Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa
File: vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa (raw, json)
Hash identifier: zOmjl7/VF1REeDK9Kz85f9AKUhU+m9qTE9b+EWBSHrM=
Subject key identifier: BE:50:5E:DE:86:26:8C:B0:B2:01:BE:A6:31:7D:A6:47:7A:64:5C:E5
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 019F0564221D217F7A894266F2868280C173
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa
Signing time: Fri 26 Jun 2026 19:24:36 +0000
ROA not before: Fri 26 Jun 2026 19:24:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201679
IP address blocks: 185.64.132.0/22 maxlen: 22
185.64.132.0/24 maxlen: 24
185.64.133.0/24 maxlen: 24
185.64.134.0/24 maxlen: 24
185.64.135.0/24 maxlen: 24
2a03:13e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:05:64:22:1d:21:7f:7a:89:42:66:f2:86:82:80:c1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jun 26 19:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be505ede86268cb0b201bea6317da6477a645ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d1:8f:ff:bd:4c:f1:a4:50:a3:72:27:55:54:
4d:8c:95:30:5f:bd:be:70:e5:0d:e6:3d:3c:5e:7c:
52:d5:29:e9:14:5b:1d:7c:dc:1d:1d:15:77:7e:28:
84:88:26:50:3d:90:4d:14:94:d6:30:38:1e:35:59:
0b:f9:ff:2b:01:9f:92:ee:11:5a:b1:dd:ae:3a:38:
35:ee:d1:9c:21:c4:cb:7a:18:0a:87:27:88:98:bf:
f9:aa:35:23:0a:bc:03:df:5d:10:2b:13:d4:91:89:
20:0c:99:bb:22:0a:55:f8:1f:09:67:86:e9:54:a1:
96:2b:24:51:1f:d0:40:c0:28:a3:2e:3b:86:0c:e0:
ab:19:32:ec:ee:69:c5:2a:e9:37:7b:37:5c:54:36:
a3:67:1b:0d:50:fc:0c:13:1e:e7:9f:b6:4b:7a:c2:
59:80:bc:3c:fc:78:f0:6a:9b:d9:5d:ce:04:fb:9f:
c8:f1:8c:d6:d2:0c:94:59:fc:c0:36:86:3d:ac:a2:
2a:33:32:67:82:ca:4b:b3:30:da:84:c1:08:11:a7:
a3:af:05:6f:54:7e:c7:40:93:32:9d:ed:cd:49:c6:
01:23:4e:af:40:1b:fc:e6:6f:e1:03:54:20:f8:19:
89:c2:7e:1a:a9:51:dd:ac:fc:f3:c0:12:18:40:33:
c6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:50:5E:DE:86:26:8C:B0:B2:01:BE:A6:31:7D:A6:47:7A:64:5C:E5
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/vlBe3oYmjLCyAb6mMX2mR3pkXOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.132.0/22
IPv6:
2a03:13e0::/32
Signature Algorithm: sha256WithRSAEncryption
59:3e:24:f5:ba:88:8f:0c:fe:a2:48:d1:4a:13:d6:8b:74:e2:
e2:c5:52:4d:06:e6:f4:df:26:74:41:4d:18:26:7b:ed:8e:77:
7a:d0:37:d5:ed:37:14:5c:bc:08:84:c7:30:b8:1f:20:a1:12:
1b:e1:36:0f:4b:d5:d3:60:2e:eb:33:09:b4:7f:69:d5:ca:a7:
69:b5:28:fc:0d:25:e2:f9:f0:05:72:f6:ad:9b:62:5c:6d:a9:
7f:5a:e6:7d:6d:08:45:81:b3:4a:2f:82:c2:fe:fb:84:b2:1f:
84:30:8a:67:6b:91:90:c0:26:cb:29:51:44:83:b5:86:1e:03:
36:ae:78:b2:8d:86:03:10:d3:39:e8:71:6b:fe:6b:98:5e:53:
47:5e:13:31:ec:6d:7e:a2:b0:88:b3:12:a5:49:ef:2f:df:da:
66:27:d1:3e:c5:cf:f1:2f:29:86:47:c3:ad:36:1c:06:5e:44:
e6:68:03:fd:92:cc:ac:42:e1:75:1d:f8:01:b8:ed:c0:3d:7e:
18:6e:bd:90:79:cc:47:d7:7c:c6:73:3c:e1:2f:41:a3:24:df:
1f:e9:5f:f2:11:82:ef:a4:ca:50:c5:86:97:33:48:7e:ed:f4:
3b:9a:57:29:84:9f:29:82:43:5c:9d:ac:46:bb:85:3e:31:0b:
c2:14:fb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:51 2026 by rpki-client