Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vKuug_lezcUKzRV6TD5gs1zVwV4.roa
File: vKuug_lezcUKzRV6TD5gs1zVwV4.roa (raw, json)
Hash identifier: vfWbWuUV2HL9A3XHmhQ1WC+UyM5S4qcZ3asSB2EzDB8=
Subject key identifier: BC:AB:AE:83:F9:5E:CD:C5:0A:CD:15:7A:4C:3E:60:B3:5C:D5:C1:5E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019FFAA6E4CCC4B3EACC61F4F93D009AF68E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vKuug_lezcUKzRV6TD5gs1zVwV4.roa
Signing time: Thu 13 Aug 2026 10:24:29 +0000
ROA not before: Thu 13 Aug 2026 10:24:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:a6:e4:cc:c4:b3:ea:cc:61:f4:f9:3d:00:9a:f6:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 13 10:24:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcabae83f95ecdc50acd157a4c3e60b35cd5c15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:f9:1c:ac:0e:1d:0e:5a:8b:ad:94:14:79:
0b:30:2c:b2:34:73:86:eb:55:34:80:8c:18:ee:45:
d3:b7:cc:7e:b5:35:79:61:d4:c5:80:86:bc:41:05:
c6:f5:39:05:21:d7:20:6b:d7:55:83:8c:6e:f5:c1:
3c:a5:1b:20:43:c3:e6:dc:33:35:ae:e1:6e:34:ef:
a9:10:a5:b3:47:be:17:c6:ac:95:81:5f:e9:7f:c4:
33:a0:3b:a3:3a:84:cd:ef:b0:b6:a6:6b:9c:69:34:
08:80:e6:19:62:00:29:be:6f:08:a5:a1:fe:92:65:
e6:4c:9b:5d:7c:27:1d:e6:2b:49:fb:91:75:5e:a1:
52:52:be:fd:7f:12:0a:3f:c9:f1:84:19:8f:0e:d9:
3b:22:63:0c:9d:5c:06:ab:0a:53:7f:83:95:27:03:
ab:9b:5b:66:75:b4:2f:41:40:df:5e:a7:19:8b:aa:
da:e4:79:c2:6b:66:18:70:2c:e2:98:8f:77:81:ec:
f7:c3:33:90:c2:2a:bf:31:52:cf:1c:ba:6a:2f:8b:
e5:74:59:db:ed:cb:5a:6b:58:08:9d:cc:46:34:b0:
ea:b8:2e:f8:60:f6:05:fc:fe:b9:d0:1c:7b:24:85:
db:87:17:d2:8f:75:3c:af:c8:ca:4c:af:b7:da:bd:
71:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AB:AE:83:F9:5E:CD:C5:0A:CD:15:7A:4C:3E:60:B3:5C:D5:C1:5E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vKuug_lezcUKzRV6TD5gs1zVwV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
13:9c:e6:16:7e:c2:59:ad:b5:de:33:b7:47:2a:bb:74:e0:48:
5d:49:19:05:c3:08:0d:d7:ef:12:f9:36:82:a6:b4:f3:aa:28:
21:c2:0c:90:73:17:9e:01:01:1e:22:4f:7f:d9:fd:ff:05:5c:
b1:69:ae:0f:86:0c:98:bc:1d:0c:f4:2d:73:4b:d8:5a:41:05:
2e:00:e2:08:4e:bd:a8:14:1d:4b:13:f2:9d:9e:b9:02:fe:5a:
af:f4:6d:22:fb:8a:02:0a:84:55:8e:e2:7e:1a:dd:35:a6:8d:
fb:c7:b3:bb:93:3d:5f:84:ed:c0:fd:05:49:39:18:67:3e:fb:
d7:6f:08:0a:12:6b:73:35:8f:88:7c:36:fa:64:b2:fa:a7:75:
50:17:16:e4:8a:a5:c8:57:60:6d:0d:5c:ec:f9:9c:46:d4:a7:
c2:4f:6b:91:3c:de:f1:2c:b5:f8:f4:b1:48:f9:ce:72:67:f8:
cc:50:53:22:09:43:e5:15:66:46:c1:00:0e:b4:bb:e2:45:af:
c1:7f:cc:93:71:13:77:b7:65:b7:aa:94:16:3d:ab:c7:3b:86:
88:85:8a:e6:8e:ab:16:99:70:5e:36:48:c0:9a:e6:a6:bf:04:
c0:fa:31:e5:6e:4b:34:36:c4:09:8f:60:67:b4:89:8d:6d:0c:
b6:49:c4:7b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/6puTMxLPqzGH0+T0AmvaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODEzMTAyNDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2FiYWU4M2Y5NWVjZGM1MGFjZDE1N2E0YzNlNjBiMzVjZDVjMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprb5HKwOHQ5ai62UFHkLMCyyNHOG
61U0gIwY7kXTt8x+tTV5YdTFgIa8QQXG9TkFIdcga9dVg4xu9cE8pRsgQ8Pm3DM1
ruFuNO+pEKWzR74XxqyVgV/pf8QzoDujOoTN77C2pmucaTQIgOYZYgApvm8IpaH+
kmXmTJtdfCcd5itJ+5F1XqFSUr79fxIKP8nxhBmPDtk7ImMMnVwGqwpTf4OVJwOr
m1tmdbQvQUDfXqcZi6ra5HnCa2YYcCzimI93gez3wzOQwiq/MVLPHLpqL4vldFnb
7ctaa1gIncxGNLDquC74YPYF/P650Bx7JIXbhxfSj3U8r8jKTK+32r1xswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLyrroP5Xs3FCs0Vekw+YLNc1cFeMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdkt1dWdfbGV6Y1VLelJWNlRENWdzMXpWd1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV3hEAwQB
ufygMA0GCSqGSIb3DQEBCwUAA4IBAQATnOYWfsJZrbXeM7dHKrt04EhdSRkFwwgN
1+8S+TaCprTzqighwgyQcxeeAQEeIk9/2f3/BVyxaa4PhgyYvB0M9C1zS9haQQUu
AOIITr2oFB1LE/KdnrkC/lqv9G0i+4oCCoRVjuJ+Gt01po37x7O7kz1fhO3A/QVJ
ORhnPvvXbwgKEmtzNY+IfDb6ZLL6p3VQFxbkiqXIV2BtDVzs+ZxG1KfCT2uRPN7x
LLX49LFI+c5yZ/jMUFMiCUPlFWZGwQAOtLviRa/Bf8yTcRN3t2W3qpQWPavHO4aI
hYrmjqsWmXBeNkjAmuamvwTA+jHlbks0NsQJj2BntImNbQy2ScR7
-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:28 2026 by rpki-client