Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/vbO01iTF42tRMwA5q0Hx_ZSOWzM.roa
File: vbO01iTF42tRMwA5q0Hx_ZSOWzM.roa (raw, json)
Hash identifier: HhFXaFuIqa2B3sITnz7Kodu7bjvQZnP06g1lfX1UfbI=
Subject key identifier: BD:B3:B4:D6:24:C5:E3:6B:51:33:00:39:AB:41:F1:FD:94:8E:5B:33
Certificate issuer: /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial: 019DAE9273519D8FEC0B30D0DE76B2CF8246
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/vbO01iTF42tRMwA5q0Hx_ZSOWzM.roa
Signing time: Tue 21 Apr 2026 05:45:26 +0000
ROA not before: Tue 21 Apr 2026 05:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50572
IP address blocks: 37.49.240.0/20 maxlen: 20
91.211.168.0/24 maxlen: 24
91.211.169.0/24 maxlen: 24
91.211.170.0/23 maxlen: 23
109.205.216.0/21 maxlen: 21
185.5.20.0/22 maxlen: 22
2a02:1380::/32 maxlen: 32
2a02:1381::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ae:92:73:51:9d:8f:ec:0b:30:d0:de:76:b2:cf:82:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Validity
Not Before: Apr 21 05:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb3b4d624c5e36b51330039ab41f1fd948e5b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:7d:2e:9a:7e:ea:9c:52:06:46:8c:e4:e2:
54:a8:66:aa:80:03:37:54:8f:80:01:47:24:de:8a:
93:3d:4a:56:5e:41:e2:6c:ae:f8:9c:28:25:54:10:
e6:c6:ff:ef:67:93:ec:e2:83:f9:43:c7:b2:7c:7e:
7c:2e:8a:db:ce:66:de:0f:34:db:7c:aa:8b:cf:f0:
4d:4a:30:06:58:57:90:08:58:d9:ec:3f:3e:4e:23:
ee:ae:9c:25:33:0e:9d:54:99:5f:e6:31:59:6b:fc:
07:fc:d2:16:3d:21:5c:22:8c:cf:db:b6:b0:bc:24:
b6:53:c3:e6:9c:ea:3a:e2:ad:76:55:83:08:88:e0:
dc:73:b5:bc:5f:c5:65:0c:b1:62:da:b7:18:54:1d:
e7:38:c5:a6:2f:7b:7b:b3:60:59:64:ce:82:52:65:
b1:15:5a:eb:35:02:50:93:78:e4:e5:0d:ca:7a:97:
0f:ec:0d:b7:85:00:12:86:ff:71:e9:f6:76:b5:a0:
fd:41:a0:d3:fb:2f:f8:15:36:8b:7e:2d:62:c5:b6:
5a:8c:84:d6:04:37:e7:a8:c9:ef:3f:ac:5d:93:61:
2a:e7:d8:63:b2:b5:ce:4b:98:12:bf:84:6a:74:06:
4e:52:be:bf:c9:09:6e:2d:b2:12:2a:f3:0c:15:f6:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:B4:D6:24:C5:E3:6B:51:33:00:39:AB:41:F1:FD:94:8E:5B:33
X509v3 Authority Key Identifier:
keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/vbO01iTF42tRMwA5q0Hx_ZSOWzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.240.0/20
91.211.168.0/22
109.205.216.0/21
185.5.20.0/22
IPv6:
2a02:1380::/31
Signature Algorithm: sha256WithRSAEncryption
04:1c:15:d5:eb:6f:10:11:07:28:bd:e1:3f:e2:82:77:ac:1c:
0e:1e:07:2f:28:be:ed:60:07:b0:7f:5f:d8:77:59:b5:6f:ac:
df:ed:cc:9a:29:f5:3c:37:57:6a:a1:69:69:3d:dd:d0:70:9e:
3a:85:5f:a3:54:fe:61:fc:4b:25:31:a5:db:0a:67:a0:83:2c:
31:24:39:38:e1:0b:0f:a8:40:72:f5:ef:aa:c5:e5:d3:32:7e:
8a:e0:ca:e0:30:b4:d4:5d:31:5f:6d:95:b2:3d:56:04:11:53:
90:71:80:8f:d6:fa:d7:b6:f6:88:0f:20:85:52:c2:50:fd:8d:
e1:51:11:b1:61:e7:aa:cf:2d:ed:81:73:d1:2e:2b:f8:77:5c:
61:00:d0:2b:9a:03:85:6d:be:d8:d1:c9:69:f2:5d:2c:9b:56:
3d:ce:4a:f8:3f:65:40:ce:e2:f6:0d:ae:96:07:6d:4a:fe:e8:
69:63:fc:4d:0b:00:79:87:d2:b0:4a:ba:1a:82:23:fa:b9:69:
ff:2c:22:51:d0:fe:35:f0:61:1e:6a:4f:1e:c9:42:56:9f:e6:
17:99:29:72:5a:ad:f8:cb:67:90:34:0f:8e:32:ba:a0:63:af:
14:a4:17:08:17:5b:ae:7e:54:37:4f:8b:dc:32:6c:87:ee:96:
51:6b:ad:e7
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ2uknNRnY/sCzDQ3nayz4JGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YmMxYWRmYmYzNjI2NDhmYzYzNWMzMzMyZjM4M2JjYmMw
MWU3NzQwHhcNMjYwNDIxMDU0NTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGIzYjRkNjI0YzVlMzZiNTEzMzAwMzlhYjQxZjFmZDk0OGU1YjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz99Lpp+6pxSBkaM5OJUqGaqgAM3
VI+AAUck3oqTPUpWXkHibK74nCglVBDmxv/vZ5Ps4oP5Q8eyfH58LorbzmbeDzTb
fKqLz/BNSjAGWFeQCFjZ7D8+TiPurpwlMw6dVJlf5jFZa/wH/NIWPSFcIozP27aw
vCS2U8PmnOo64q12VYMIiODcc7W8X8VlDLFi2rcYVB3nOMWmL3t7s2BZZM6CUmWx
FVrrNQJQk3jk5Q3KepcP7A23hQAShv9x6fZ2taD9QaDT+y/4FTaLfi1ixbZajITW
BDfnqMnvP6xdk2Eq59hjsrXOS5gSv4RqdAZOUr6/yQluLbISKvMMFfbKJQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFL2ztNYkxeNrUTMAOatB8f2UjlszMB8GA1UdIwQY
MBaAFLe8Gt+/NiZI/GNcMzLzg7y8Aed0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUt
ZmQ2MDZiMDZhMDFhLzEvdmJPMDFpVEY0MnRSTXdBNXEwSHhfWlNPV3pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xYzlkYzctNzhhNS00ZDhhLWIxODUtZmQ2MDZiMDZhMDFh
LzEvdDd3YTM3ODJKa2o4WTF3ek12T0R2THdCNTNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEJTHwAwQC
W9OoAwQDbc3YAwQCuQUUMA0EAgACMAcDBQEqAhOAMA0GCSqGSIb3DQEBCwUAA4IB
AQAEHBXV628QEQcoveE/4oJ3rBwOHgcvKL7tYAewf1/Yd1m1b6zf7cyaKfU8N1dq
oWlpPd3QcJ46hV+jVP5h/EslMaXbCmeggywxJDk44QsPqEBy9e+qxeXTMn6K4Mrg
MLTUXTFfbZWyPVYEEVOQcYCP1vrXtvaIDyCFUsJQ/Y3hURGxYeeqzy3tgXPRLiv4
d1xhANArmgOFbb7Y0clp8l0sm1Y9zkr4P2VAzuL2Da6WB21K/uhpY/xNCwB5h9Kw
SroagiP6uWn/LCJR0P418GEeak8eyUJWn+YXmSlyWq34y2eQNA+OMrqgY68UpBcI
F1uuflQ3T4vcMmyH7pZRa63n
-----END CERTIFICATE-----
Generated at Wed May 13 02:13:08 2026 by rpki-client