Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vjdmiq9q3eFh-NSAijvIgB2bqjU.roa
File: Vjdmiq9q3eFh-NSAijvIgB2bqjU.roa (raw, json)
Hash identifier: 8qKR5fV8b2ZB1UzuKEY4DQZzuw3AaqXSX+IN3mtMZIs=
Subject key identifier: 56:37:66:8A:AF:6A:DD:E1:61:F8:D4:80:8A:3B:C8:80:1D:9B:AA:35
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019E0D26A56341D222A0C22B597D80E99451
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vjdmiq9q3eFh-NSAijvIgB2bqjU.roa
Signing time: Sat 09 May 2026 14:31:36 +0000
ROA not before: Sat 09 May 2026 14:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.100.0/24 maxlen: 24
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.41.46.0/23 maxlen: 24
103.41.47.0/24 maxlen: 24
103.102.132.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:26:a5:63:41:d2:22:a0:c2:2b:59:7d:80:e9:94:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: May 9 14:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5637668aaf6adde161f8d4808a3bc8801d9baa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f2:08:56:25:47:26:2b:55:bc:5f:6f:0f:03:
56:9e:e4:10:85:35:1f:99:5f:1f:80:e7:52:42:69:
ea:1b:a3:25:ec:4d:73:b9:3e:76:fb:44:b2:95:94:
31:b6:50:82:d1:56:bc:44:52:99:df:b3:b8:4b:86:
35:73:89:38:dc:04:db:a6:37:13:88:49:bc:16:49:
b9:ab:be:a2:df:27:89:b4:be:db:3b:33:60:73:a4:
d2:48:97:fa:74:54:d4:ac:bb:4f:14:c9:f3:a9:71:
78:1e:22:e8:43:e5:18:55:12:41:05:0a:9d:80:dc:
1d:d9:43:0d:4a:d6:02:c7:34:b5:ba:21:19:38:9e:
39:20:e6:a9:02:20:a6:5d:06:02:8c:aa:01:d4:f4:
60:ab:d0:23:01:06:59:e1:19:69:50:32:d6:6f:52:
64:28:89:d6:ea:6a:2f:ac:c6:c2:4f:b0:6e:7b:59:
82:43:7d:02:2f:cf:95:b6:73:ed:31:1f:22:4c:4c:
97:b9:3e:c1:72:f8:c8:6a:05:81:32:cf:25:88:1d:
37:a9:ed:db:88:82:da:a3:05:55:bb:3e:08:d8:ce:
05:ba:65:a6:ba:cc:2d:47:63:bf:3a:19:b1:8d:14:
ed:95:b8:e2:1b:27:c5:6b:d3:e0:f5:47:ab:4d:e5:
11:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:66:8A:AF:6A:DD:E1:61:F8:D4:80:8A:3B:C8:80:1D:9B:AA:35
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Vjdmiq9q3eFh-NSAijvIgB2bqjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.140.0/24
77.111.96.0-77.111.100.255
77.111.102.0/23
77.111.105.0/24
94.229.209.0/24
103.41.44.0/22
103.102.132.0/23
124.158.112.0/24
194.36.33.0/24
Signature Algorithm: sha256WithRSAEncryption
81:05:75:a1:c7:65:50:dc:3f:63:2f:b4:7a:7e:c9:c2:a6:79:
21:f4:b3:4d:2d:5b:a5:82:34:a7:17:28:ff:6a:a2:b3:07:63:
00:d7:2c:5b:f4:82:d7:dc:ce:c7:5b:8d:80:e1:cb:dc:30:4f:
f3:94:83:d2:be:90:af:ab:ed:49:04:26:dd:41:42:01:d2:e1:
6f:2e:b4:ce:cc:f4:7e:91:07:4a:9d:79:03:74:b3:13:11:a9:
41:eb:63:b9:19:af:5a:d2:6b:0b:26:a4:5a:61:b8:ec:4b:6b:
8b:8f:f9:03:aa:6e:5a:c6:f9:4e:27:ce:64:37:80:4d:15:89:
24:70:fd:f1:2d:75:73:ab:03:07:c3:0f:e1:30:12:b9:a8:72:
54:b2:77:e7:d1:77:65:1a:10:57:51:13:d4:c6:68:ce:ae:19:
0b:6b:fb:0b:ff:ee:d5:6d:40:f3:37:d8:eb:e4:c7:b3:cb:8a:
02:38:58:d7:5e:e2:8f:92:bb:90:97:16:9e:e6:a9:08:db:33:
be:33:91:4a:ad:54:16:9f:d7:b9:bf:82:d8:60:da:8d:de:64:
be:49:8e:81:ef:10:23:ff:c9:b1:4f:f7:ac:a5:31:83:3f:4e:
0f:3e:90:9e:19:34:76:32:7f:8b:1e:a0:bd:b4:8f:d8:18:6c:
3f:b6:08:2b
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAZ4NJqVjQdIioMIrWX2A6ZRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwNTA5MTQzMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjM3NjY4YWFmNmFkZGUxNjFmOGQ0ODA4YTNiYzg4MDFkOWJhYTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPIIViVHJitVvF9vDwNWnuQQhTUf
mV8fgOdSQmnqG6Ml7E1zuT52+0SylZQxtlCC0Va8RFKZ37O4S4Y1c4k43ATbpjcT
iEm8Fkm5q76i3yeJtL7bOzNgc6TSSJf6dFTUrLtPFMnzqXF4HiLoQ+UYVRJBBQqd
gNwd2UMNStYCxzS1uiEZOJ45IOapAiCmXQYCjKoB1PRgq9AjAQZZ4RlpUDLWb1Jk
KInW6movrMbCT7Bue1mCQ30CL8+VtnPtMR8iTEyXuT7BcvjIagWBMs8liB03qe3b
iILaowVVuz4I2M4FumWmuswtR2O/OhmxjRTtlbjiGyfFa9Pg9UerTeUREwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFFY3Zoqvat3hYfjUgIo7yIAdm6o1MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvVmpkbWlxOXEzZUZoLU5TQWlqdklnQjJicWpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQALZeMMAwD
BAVNb2ADBABNb2QDBAFNb2YDBABNb2kDBABe5dEDBAJnKSwDBAFnZoQDBAB8nnAD
BADCJCEwDQYJKoZIhvcNAQELBQADggEBAIEFdaHHZVDcP2MvtHp+ycKmeSH0s00t
W6WCNKcXKP9qorMHYwDXLFv0gtfczsdbjYDhy9wwT/OUg9K+kK+r7UkEJt1BQgHS
4W8utM7M9H6RB0qdeQN0sxMRqUHrY7kZr1rSawsmpFphuOxLa4uP+QOqblrG+U4n
zmQ3gE0ViSRw/fEtdXOrAwfDD+EwErmoclSyd+fRd2UaEFdRE9TGaM6uGQtr+wv/
7tVtQPM32Ovkx7PLigI4WNde4o+Su5CXFp7mqQjbM74zkUqtVBaf17m/gthg2o3e
ZL5JjoHvECP/ybFP96ylMYM/Tg8+kJ4ZNHYyf4seoL20j9gYbD+2CCs=
-----END CERTIFICATE-----
Generated at Wed May 13 03:16:12 2026 by rpki-client