Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa
File: VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa (raw, json)
Hash identifier: nbe4oKw1dzzL8XTpfLmk2OwowG5rknPjlUlPj/nEWbw=
Subject key identifier: 54:3C:D3:31:2B:DF:04:AA:87:10:F9:0F:67:2E:50:C6:DB:B0:53:84
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019DBB88534EFD80ACE9AFB61694A5389D7B
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa
Signing time: Thu 23 Apr 2026 18:09:26 +0000
ROA not before: Thu 23 Apr 2026 18:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39130
IP address blocks: 195.5.124.0/24 maxlen: 24
2a10:d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:88:53:4e:fd:80:ac:e9:af:b6:16:94:a5:38:9d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Apr 23 18:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=543cd3312bdf04aa8710f90f672e50c6dbb05384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:76:22:5d:97:5e:66:02:0a:d7:1e:9a:51:
0d:a1:6a:8d:3a:db:a7:7b:6b:48:00:aa:97:38:65:
06:5b:c0:7b:df:5d:01:83:ab:07:c3:65:89:9d:35:
44:05:89:7a:4f:f4:02:d9:a0:7b:5a:10:1b:b5:91:
2f:ab:cd:41:eb:ab:36:88:a5:54:83:52:a2:c9:49:
8d:aa:34:7c:4c:74:94:c2:89:a0:8e:18:18:09:ea:
1e:11:98:ec:03:96:e5:e4:8c:f0:3a:d9:6a:31:cb:
21:3c:0f:30:ec:82:dd:e2:72:d4:b6:90:f7:96:e0:
d0:27:4a:ad:77:ac:be:50:49:25:9b:eb:aa:95:aa:
1b:3a:38:3d:44:21:66:f3:f9:de:f8:45:cc:73:cc:
22:29:bb:eb:61:df:9a:cf:79:86:ef:a8:4f:3e:ab:
b5:97:ee:73:a7:a6:ba:a2:07:c7:20:c6:ee:4c:88:
1f:44:bb:1b:74:a8:ff:cb:d4:5e:38:72:0b:fe:d6:
48:1e:00:3e:0a:9f:d4:55:aa:68:2d:53:37:60:8c:
d6:60:b5:34:ed:81:08:71:21:fa:52:f6:dd:08:4d:
b2:b0:5b:28:a6:e3:c2:31:ce:cb:76:31:4b:15:8a:
85:ac:6d:03:3e:19:02:30:28:de:85:f8:67:54:70:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3C:D3:31:2B:DF:04:AA:87:10:F9:0F:67:2E:50:C6:DB:B0:53:84
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/VDzTMSvfBKqHEPkPZy5QxtuwU4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.5.124.0/24
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
9c:42:8d:f3:3d:7b:a1:37:11:e6:7d:40:a4:b5:ea:f6:6b:3c:
36:21:8e:21:8e:d3:58:bb:f7:ae:2c:6f:ef:f1:97:7e:d5:02:
43:61:80:a0:67:79:d9:d7:be:0f:58:c8:f0:59:c1:25:39:6e:
e2:77:08:51:66:02:19:bb:90:51:49:d0:85:47:6e:6a:07:de:
ac:9d:35:f4:06:5e:84:40:e4:98:f0:53:ae:8d:03:91:d0:95:
30:8f:b3:2b:ce:0f:96:cf:2b:b9:0d:46:8c:3b:93:3c:64:1f:
72:c7:98:9b:8c:11:65:9a:9e:ed:f5:91:ff:2d:61:92:72:4f:
e9:49:06:9b:42:9b:8a:40:29:98:50:ae:5c:86:3b:ce:87:a7:
1e:56:9e:96:de:25:8d:c5:5d:14:25:a7:ed:be:04:f2:88:9c:
8f:7f:44:79:21:36:90:7f:58:f7:a7:ef:0e:06:bf:a6:8e:3d:
54:9e:fa:33:36:13:90:9c:5d:ec:b9:c9:b8:ae:0d:f8:d1:e5:
29:97:d4:c8:04:5d:a9:f0:b4:0f:9a:cf:20:56:94:47:55:70:
41:6d:d3:be:85:30:44:1c:f5:0a:8f:86:40:e4:3d:59:8f:cf:
c4:12:fb:bf:1e:0a:03:f4:74:d5:e8:19:5d:60:2c:1d:48:c4:
e9:f2:48:21
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ27iFNO/YCs6a+2FpSlOJ17MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjYwNDIzMTgwOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDNjZDMzMTJiZGYwNGFhODcxMGY5MGY2NzJlNTBjNmRiYjA1Mzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIB2Il2XXmYCCtcemlENoWqNOtun
e2tIAKqXOGUGW8B7310Bg6sHw2WJnTVEBYl6T/QC2aB7WhAbtZEvq81B66s2iKVU
g1KiyUmNqjR8THSUwomgjhgYCeoeEZjsA5bl5IzwOtlqMcshPA8w7ILd4nLUtpD3
luDQJ0qtd6y+UEklm+uqlaobOjg9RCFm8/ne+EXMc8wiKbvrYd+az3mG76hPPqu1
l+5zp6a6ogfHIMbuTIgfRLsbdKj/y9ReOHIL/tZIHgA+Cp/UVapoLVM3YIzWYLU0
7YEIcSH6UvbdCE2ysFsopuPCMc7LdjFLFYqFrG0DPhkCMCjehfhnVHDrHwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFQ80zEr3wSqhxD5D2cuUMbbsFOEMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvVkR6VE1TdmZCS3FIRVBrUFp5NVF4dHV3VTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwwV8MA0E
AgACMAcDBQMqEA2AMA0GCSqGSIb3DQEBCwUAA4IBAQCcQo3zPXuhNxHmfUCkter2
azw2IY4hjtNYu/euLG/v8Zd+1QJDYYCgZ3nZ174PWMjwWcElOW7idwhRZgIZu5BR
SdCFR25qB96snTX0Bl6EQOSY8FOujQOR0JUwj7Mrzg+Wzyu5DUaMO5M8ZB9yx5ib
jBFlmp7t9ZH/LWGSck/pSQabQpuKQCmYUK5chjvOh6ceVp6W3iWNxV0UJaftvgTy
iJyPf0R5ITaQf1j3p+8OBr+mjj1UnvozNhOQnF3sucm4rg340eUpl9TIBF2p8LQP
ms8gVpRHVXBBbdO+hTBEHPUKj4ZA5D1Zj8/EEvu/HgoD9HTV6BldYCwdSMTp8kgh
-----END CERTIFICATE-----
Generated at Wed May 13 07:18:02 2026 by rpki-client