Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/VsR35aykkc_iAYM4SDexkh120pI.roa
File: VsR35aykkc_iAYM4SDexkh120pI.roa (raw, json)
Hash identifier: gEd57quT2IwN1bNN4Pr/vOfz7pwdmfPkBYPC0L79I3E=
Subject key identifier: 56:C4:77:E5:AC:A4:91:CF:E2:01:83:38:48:37:B1:92:1D:76:D2:92
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019F27B77A35BA025FDE59C8B81653934E02
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/VsR35aykkc_iAYM4SDexkh120pI.roa
Signing time: Fri 03 Jul 2026 11:22:43 +0000
ROA not before: Fri 03 Jul 2026 11:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203195
IP address blocks: 185.141.80.0/24 maxlen: 24
185.141.81.0/24 maxlen: 24
2a03:a8a0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:b7:7a:35:ba:02:5f:de:59:c8:b8:16:53:93:4e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jul 3 11:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c477e5aca491cfe20183384837b1921d76d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3a:ba:14:a8:b8:7b:ab:a4:fc:35:c2:31:8d:
0c:76:8c:55:2c:56:40:24:d5:b6:9f:4b:3f:e1:f0:
10:1f:66:a8:63:62:d6:a6:8d:7c:52:cf:00:54:4e:
3c:da:6b:24:a3:8c:b0:20:bf:5a:00:ea:93:00:7d:
12:f3:65:59:86:f1:5b:61:bc:f3:b9:d8:ba:a0:93:
72:b5:87:1c:31:0b:b7:d7:4e:ca:ff:4d:2a:86:24:
83:17:5b:68:66:f2:84:d3:c6:5f:b1:fa:7c:bc:cb:
83:b3:74:a1:04:ca:0c:87:42:0d:ff:98:ba:8d:41:
7b:e6:fc:df:64:65:ee:95:64:64:25:d8:b5:29:dc:
54:fe:29:bf:23:2b:cf:01:98:bd:b5:ab:f5:8e:ec:
b3:c6:c4:12:34:ec:d6:66:5d:da:10:54:6a:43:8b:
af:fd:bb:13:0b:c7:8e:1f:92:6a:47:e9:34:89:0d:
aa:06:bd:16:38:e0:85:eb:56:c7:7b:1b:39:99:d4:
91:b5:ce:3b:1f:67:cd:96:08:4e:10:7d:33:f1:1c:
3c:d7:ea:87:5f:b5:56:88:c5:4b:72:5d:8f:9f:18:
0f:ef:cb:70:19:89:a4:07:a3:29:00:69:4a:4b:92:
42:58:1d:8c:3f:ce:6e:0f:1c:fe:b9:2d:e7:1c:db:
83:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C4:77:E5:AC:A4:91:CF:E2:01:83:38:48:37:B1:92:1D:76:D2:92
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/VsR35aykkc_iAYM4SDexkh120pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.80.0/23
IPv6:
2a03:a8a0::/29
Signature Algorithm: sha256WithRSAEncryption
02:f6:38:96:61:32:44:3d:dd:b8:95:6d:fe:9e:1b:aa:20:e3:
95:27:2d:0b:f8:93:c0:da:6a:a7:d0:27:43:da:7b:a3:55:5c:
99:31:0f:98:0a:3e:ac:be:6e:ad:d5:52:08:a2:e8:16:68:b3:
cf:f1:e0:da:da:f2:85:d3:5f:4f:42:20:19:c5:9b:c6:51:a0:
83:c1:b9:64:79:f2:a3:2d:0b:cf:09:36:05:01:a9:f6:96:fa:
02:fc:23:1f:16:0e:dc:1d:99:81:ff:a3:24:bf:61:95:c9:e4:
db:9b:c4:cf:0f:81:4f:f2:f8:22:03:47:f6:fc:a1:4d:89:d0:
97:b2:61:3f:a7:eb:5f:bd:ca:93:32:56:b5:7a:b6:d6:57:55:
19:93:97:9a:e8:5a:41:e3:58:ba:78:b8:53:4a:0f:9e:cb:02:
aa:aa:64:f5:c5:d2:cd:85:bd:36:d4:62:5a:f8:c5:17:db:df:
ca:18:78:99:05:c7:49:98:2f:00:03:f9:ff:32:0e:b3:19:45:
c5:67:ee:a3:d3:65:c8:47:2b:39:0d:ff:f0:bd:14:0b:10:10:
8e:a1:cb:52:ae:9b:30:cd:c0:a0:c0:13:79:54:38:1d:b4:b5:
09:d0:b2:2f:c4:ae:cf:79:84:83:a2:7a:f6:ff:8a:3a:ed:40:
f6:40:2a:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8nt3o1ugJf3lnIuBZTk04CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZTk3MDk4MGQ1NjVjYzc0YWRiMjk0YWE2OGM3YjA2ZjUx
MzI4OTAwHhcNMjYwNzAzMTEyMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmM0NzdlNWFjYTQ5MWNmZTIwMTgzMzg0ODM3YjE5MjFkNzZkMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjq6FKi4e6uk/DXCMY0MdoxVLFZA
JNW2n0s/4fAQH2aoY2LWpo18Us8AVE482msko4ywIL9aAOqTAH0S82VZhvFbYbzz
udi6oJNytYccMQu3107K/00qhiSDF1toZvKE08Zfsfp8vMuDs3ShBMoMh0IN/5i6
jUF75vzfZGXulWRkJdi1KdxU/im/IyvPAZi9tav1juyzxsQSNOzWZl3aEFRqQ4uv
/bsTC8eOH5JqR+k0iQ2qBr0WOOCF61bHexs5mdSRtc47H2fNlghOEH0z8Rw81+qH
X7VWiMVLcl2PnxgP78twGYmkB6MpAGlKS5JCWB2MP85uDxz+uS3nHNuDRwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFbEd+WspJHP4gGDOEg3sZIddtKSMB8GA1UdIwQY
MBaAFMvpcJgNVlzHStspSqaMewb1EyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGIt
NzU2YTA4YTRhZGRhLzEvVnNSMzVheWtrY19pQVlNNFNEZXhraDEyMHBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zZGNmN2ItMTcwMy00NTlmLWFjMGItNzU2YTA4YTRhZGRh
LzEveS1sd21BMVdYTWRLMnlsS3BveDdCdlVUS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuY1QMA0E
AgACMAcDBQMqA6igMA0GCSqGSIb3DQEBCwUAA4IBAQAC9jiWYTJEPd24lW3+nhuq
IOOVJy0L+JPA2mqn0CdD2nujVVyZMQ+YCj6svm6t1VIIougWaLPP8eDa2vKF019P
QiAZxZvGUaCDwblkefKjLQvPCTYFAan2lvoC/CMfFg7cHZmB/6Mkv2GVyeTbm8TP
D4FP8vgiA0f2/KFNidCXsmE/p+tfvcqTMla1erbWV1UZk5ea6FpB41i6eLhTSg+e
ywKqqmT1xdLNhb021GJa+MUX29/KGHiZBcdJmC8AA/n/Mg6zGUXFZ+6j02XIRys5
Df/wvRQLEBCOoctSrpswzcCgwBN5VDgdtLUJ0LIvxK7PeYSDonr2/4o67UD2QCq0
-----END CERTIFICATE-----
Generated at Fri Jul 10 17:36:38 2026 by rpki-client