Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/VwjC3-Kcmt-Cg8FrHvzhRsmBdvw.roa
File: VwjC3-Kcmt-Cg8FrHvzhRsmBdvw.roa (raw, json)
Hash identifier: Keb/CZ0dOmcp2P88iKiEdL8N9q8bSjy3d7GbBkSEXuo=
Subject key identifier: 57:08:C2:DF:E2:9C:9A:DF:82:83:C1:6B:1E:FC:E1:46:C9:81:76:FC
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FA1F3C18405010BF86D809CE5C2BBD87A
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/VwjC3-Kcmt-Cg8FrHvzhRsmBdvw.roa
Signing time: Mon 27 Jul 2026 05:02:14 +0000
ROA not before: Mon 27 Jul 2026 05:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 83.98.197.0/24 maxlen: 24
85.92.141.0/24 maxlen: 24
213.247.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f3:c1:84:05:01:0b:f8:6d:80:9c:e5:c2:bb:d8:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 27 05:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5708c2dfe29c9adf8283c16b1efce146c98176fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cc:31:77:81:eb:c8:24:fd:02:b2:54:75:2f:
ea:20:8b:ca:0c:e3:4e:7f:9e:96:69:8a:93:95:f4:
36:04:6d:ae:d6:97:1e:5a:f2:ee:45:06:5a:69:e6:
08:e6:47:5c:59:1a:9c:84:bc:e6:fb:64:d3:2f:a2:
90:a5:81:cf:83:7b:2a:a2:2a:00:59:7f:b6:d8:6c:
33:ae:38:95:50:01:79:1d:1b:c3:62:ea:1d:32:af:
4d:f3:7f:40:c0:7b:1f:ad:d5:5e:a7:a9:97:c0:37:
c5:06:d5:5e:0e:f2:a1:69:b9:63:aa:7d:23:26:93:
ed:b3:ae:30:46:cd:dc:a9:f4:bd:68:1b:ec:07:22:
0c:08:41:2a:d9:25:2b:de:14:b0:2e:8b:47:6c:31:
d7:44:ed:e4:35:41:cd:03:22:6a:ca:b9:37:67:68:
bf:24:69:78:91:a7:2d:e2:fd:f3:ab:17:cd:d0:05:
34:96:b5:31:da:a4:a4:58:47:d8:59:c5:3c:ea:cb:
31:a9:c5:94:e2:94:e0:cd:e1:5c:26:3c:7f:f8:e8:
2f:03:aa:bd:2e:9b:d0:20:1f:51:70:56:ee:ee:26:
ff:36:cd:d7:ed:ba:57:ce:2b:db:81:8f:e8:5f:55:
c1:7f:68:64:e9:7d:47:ae:1b:bd:16:72:df:67:e8:
3f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:08:C2:DF:E2:9C:9A:DF:82:83:C1:6B:1E:FC:E1:46:C9:81:76:FC
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/VwjC3-Kcmt-Cg8FrHvzhRsmBdvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.197.0/24
85.92.141.0/24
213.247.53.0/24
Signature Algorithm: sha256WithRSAEncryption
09:67:01:e6:bf:ea:26:f6:cf:0f:7f:be:d0:0a:41:7c:bc:86:
3a:be:ad:a8:83:56:de:ac:9b:0d:d5:45:71:98:74:f0:76:61:
78:f8:81:bd:12:3f:82:e2:77:e8:2e:a0:aa:d5:00:32:e8:ba:
61:db:07:96:2c:87:f8:19:b4:b3:f2:30:ed:0e:b9:65:20:b5:
1a:e6:4a:9c:5c:b6:bc:a9:92:f6:11:b1:8b:60:52:65:31:80:
b9:e3:f1:65:f7:40:a7:ed:2e:91:6a:f4:44:ea:be:f7:7f:4b:
b2:1f:56:fa:21:1b:cb:69:5e:e1:82:9c:69:2b:f3:d5:bf:0c:
4d:dc:1f:db:a8:3d:f9:ff:2b:3f:f6:52:05:17:bc:ff:6e:b2:
b4:27:e9:e0:11:3b:66:1f:6f:0e:f7:a6:c5:11:44:f4:94:78:
f2:76:9f:e4:db:ec:54:df:8d:31:c1:64:d9:70:a4:bf:a2:fb:
16:60:ca:ef:a5:c1:49:ee:11:2d:e7:79:87:9a:ac:0b:46:b4:
bd:46:0d:54:ed:f8:7d:c4:67:e3:ff:4e:83:b5:53:01:9e:ee:
ba:ea:98:e8:95:82:bc:9c:42:b3:d7:8f:db:6e:c2:5f:de:93:
9e:06:5e:b4:25:cc:69:4b:af:c4:7c:03:ac:8e:11:4c:00:b2:
50:53:c2:ba
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+h88GEBQEL+G2AnOXCu9h6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzI3MDUwMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzA4YzJkZmUyOWM5YWRmODI4M2MxNmIxZWZjZTE0NmM5ODE3NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzswxd4HryCT9ArJUdS/qIIvKDONO
f56WaYqTlfQ2BG2u1pceWvLuRQZaaeYI5kdcWRqchLzm+2TTL6KQpYHPg3sqoioA
WX+22GwzrjiVUAF5HRvDYuodMq9N839AwHsfrdVep6mXwDfFBtVeDvKhabljqn0j
JpPts64wRs3cqfS9aBvsByIMCEEq2SUr3hSwLotHbDHXRO3kNUHNAyJqyrk3Z2i/
JGl4kact4v3zqxfN0AU0lrUx2qSkWEfYWcU86ssxqcWU4pTgzeFcJjx/+OgvA6q9
LpvQIB9RcFbu7ib/Ns3X7bpXzivbgY/oX1XBf2hk6X1Hrhu9FnLfZ+g/XQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFcIwt/inJrfgoPBax784UbJgXb8MB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvVndqQzMtS2NtdC1DZzhGckh2emhSc21CZHZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU2LFAwQA
VVyNAwQA1fc1MA0GCSqGSIb3DQEBCwUAA4IBAQAJZwHmv+om9s8Pf77QCkF8vIY6
vq2og1berJsN1UVxmHTwdmF4+IG9Ej+C4nfoLqCq1QAy6Lph2weWLIf4GbSz8jDt
DrllILUa5kqcXLa8qZL2EbGLYFJlMYC54/Fl90Cn7S6RavRE6r73f0uyH1b6IRvL
aV7hgpxpK/PVvwxN3B/bqD35/ys/9lIFF7z/brK0J+ngETtmH28O96bFEUT0lHjy
dp/k2+xU340xwWTZcKS/ovsWYMrvpcFJ7hEt53mHmqwLRrS9Rg1U7fh9xGfj/06D
tVMBnu666pjolYK8nEKz14/bbsJf3pOeBl60JcxpS6/EfAOsjhFMALJQU8K6
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:40 2026 by rpki-client