Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VpPTm8aUl9hzAt1g5bW3GxFFA-E.roa
File: VpPTm8aUl9hzAt1g5bW3GxFFA-E.roa (raw, json)
Hash identifier: xwoW0wQUaFg5U5Y2qbY/f9bimElClwQknEGntTZ+btw=
Subject key identifier: 56:93:D3:9B:C6:94:97:D8:73:02:DD:60:E5:B5:B7:1B:11:45:03:E1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019E4094D7A962C95D328D0E67EA782C9A9E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VpPTm8aUl9hzAt1g5bW3GxFFA-E.roa
Signing time: Tue 19 May 2026 14:12:36 +0000
ROA not before: Tue 19 May 2026 14:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210068
IP address blocks: 194.15.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 May 2026 14:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:94:d7:a9:62:c9:5d:32:8d:0e:67:ea:78:2c:9a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 19 14:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5693d39bc69497d87302dd60e5b5b71b114503e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:00:8d:77:e4:a6:30:6e:37:b6:ad:51:67:
6e:ad:5e:f1:fa:a9:ce:b2:3e:1d:01:38:56:47:17:
0b:c0:c0:e5:89:d3:ca:a4:e3:5b:85:5c:be:bc:5f:
53:99:81:7b:ab:b9:f0:9b:0e:e6:18:3d:c5:b7:99:
5b:3a:ec:e5:84:91:09:70:85:2f:4b:06:c9:3d:46:
8b:c7:05:04:86:5f:3b:f3:b0:a4:71:41:6b:70:07:
84:9a:33:7a:e4:69:66:fe:83:f6:ca:39:8f:c9:7e:
5a:ac:1b:ac:ae:85:08:de:40:d2:ff:ec:bc:eb:fc:
9e:01:cd:30:47:23:cb:bf:bf:37:8e:e2:ff:3a:c8:
78:a3:cc:18:df:ac:c3:ab:c6:40:60:72:c8:db:0e:
5c:f3:b5:ce:b7:85:e6:e6:37:6f:f8:c2:93:68:ac:
05:33:d7:37:96:d2:b1:b3:be:62:08:bd:5a:b4:2a:
86:4a:d2:2c:b8:c8:b6:a4:0a:7b:9b:d2:f4:52:3d:
d7:ee:74:b0:63:a8:eb:a7:8a:be:fc:0c:47:55:71:
1f:eb:8b:da:e8:41:36:b7:2b:c2:eb:a9:ee:be:60:
dc:fd:28:0d:3c:c1:ac:4f:a3:e3:4b:50:6b:ec:ab:
75:5f:8c:53:ed:6b:fb:7f:80:3f:03:85:69:3f:3f:
34:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:D3:9B:C6:94:97:D8:73:02:DD:60:E5:B5:B7:1B:11:45:03:E1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VpPTm8aUl9hzAt1g5bW3GxFFA-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.55.0/24
Signature Algorithm: sha256WithRSAEncryption
65:fa:ff:f5:ff:57:56:66:c4:32:2e:5b:97:d6:05:3e:b7:12:
05:90:5b:8f:d9:2f:c0:1c:41:ce:4e:86:95:41:f4:06:05:2e:
a9:9d:1a:03:19:e6:aa:9a:1c:7c:1b:cd:85:aa:15:ce:ab:44:
c0:c6:c9:c1:db:1b:65:e4:cf:7c:9a:7d:25:6c:6c:73:84:95:
11:1c:d8:b7:11:6b:5e:38:76:38:54:ab:f4:3f:81:ba:b1:18:
da:df:32:b2:04:20:a5:ac:df:63:4a:33:d3:29:2a:bf:53:85:
39:27:fc:65:b7:92:18:de:94:b0:6e:31:0a:b2:70:28:6a:66:
2b:c4:a9:d6:0e:24:d4:55:31:40:27:70:00:83:fc:f1:aa:23:
8d:98:80:44:e0:00:d8:92:da:5b:cb:29:18:2e:f3:25:a0:67:
3c:5c:35:d5:b0:65:44:e1:97:b3:62:bc:77:47:ba:db:32:29:
77:e1:f7:cf:66:f5:23:25:fe:e6:34:05:be:ab:18:58:e2:72:
23:00:6f:5b:84:45:07:be:d2:31:d1:ed:81:94:65:0f:c2:3f:
6c:13:b8:10:99:c6:83:3a:80:8c:95:69:58:43:58:4a:66:ad:
96:a0:61:ff:04:26:39:93:3a:6b:16:5c:30:8a:b6:44:e9:5b:
33:46:e1:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5AlNepYsldMo0OZ+p4LJqeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwNTE5MTQxMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjkzZDM5YmM2OTQ5N2Q4NzMwMmRkNjBlNWI1YjcxYjExNDUwM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+QAjXfkpjBuN7atUWdurV7x+qnO
sj4dAThWRxcLwMDlidPKpONbhVy+vF9TmYF7q7nwmw7mGD3Ft5lbOuzlhJEJcIUv
SwbJPUaLxwUEhl8787CkcUFrcAeEmjN65Glm/oP2yjmPyX5arBusroUI3kDS/+y8
6/yeAc0wRyPLv783juL/Osh4o8wY36zDq8ZAYHLI2w5c87XOt4Xm5jdv+MKTaKwF
M9c3ltKxs75iCL1atCqGStIsuMi2pAp7m9L0Uj3X7nSwY6jrp4q+/AxHVXEf64va
6EE2tyvC66nuvmDc/SgNPMGsT6PjS1Br7Kt1X4xT7Wv7f4A/A4VpPz80FwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaT05vGlJfYcwLdYOW1txsRRQPhMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvVnBQVG04YVVsOWh6QXQxZzViVzNHeEZGQS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg83MA0G
CSqGSIb3DQEBCwUAA4IBAQBl+v/1/1dWZsQyLluX1gU+txIFkFuP2S/AHEHOToaV
QfQGBS6pnRoDGeaqmhx8G82FqhXOq0TAxsnB2xtl5M98mn0lbGxzhJURHNi3EWte
OHY4VKv0P4G6sRja3zKyBCClrN9jSjPTKSq/U4U5J/xlt5IY3pSwbjEKsnAoamYr
xKnWDiTUVTFAJ3AAg/zxqiONmIBE4ADYktpbyykYLvMloGc8XDXVsGVE4ZezYrx3
R7rbMil34ffPZvUjJf7mNAW+qxhY4nIjAG9bhEUHvtIx0e2BlGUPwj9sE7gQmcaD
OoCMlWlYQ1hKZq2WoGH/BCY5kzprFlwwirZE6VszRuHD
-----END CERTIFICATE-----
Generated at Wed May 20 21:45:46 2026 by rpki-client