Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/VEhqpg2DKZALngIWKZ9wpJb_gow.roa
File: VEhqpg2DKZALngIWKZ9wpJb_gow.roa (raw, json)
Hash identifier: eVC1T6V9z6tdKZozR/Hwdp5CGnz0qMtozQ0y9WfwLqs=
Subject key identifier: 54:48:6A:A6:0D:83:29:90:0B:9E:02:16:29:9F:70:A4:96:FF:82:8C
Certificate issuer: /CN=8466a5dde27f911da8be73c261ff55b5881198a9
Certificate serial: 019DD8C6EF5CD7DBD1F80ADFF12FCEB671EF
Authority key identifier: 84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/VEhqpg2DKZALngIWKZ9wpJb_gow.roa
Signing time: Wed 29 Apr 2026 10:26:49 +0000
ROA not before: Wed 29 Apr 2026 10:26:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2116
IP address blocks: 91.203.116.0/22 maxlen: 22
195.5.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:c6:ef:5c:d7:db:d1:f8:0a:df:f1:2f:ce:b6:71:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8466a5dde27f911da8be73c261ff55b5881198a9
Validity
Not Before: Apr 29 10:26:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54486aa60d8329900b9e0216299f70a496ff828c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:a3:1c:9a:ea:55:d2:16:f5:23:86:12:7e:
4e:51:c4:e8:28:39:fe:d5:08:df:19:74:99:3c:a6:
e2:e2:e6:4f:20:7a:9f:19:3d:cb:7d:bf:32:0b:d7:
82:21:db:e9:a7:4b:e1:c9:85:5f:fb:e4:06:c4:e1:
9b:5d:2d:50:62:94:6a:43:b1:e5:19:e8:88:04:20:
bd:b3:f4:de:fc:fb:3a:69:02:49:f8:ef:7e:90:db:
c9:bc:ac:52:0b:cc:14:c1:58:74:f9:df:f9:e5:6e:
7c:1c:be:5c:58:15:1e:76:bb:d9:3b:6c:4f:a6:04:
3f:13:83:0c:1f:d9:16:0d:bf:80:c0:b7:86:14:92:
0c:17:f3:3e:44:86:35:c4:c6:e3:ea:81:35:d2:f7:
0c:67:34:fb:20:5b:32:76:56:ef:ed:5e:e2:cb:d6:
cc:11:47:84:79:4c:74:29:00:c8:82:08:c0:c3:71:
0a:0e:0e:96:61:60:0f:ee:10:7c:21:a9:33:bb:39:
61:8a:55:4c:54:b2:29:00:cc:9a:57:57:ac:12:dd:
a2:99:da:5d:6c:db:b9:00:1a:15:3e:e4:6a:9d:a6:
c5:d2:57:3e:c0:8a:3e:3a:09:27:23:24:95:57:3e:
b5:75:84:2d:c6:33:03:0b:9a:82:4f:97:13:a2:6e:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:48:6A:A6:0D:83:29:90:0B:9E:02:16:29:9F:70:A4:96:FF:82:8C
X509v3 Authority Key Identifier:
keyid:84:66:A5:DD:E2:7F:91:1D:A8:BE:73:C2:61:FF:55:B5:88:11:98:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGal3eJ_kR2ovnPCYf9VtYgRmKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/VEhqpg2DKZALngIWKZ9wpJb_gow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726b60-8aa7-461f-9cd9-7ccbb45dca51/1/hGal3eJ_kR2ovnPCYf9VtYgRmKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.116.0/22
195.5.174.0/24
Signature Algorithm: sha256WithRSAEncryption
28:81:d1:6e:b9:41:c1:55:0d:ab:0b:ed:c4:2c:95:e4:f1:18:
a4:b2:51:7b:d3:be:b6:d0:65:4c:1f:fc:26:78:eb:3c:e4:65:
29:74:a0:ec:72:fd:bc:cc:c4:52:82:2d:40:0a:36:c5:76:ca:
d6:92:ee:5b:6d:e9:ab:48:5c:b4:50:38:61:0c:34:6b:58:ac:
be:a8:8a:2c:9c:8e:c5:4b:9a:7f:8d:52:82:d6:53:21:b4:2d:
9a:e1:47:5c:2f:4d:c7:00:99:5b:95:e6:3a:b1:0a:0b:b9:4e:
3b:0d:28:49:f6:c9:8d:ce:41:58:a0:b2:72:26:af:75:33:f7:
38:ba:1c:7b:09:31:64:c5:cf:a9:ca:8f:a7:0b:41:7f:0a:cf:
e0:b9:d3:cf:a8:d1:11:1b:3a:bb:73:bf:0c:05:ce:07:42:b9:
e8:30:25:48:7c:9b:a5:a8:45:f7:51:1b:d2:02:71:e7:c2:16:
7a:d5:21:e3:3b:e2:d9:20:b2:be:a3:5f:6c:ce:3c:94:0b:84:
ed:f8:8d:14:17:ce:8a:db:7b:9c:61:96:7d:64:74:ad:99:f3:
f0:bd:a0:69:4e:dc:ef:4c:fb:05:35:52:59:b0:31:a3:49:72:
cd:11:6c:b4:11:2b:e0:74:4f:10:72:4e:b7:ed:ee:f5:92:26:
02:ae:6e:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3Yxu9c19vR+Arf8S/OtnHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NjZhNWRkZTI3ZjkxMWRhOGJlNzNjMjYxZmY1NWI1ODgx
MTk4YTkwHhcNMjYwNDI5MTAyNjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDQ4NmFhNjBkODMyOTkwMGI5ZTAyMTYyOTlmNzBhNDk2ZmY4MjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYajHJrqVdIW9SOGEn5OUcToKDn+
1QjfGXSZPKbi4uZPIHqfGT3Lfb8yC9eCIdvpp0vhyYVf++QGxOGbXS1QYpRqQ7Hl
GeiIBCC9s/Te/Ps6aQJJ+O9+kNvJvKxSC8wUwVh0+d/55W58HL5cWBUedrvZO2xP
pgQ/E4MMH9kWDb+AwLeGFJIMF/M+RIY1xMbj6oE10vcMZzT7IFsydlbv7V7iy9bM
EUeEeUx0KQDIggjAw3EKDg6WYWAP7hB8IakzuzlhilVMVLIpAMyaV1esEt2imdpd
bNu5ABoVPuRqnabF0lc+wIo+OgknIySVVz61dYQtxjMDC5qCT5cTom7oVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFRIaqYNgymQC54CFimfcKSW/4KMMB8GA1UdIwQY
MBaAFIRmpd3if5EdqL5zwmH/VbWIEZipMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDkt
N2NjYmI0NWRjYTUxLzEvVkVocXBnMkRLWkFMbmdJV0taOXdwSmJfZ293LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiNjAtOGFhNy00NjFmLTljZDktN2NjYmI0NWRjYTUx
LzEvaEdhbDNlSl9rUjJvdm5QQ1lmOVZ0WWdSbUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8t0AwQA
wwWuMA0GCSqGSIb3DQEBCwUAA4IBAQAogdFuuUHBVQ2rC+3ELJXk8RikslF70762
0GVMH/wmeOs85GUpdKDscv28zMRSgi1ACjbFdsrWku5bbemrSFy0UDhhDDRrWKy+
qIosnI7FS5p/jVKC1lMhtC2a4UdcL03HAJlbleY6sQoLuU47DShJ9smNzkFYoLJy
Jq91M/c4uhx7CTFkxc+pyo+nC0F/Cs/gudPPqNERGzq7c78MBc4HQrnoMCVIfJul
qEX3URvSAnHnwhZ61SHjO+LZILK+o19szjyUC4Tt+I0UF86K23ucYZZ9ZHStmfPw
vaBpTtzvTPsFNVJZsDGjSXLNEWy0ESvgdE8Qck637e71kiYCrm7f
-----END CERTIFICATE-----
Generated at Tue May 12 21:53:39 2026 by rpki-client