Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/vaGt6qiTwmKyEUcufJFu38Vn_PY.roa
File: vaGt6qiTwmKyEUcufJFu38Vn_PY.roa (raw, json)
Hash identifier: Pv4yo0vrEF77MupbDlB9r9HIwxhjZnbYRveAGoZFjW0=
Subject key identifier: BD:A1:AD:EA:A8:93:C2:62:B2:11:47:2E:7C:91:6E:DF:C5:67:FC:F6
Certificate issuer: /CN=0dd441c3ffae829842249e944b03851081f4d9e0
Certificate serial: 019CDCA2027CD2B349EB759C049B2B11B98A
Authority key identifier: 0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/vaGt6qiTwmKyEUcufJFu38Vn_PY.roa
Signing time: Wed 11 Mar 2026 11:22:10 +0000
ROA not before: Wed 11 Mar 2026 11:22:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6206
IP address blocks: 91.235.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dc:a2:02:7c:d2:b3:49:eb:75:9c:04:9b:2b:11:b9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0dd441c3ffae829842249e944b03851081f4d9e0
Validity
Not Before: Mar 11 11:22:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bda1adeaa893c262b211472e7c916edfc567fcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:bb:11:eb:dd:06:ce:ec:51:1e:06:fb:23:
3e:fb:f2:7d:41:0a:8f:bc:16:9a:ab:a3:68:9e:86:
f1:c0:19:23:5d:c4:75:bf:93:31:4e:5d:20:37:1d:
f6:c4:61:5d:b0:34:4b:3f:76:a6:8d:6f:7b:50:11:
71:02:f3:35:18:b3:69:ff:07:4d:9e:dd:a2:6f:50:
a5:b8:55:61:2f:38:6b:0f:33:da:10:8e:b8:09:70:
11:7b:02:a2:71:8c:59:3e:cf:98:45:d5:31:e7:80:
1e:86:06:fc:5f:d5:2b:65:7b:78:3a:28:c3:30:82:
ed:55:1f:b8:72:82:c3:1e:8e:7f:9e:66:ee:c1:d7:
3f:6f:ac:b3:9d:28:c9:14:c5:ab:24:12:03:5c:ec:
54:0e:8e:72:e2:2c:4f:1c:81:40:f3:ed:40:c7:54:
43:17:2a:5f:56:7c:dc:17:29:b3:8d:1d:f8:ca:6d:
29:b9:7e:b7:29:9b:2a:a8:99:f0:46:17:44:23:84:
7b:98:ec:9e:b8:ae:c5:5d:f5:46:83:a5:dc:78:27:
74:81:32:90:f5:4b:12:84:a2:6b:51:7c:21:2d:c5:
e5:d3:06:21:db:11:33:f2:7c:98:c6:2c:2d:58:29:
3f:93:7f:b4:58:6a:61:b2:d1:57:d0:1a:b9:90:90:
9c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:AD:EA:A8:93:C2:62:B2:11:47:2E:7C:91:6E:DF:C5:67:FC:F6
X509v3 Authority Key Identifier:
keyid:0D:D4:41:C3:FF:AE:82:98:42:24:9E:94:4B:03:85:10:81:F4:D9:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DdRBw_-ugphCJJ6USwOFEIH02eA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/vaGt6qiTwmKyEUcufJFu38Vn_PY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a7ef4d-dc44-4faf-9513-e9c9132836ff/1/DdRBw_-ugphCJJ6USwOFEIH02eA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.168.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:00:2b:90:bd:5e:1b:9b:31:34:e5:c2:1d:6e:17:93:bd:ed:
d7:e7:60:67:24:9e:0b:64:10:cb:f2:78:71:58:9f:35:e7:be:
c9:86:ce:a0:82:f6:c4:c6:4a:9d:47:69:c4:1e:55:cc:d2:2a:
15:db:a7:c3:ec:71:b0:57:07:c1:ae:91:4b:ff:35:86:81:25:
2f:1a:18:0d:ca:7f:b7:35:5a:8a:86:2b:8e:91:24:75:c7:da:
84:70:e1:59:27:7b:1a:2e:e1:9a:39:dc:de:e9:ff:9c:7c:f5:
88:c2:42:d1:c0:65:e3:4f:bb:46:d6:a1:73:5f:af:aa:11:8b:
e4:2a:92:bd:01:9e:ea:53:4c:91:59:b6:f3:65:3d:a5:b3:75:
16:bc:d5:65:6a:02:34:88:9c:4e:03:34:a1:0d:db:5a:9d:a0:
e0:bc:5e:22:05:18:ce:8f:89:52:39:29:56:81:ab:07:36:53:
4a:eb:b7:03:6d:33:dd:5c:36:fd:74:cb:b6:88:c1:1b:ff:5a:
d3:b0:f4:fc:22:09:d5:c2:0b:24:42:7f:43:a5:13:62:86:82:
71:07:45:6c:95:11:23:f5:33:dd:1a:c0:76:c3:27:5d:31:d1:
be:c2:54:8c:67:ce:13:74:27:03:95:d4:3a:62:ac:8b:cd:f4:
80:03:dd:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzcogJ80rNJ63WcBJsrEbmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZDQ0MWMzZmZhZTgyOTg0MjI0OWU5NDRiMDM4NTEwODFm
NGQ5ZTAwHhcNMjYwMzExMTEyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGExYWRlYWE4OTNjMjYyYjIxMTQ3MmU3YzkxNmVkZmM1NjdmY2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm27EevdBs7sUR4G+yM++/J9QQqP
vBaaq6NonobxwBkjXcR1v5MxTl0gNx32xGFdsDRLP3amjW97UBFxAvM1GLNp/wdN
nt2ib1CluFVhLzhrDzPaEI64CXARewKicYxZPs+YRdUx54Aehgb8X9UrZXt4OijD
MILtVR+4coLDHo5/nmbuwdc/b6yznSjJFMWrJBIDXOxUDo5y4ixPHIFA8+1Ax1RD
FypfVnzcFymzjR34ym0puX63KZsqqJnwRhdEI4R7mOyeuK7FXfVGg6XceCd0gTKQ
9UsShKJrUXwhLcXl0wYh2xEz8nyYxiwtWCk/k3+0WGphstFX0Bq5kJCcewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL2hreqok8JishFHLnyRbt/FZ/z2MB8GA1UdIwQY
MBaAFA3UQcP/roKYQiSelEsDhRCB9NngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMt
ZTljOTEzMjgzNmZmLzEvdmFHdDZxaVR3bUt5RVVjdWZKRnUzOFZuX1BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hN2VmNGQtZGM0NC00ZmFmLTk1MTMtZTljOTEzMjgzNmZm
LzEvRGRSQndfLXVncGhDSko2VVN3T0ZFSUgwMmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+uoMA0G
CSqGSIb3DQEBCwUAA4IBAQBqACuQvV4bmzE05cIdbheTve3X52BnJJ4LZBDL8nhx
WJ81577Jhs6ggvbExkqdR2nEHlXM0ioV26fD7HGwVwfBrpFL/zWGgSUvGhgNyn+3
NVqKhiuOkSR1x9qEcOFZJ3saLuGaOdze6f+cfPWIwkLRwGXjT7tG1qFzX6+qEYvk
KpK9AZ7qU0yRWbbzZT2ls3UWvNVlagI0iJxOAzShDdtanaDgvF4iBRjOj4lSOSlW
gasHNlNK67cDbTPdXDb9dMu2iMEb/1rTsPT8IgnVwgskQn9DpRNihoJxB0VslREj
9TPdGsB2wyddMdG+wlSMZ84TdCcDldQ6YqyLzfSAA92O
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:04:37 2026 by rpki-client