Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/vACXBua6frn6XxXhU6e-bpttEyw.roa
File: vACXBua6frn6XxXhU6e-bpttEyw.roa (raw, json)
Hash identifier: UeXFL+IQbDAX8ty16Dx0/22DrbrGLRV+5hTeRrDoCic=
Subject key identifier: BC:00:97:06:E6:BA:7E:B9:FA:5F:15:E1:53:A7:BE:6E:9B:6D:13:2C
Certificate issuer: /CN=05175be9c0714266ba0745a944c08848a397cb98
Certificate serial: 019F2368B8A8A151932E6D5F690412F86C59
Authority key identifier: 05:17:5B:E9:C0:71:42:66:BA:07:45:A9:44:C0:88:48:A3:97:CB:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/vACXBua6frn6XxXhU6e-bpttEyw.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42264
IP address blocks: 193.33.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b8:a8:a1:51:93:2e:6d:5f:69:04:12:f8:6c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05175be9c0714266ba0745a944c08848a397cb98
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc009706e6ba7eb9fa5f15e153a7be6e9b6d132c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d1:a9:84:20:d3:70:f1:16:a6:75:42:24:1c:
2c:ce:55:59:75:52:fb:01:4f:23:47:40:ad:b9:46:
5a:14:85:c7:d3:71:cd:6e:d3:88:4e:04:48:5c:33:
ac:de:8d:21:e9:46:c2:8b:1b:77:9d:0b:e8:00:3e:
a1:6e:8e:f5:af:ae:05:6b:01:5d:74:eb:c5:f3:10:
1b:b4:f3:70:c7:ae:3b:9a:92:19:ca:06:30:64:cc:
8b:5c:40:08:19:9b:69:85:9b:87:ec:da:bf:41:7d:
c3:54:b2:a7:0d:a1:d1:52:13:ba:46:3a:9e:fe:55:
ed:56:de:3f:00:ff:80:22:f5:76:b8:9d:be:0d:c1:
49:c6:99:1e:6d:21:5a:9d:75:4a:4b:1e:36:b7:aa:
7f:1b:29:1b:6d:d5:58:2d:e2:9f:9f:95:5d:75:c9:
67:9b:28:93:06:81:80:e3:46:4f:8a:af:2c:ff:34:
2a:fd:79:08:a5:4a:7b:2e:ed:a4:bb:ec:6d:f3:31:
16:71:d4:e7:39:32:8d:86:36:ac:4c:64:e8:f8:d7:
77:eb:95:35:3c:7d:ec:5d:2e:40:45:d3:61:37:6b:
05:d3:10:21:e9:4d:84:50:7d:0c:51:a8:71:73:94:
bb:fa:4a:15:2b:b7:3d:ac:19:45:9a:d6:f6:4c:97:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:97:06:E6:BA:7E:B9:FA:5F:15:E1:53:A7:BE:6E:9B:6D:13:2C
X509v3 Authority Key Identifier:
keyid:05:17:5B:E9:C0:71:42:66:BA:07:45:A9:44:C0:88:48:A3:97:CB:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRdb6cBxQma6B0WpRMCISKOXy5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/vACXBua6frn6XxXhU6e-bpttEyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/BRdb6cBxQma6B0WpRMCISKOXy5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.24.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:d1:93:a0:4f:71:1d:99:0e:59:fb:e5:aa:40:67:32:8e:15:
7a:5e:b8:a4:ad:90:64:43:69:34:67:f5:90:91:7f:48:b1:a7:
dc:59:47:f9:f2:45:30:ce:4b:3e:be:e0:ec:4b:b4:a2:32:a5:
68:60:f0:e3:d4:a7:8e:dc:b5:82:c1:c4:a2:bd:e5:b6:4b:04:
ed:12:db:c0:3d:3a:68:b7:e5:07:1c:c6:89:57:17:c6:99:ce:
68:ba:83:d8:b2:9a:dc:80:b4:e5:ed:cd:66:b2:1a:02:d2:ce:
e5:d4:13:d7:cc:77:77:1f:4e:c9:b0:ee:91:d9:c2:5b:d0:70:
ff:60:90:85:9c:1a:f0:03:d9:a0:f2:e8:a5:0f:d3:55:d3:45:
5a:51:aa:cc:68:29:b5:4d:bc:2e:90:f5:ee:95:7c:e5:48:e3:
4e:91:47:86:e7:4a:8c:49:d6:29:24:a4:37:4a:ba:9d:8c:d5:
d3:f2:e3:78:89:54:ac:e0:c4:f2:36:d7:2b:62:1d:58:06:e9:
e0:7f:67:53:18:16:45:f4:ae:c8:a1:dc:93:70:92:4b:70:69:
a1:b2:24:59:af:be:24:56:38:77:9e:1d:c1:97:1f:61:aa:d8:
21:71:8e:c2:d2:46:6f:42:28:ea:a3:de:d5:4a:d7:23:6d:e7:
7f:0e:8d:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaLiooVGTLm1faQQS+GxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTc1YmU5YzA3MTQyNjZiYTA3NDVhOTQ0YzA4ODQ4YTM5
N2NiOTgwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzAwOTcwNmU2YmE3ZWI5ZmE1ZjE1ZTE1M2E3YmU2ZTliNmQxMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9GphCDTcPEWpnVCJBwszlVZdVL7
AU8jR0CtuUZaFIXH03HNbtOITgRIXDOs3o0h6UbCixt3nQvoAD6hbo71r64FawFd
dOvF8xAbtPNwx647mpIZygYwZMyLXEAIGZtphZuH7Nq/QX3DVLKnDaHRUhO6Rjqe
/lXtVt4/AP+AIvV2uJ2+DcFJxpkebSFanXVKSx42t6p/GykbbdVYLeKfn5Vddcln
myiTBoGA40ZPiq8s/zQq/XkIpUp7Lu2ku+xt8zEWcdTnOTKNhjasTGTo+Nd365U1
PH3sXS5ARdNhN2sF0xAh6U2EUH0MUahxc5S7+koVK7c9rBlFmtb2TJf6YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwAlwbmun65+l8V4VOnvm6bbRMsMB8GA1UdIwQY
MBaAFAUXW+nAcUJmugdFqUTAiEijl8uYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJkYjZjQnhRbWE2QjBXcFJNQ0lTS09YeTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjIt
Y2NjNTgxNDA5NGFkLzEvdkFDWEJ1YTZmcm42WHhYaFU2ZS1icHR0RXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC82MDA3ZmYtNWYwYy00YTczLWEzZjItY2NjNTgxNDA5NGFk
LzEvQlJkYjZjQnhRbWE2QjBXcFJNQ0lTS09YeTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSEYMA0G
CSqGSIb3DQEBCwUAA4IBAQCt0ZOgT3EdmQ5Z++WqQGcyjhV6XrikrZBkQ2k0Z/WQ
kX9IsafcWUf58kUwzks+vuDsS7SiMqVoYPDj1KeO3LWCwcSiveW2SwTtEtvAPTpo
t+UHHMaJVxfGmc5ouoPYsprcgLTl7c1mshoC0s7l1BPXzHd3H07JsO6R2cJb0HD/
YJCFnBrwA9mg8uilD9NV00VaUarMaCm1TbwukPXulXzlSONOkUeG50qMSdYpJKQ3
SrqdjNXT8uN4iVSs4MTyNtcrYh1YBungf2dTGBZF9K7IodyTcJJLcGmhsiRZr74k
Vjh3nh3Blx9hqtghcY7C0kZvQijqo97VStcjbed/Do2Q
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:54 2026 by rpki-client