWoAOYdpjYQrdRCqadNLp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.240.128.0/19
83.216.32.0/19
176.126.39.0/24
178.157.4.0/22
185.44.52.0/22
185.69.244.0/22
193.9.252.0/23
IPv6:
2a04:9540::/29
2a07:1740::/29
Signature Algorithm: sha256WithRSAEncryption
03:4f:e1:85:52:3b:9f:8b:a5:16:a5:48:05:f7:9e:dd:4d:43:
f9:8f:98:98:22:ab:14:b5:53:a1:de:fd:e2:69:90:98:58:12:
ca:9a:fd:09:ff:65:a0:f4:b0:e2:62:40:d6:88:bf:ce:9f:e3:
c3:e5:fb:46:7e:86:63:5e:af:ac:6c:58:6d:cf:10:cd:72:b2:
1b:f3:d3:8f:d1:7c:ea:76:08:06:d9:c8:2d:2c:95:d3:ca:38:
fc:81:1a:91:e1:d4:25:cb:79:09:37:33:ea:50:c7:f6:b7:4d:
11:21:17:c2:8a:7b:8a:45:77:64:20:14:1c:6f:b1:60:13:ac:
64:ad:22:76:f5:ac:59:27:90:6f:eb:21:0f:f3:af:53:79:88:
26:cf:2b:02:e2:22:39:6e:a1:74:4d:88:7a:75:fa:9d:3f:9f:
09:0e:44:a7:56:2c:a0:62:14:01:03:f6:97:82:9c:5b:1f:fc:
76:fd:46:9e:13:1b:8d:be:ca:3c:e6:93:56:81:95:db:03:68:
d1:fb:09:45:98:d6:8d:7b:20:f5:cd:15:ff:fb:ff:ad:11:8e:
f6:a4:65:5e:6f:d3:f3:dd:53:a9:0a:72:45:cd:24:cf:51:2f:
e8:87:4c:9a:a5:08:75:7d:37:da:32:35:20:4c:31:a3:e1:e9:
0d:d2:70:31
-----BEGIN CERTIFICATE-----
MIIFNzCCBB+gAwIBAgISAaA4PEAB6XeF7j6OH217HZDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYmZkMDZjZTg1NWI2MmQ5YjY4OGNkOGM1MzVkNWY0OTRj
ZDM5MzIwHhcNMjYwODI1MDkyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWY1NmM2MTY1YTgwMGU2MWRhNjM2MTBhZGQ0NDJhOWE3NGQyZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJfP81lUEdAZiXD+xuWHSJho2VDM
BdmL4DdEQCNOwD0BfpQWfN/u65IBrrBjYBXAQflzpX9oSo10fHbMo5tzz33Xe7sG
bL8iPvuOgqfRImkpZg2Jl12t2tCljdXtxV/+oryW/FE7/e+u72J0RskJ8YBR2MW4
T3ycg4kYY3kUWDSC79ZYvd3pgGXQbWj8v5zh6MsBBA8Yn7udcjUEfKLJg5WFp6u2
Z6+Jhedekn+TZ6Ynjnl025I8/wr0iutTTVMKLV3LOKMxbmt8iAP2rzXvbf3Uzo1X
57Ls5FjW81ZPd4v3/qs+x4E1rwvkxtdJGAJFRY8eatZ+GnU14w/cMzruTQIDAQAB
o4ICQzCCAj8wHQYDVR0OBBYEFL71bGFlqADmHaY2EK3UQqmnTS6dMB8GA1UdIwQY
MBaAFKC/0GzoVbYtm2iM2MU11fSUzTkyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2Ut
NjcxODM5MjAwNjA0LzEvdnZWc1lXV29BT1lkcGpZUXJkUkNxYWROTHAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wMzMxNmQtMDRlMC00NjYwLWE2M2UtNjcxODM5MjAwNjA0
LzEvb0xfUWJPaFZ0aTJiYUl6WXhUWFY5SlROT1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQFPvCAAwQF
U9ggAwQAsH4nAwQCsp0EAwQCuSw0AwQCuUX0AwQBwQn8MBQEAgACMA4DBQMqBJVA
AwUDKgcXQDANBgkqhkiG9w0BAQsFAAOCAQEAA0/hhVI7n4ulFqVIBfee3U1D+Y+Y
mCKrFLVTod794mmQmFgSypr9Cf9loPSw4mJA1oi/zp/jw+X7Rn6GY16vrGxYbc8Q
zXKyG/PTj9F86nYIBtnILSyV08o4/IEakeHUJct5CTcz6lDH9rdNESEXwop7ikV3
ZCAUHG+xYBOsZK0idvWsWSeQb+shD/OvU3mIJs8rAuIiOW6hdE2IenX6nT+fCQ5E
p1YsoGIUAQP2l4KcWx/8dv1GnhMbjb7KPOaTVoGV2wNo0fsJRZjWjXsg9c0V//v/
rRGO9qRlXm/T891TqQpyRc0kz1Ev6IdMmqUIdX032jI1IEwxo+HpDdJwMQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 18:55:17 2026 by rpki-client