Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/va-rBoxEqI0z18Y4NR-PRCvxtKg.roa
File: va-rBoxEqI0z18Y4NR-PRCvxtKg.roa (raw, json)
Hash identifier: ULzDNQNkCitVvf+8Dzgbzjhvsl8+LT0Jc1Vur579F9I=
Subject key identifier: BD:AF:AB:06:8C:44:A8:8D:33:D7:C6:38:35:1F:8F:44:2B:F1:B4:A8
Certificate issuer: /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial: 019ED5B76BE6FB26BAB94E84102E6602A4DC
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/va-rBoxEqI0z18Y4NR-PRCvxtKg.roa
Signing time: Wed 17 Jun 2026 13:13:48 +0000
ROA not before: Wed 17 Jun 2026 13:13:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8881
IP address blocks: 24.40.128.0/18 maxlen: 18
46.142.0.0/16 maxlen: 16
46.142.0.0/18 maxlen: 20
46.142.64.0/19 maxlen: 20
46.142.96.0/19 maxlen: 19
46.142.96.0/20 maxlen: 20
46.142.128.0/19 maxlen: 19
46.142.160.0/19 maxlen: 19
46.142.214.0/24 maxlen: 24
46.142.224.0/19 maxlen: 19
46.189.0.0/17 maxlen: 17
46.189.116.0/24 maxlen: 24
61.8.128.0/19 maxlen: 21
62.72.64.0/19 maxlen: 19
62.72.70.0/24 maxlen: 24
62.214.0.0/16 maxlen: 16
62.214.224.0/19 maxlen: 19
62.217.32.0/19 maxlen: 19
62.220.0.0/19 maxlen: 19
80.241.192.0/20 maxlen: 20
80.242.160.0/19 maxlen: 19
82.119.160.0/19 maxlen: 19
82.140.0.0/18 maxlen: 18
82.140.48.0/20 maxlen: 20
82.144.32.0/19 maxlen: 19
82.145.0.0/19 maxlen: 19
82.194.96.0/19 maxlen: 19
82.207.128.0/17 maxlen: 17
82.207.192.0/19 maxlen: 19
82.207.224.0/19 maxlen: 19
83.135.0.0/16 maxlen: 16
83.135.0.0/20 maxlen: 20
83.135.64.0/19 maxlen: 19
83.135.96.0/19 maxlen: 19
83.135.128.0/19 maxlen: 22
83.135.160.0/21 maxlen: 21
83.135.168.0/21 maxlen: 21
83.135.176.0/22 maxlen: 22
83.135.184.0/21 maxlen: 21
83.135.208.0/20 maxlen: 20
83.135.224.0/22 maxlen: 22
83.135.240.0/22 maxlen: 22
84.19.192.0/19 maxlen: 19
87.122.0.0/15 maxlen: 15
87.122.0.0/20 maxlen: 20
87.122.16.0/20 maxlen: 20
87.122.32.0/19 maxlen: 19
87.122.64.0/19 maxlen: 20
87.122.96.0/19 maxlen: 19
87.122.128.0/21 maxlen: 21
87.122.144.0/20 maxlen: 20
87.122.160.0/20 maxlen: 20
87.122.192.0/19 maxlen: 19
87.122.224.0/19 maxlen: 20
87.123.0.0/19 maxlen: 20
87.123.32.0/19 maxlen: 19
87.123.64.0/20 maxlen: 20
87.123.80.0/20 maxlen: 20
87.123.96.0/19 maxlen: 19
87.123.128.0/19 maxlen: 19
87.123.160.0/20 maxlen: 20
87.123.194.0/24 maxlen: 24
87.123.196.0/24 maxlen: 24
87.123.224.0/20 maxlen: 20
87.123.240.0/21 maxlen: 21
88.130.0.0/16 maxlen: 16
88.130.32.0/20 maxlen: 20
88.130.48.0/20 maxlen: 24
88.130.64.0/19 maxlen: 19
88.130.96.0/19 maxlen: 19
88.130.144.0/20 maxlen: 20
88.130.172.0/22 maxlen: 22
88.130.194.0/23 maxlen: 23
88.130.216.0/21 maxlen: 21
89.27.128.0/17 maxlen: 17
89.207.200.0/21 maxlen: 21
89.244.0.0/14 maxlen: 14
89.244.76.0/22 maxlen: 22
89.244.80.0/20 maxlen: 20
89.244.96.0/22 maxlen: 22
89.244.120.0/21 maxlen: 21
89.244.176.0/20 maxlen: 20
89.244.192.0/19 maxlen: 20
89.245.0.0/20 maxlen: 20
89.245.16.0/20 maxlen: 20
89.245.32.0/19 maxlen: 19
89.245.64.0/19 maxlen: 19
89.245.96.0/20 maxlen: 20
89.245.158.0/24 maxlen: 24
89.245.159.0/24 maxlen: 24
89.245.176.0/21 maxlen: 21
89.245.192.0/19 maxlen: 19
89.245.224.0/19 maxlen: 20
89.246.32.0/19 maxlen: 19
89.246.96.0/21 maxlen: 21
89.246.112.0/20 maxlen: 20
89.246.122.0/24 maxlen: 24
89.246.124.0/22 maxlen: 22
89.246.160.0/21 maxlen: 21
89.246.192.0/19 maxlen: 19
89.247.0.0/19 maxlen: 19
89.247.32.0/19 maxlen: 19
89.247.32.0/20 maxlen: 20
89.247.112.0/21 maxlen: 21
89.247.144.0/20 maxlen: 20
89.247.160.0/20 maxlen: 20
89.247.179.0/24 maxlen: 24
89.247.216.0/22 maxlen: 22
89.247.232.0/21 maxlen: 21
89.247.240.0/21 maxlen: 21
89.247.252.0/22 maxlen: 22
94.134.0.0/15 maxlen: 15
94.134.64.0/18 maxlen: 23
94.134.89.0/24 maxlen: 24
94.134.128.0/17 maxlen: 23
104.151.0.0/17 maxlen: 17
143.58.64.0/18 maxlen: 18
185.108.228.0/23 maxlen: 23
185.128.68.0/22 maxlen: 22
193.219.15.0/24 maxlen: 24
195.167.208.0/20 maxlen: 20
195.202.32.0/19 maxlen: 19
195.226.96.0/19 maxlen: 19
195.226.160.0/19 maxlen: 19
202.71.128.0/20 maxlen: 24
202.89.144.0/20 maxlen: 20
212.7.128.0/19 maxlen: 19
212.80.224.0/19 maxlen: 19
212.93.0.0/19 maxlen: 19
212.204.0.0/19 maxlen: 19
213.30.192.0/18 maxlen: 18
213.138.32.0/19 maxlen: 19
213.138.35.0/24 maxlen: 24
213.139.128.0/19 maxlen: 19
213.182.128.0/19 maxlen: 19
217.9.32.0/19 maxlen: 19
217.9.96.0/19 maxlen: 19
217.27.192.0/20 maxlen: 20
217.65.16.0/20 maxlen: 20
217.78.128.0/20 maxlen: 20
217.199.64.0/20 maxlen: 20
2001:7b0::/32 maxlen: 32
2001:9e8::/32 maxlen: 32
2001:9e8::/35 maxlen: 35
2001:9e8:2000::/35 maxlen: 35
2001:9e8:4000::/35 maxlen: 35
2001:9e8:6000::/35 maxlen: 35
2001:9e8:8000::/35 maxlen: 35
2001:9e8:a000::/35 maxlen: 35
2001:9e8:c000::/35 maxlen: 35
2001:9e8:e000::/35 maxlen: 36
2001:1438::/32 maxlen: 36
2001:1438:1::/48 maxlen: 56
2001:1438:300::/56 maxlen: 56
2001:16b8::/32 maxlen: 40
2a00:fb8::/29 maxlen: 29
2a00:fb8::/35 maxlen: 35
2a00:fb8:2000::/35 maxlen: 35
2a00:fb8:4000::/35 maxlen: 35
2a00:fb8:6000::/35 maxlen: 35
2a00:fbc::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:b7:6b:e6:fb:26:ba:b9:4e:84:10:2e:66:02:a4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Validity
Not Before: Jun 17 13:13:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdafab068c44a88d33d7c638351f8f442bf1b4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:44:21:40:9d:c0:61:0c:7e:91:d0:2d:a8:
35:eb:30:a5:88:02:0c:4f:bf:c5:df:73:eb:8d:fe:
13:66:4e:e8:a4:e8:2f:87:39:5b:63:8f:51:1a:52:
18:96:e4:00:f2:a3:45:8a:97:5e:21:80:c5:95:a8:
b0:be:dc:c1:11:11:7d:a5:88:b2:22:45:21:dd:01:
df:e8:27:13:37:14:f7:97:cc:95:e4:34:2a:c6:0b:
60:d4:8e:c3:af:91:b7:87:d8:45:9f:e6:8f:56:33:
30:f2:11:29:c8:da:40:3a:c3:fe:8e:9d:07:65:1a:
22:7a:c3:05:54:77:e3:5c:3d:f3:aa:40:87:7f:6d:
cc:62:1e:9c:08:21:f0:82:95:e8:97:95:03:51:82:
7a:18:f1:ee:9f:bc:2b:93:72:13:62:8a:97:5c:6e:
93:c6:a5:ed:e3:fe:d5:a4:7e:2e:36:7c:bb:4a:df:
96:d2:11:21:00:dc:f3:58:0f:52:52:83:ad:42:18:
6d:db:fc:b9:a7:8a:b5:24:11:ff:9e:e8:aa:7e:7a:
ac:88:ed:d5:21:65:30:ff:d2:14:c6:8b:b6:fb:6f:
7a:13:15:31:5e:93:9b:b8:41:88:bd:3c:0f:9a:fd:
2e:a2:28:92:9c:a1:c9:ea:36:62:89:4c:b7:f3:f5:
20:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AF:AB:06:8C:44:A8:8D:33:D7:C6:38:35:1F:8F:44:2B:F1:B4:A8
X509v3 Authority Key Identifier:
keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/va-rBoxEqI0z18Y4NR-PRCvxtKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.40.128.0/18
46.142.0.0/16
46.189.0.0/17
61.8.128.0/19
62.72.64.0/19
62.214.0.0/16
62.217.32.0/19
62.220.0.0/19
80.241.192.0/20
80.242.160.0/19
82.119.160.0/19
82.140.0.0/18
82.144.32.0/19
82.145.0.0/19
82.194.96.0/19
82.207.128.0/17
83.135.0.0/16
84.19.192.0/19
87.122.0.0/15
88.130.0.0/16
89.27.128.0/17
89.207.200.0/21
89.244.0.0/14
94.134.0.0/15
104.151.0.0/17
143.58.64.0/18
185.108.228.0/23
185.128.68.0/22
193.219.15.0/24
195.167.208.0/20
195.202.32.0/19
195.226.96.0/19
195.226.160.0/19
202.71.128.0/20
202.89.144.0/20
212.7.128.0/19
212.80.224.0/19
212.93.0.0/19
212.204.0.0/19
213.30.192.0/18
213.138.32.0/19
213.139.128.0/19
213.182.128.0/19
217.9.32.0/19
217.9.96.0/19
217.27.192.0/20
217.65.16.0/20
217.78.128.0/20
217.199.64.0/20
IPv6:
2001:7b0::/32
2001:9e8::/32
2001:1438::/32
2001:16b8::/32
2a00:fb8::/29
Signature Algorithm: sha256WithRSAEncryption
a3:c5:76:b0:b4:d5:58:4a:d8:52:94:ff:fa:25:88:5f:f8:ef:
f5:cf:f7:4f:b5:ec:85:11:82:c3:82:15:04:92:c0:ec:5f:a8:
66:ae:53:03:27:1f:5f:dd:10:af:22:96:94:02:e2:7d:e3:96:
1e:a3:1f:4e:30:cf:e0:66:5a:c1:c4:6b:82:fc:db:8c:ce:09:
87:5c:b8:43:fa:27:b6:56:4d:ab:e0:f4:af:56:4c:f0:96:a4:
7d:68:d8:d1:45:86:a0:64:8d:db:b7:c4:41:fe:00:4f:4b:20:
8f:03:7f:3e:b6:84:6d:9d:51:33:7f:6e:a5:d2:50:2f:d5:95:
c0:17:0d:16:b0:0b:07:96:3a:6d:ff:e9:72:8a:77:5d:99:ab:
80:82:7e:3b:ee:b8:de:cb:e4:6e:f8:46:c7:5f:40:ca:17:da:
2e:b5:9d:4d:e3:b8:30:dd:8e:92:fc:cf:3d:65:35:2a:e5:24:
2f:76:1f:4d:98:c6:0a:5f:2a:35:b0:03:ed:74:34:ed:1b:15:
da:fd:b3:e8:19:4c:ec:85:7a:f8:91:74:22:a4:f3:8b:ef:03:
65:71:f4:e6:56:e9:d3:b6:ec:f2:30:2a:cb:63:80:d1:14:cd:
9d:96:37:ff:0c:21:7a:f3:4c:a6:5e:86:b7:e9:68:09:b3:dc:
0d:59:22:62
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISAZ7Vt2vm+ya6uU6EEC5mAqTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDFhMTM1M2Y3ZjhiNTA1ZmM5ODc1MGU4Njc4N2Y0ZTA0
NjQzMmUwHhcNMjYwNjE3MTMxMzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGFmYWIwNjhjNDRhODhkMzNkN2M2MzgzNTFmOGY0NDJiZjFiNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml5EIUCdwGEMfpHQLag16zCliAIM
T7/F33Prjf4TZk7opOgvhzlbY49RGlIYluQA8qNFipdeIYDFlaiwvtzBERF9pYiy
IkUh3QHf6CcTNxT3l8yV5DQqxgtg1I7Dr5G3h9hFn+aPVjMw8hEpyNpAOsP+jp0H
ZRoiesMFVHfjXD3zqkCHf23MYh6cCCHwgpXol5UDUYJ6GPHun7wrk3ITYoqXXG6T
xqXt4/7VpH4uNny7St+W0hEhANzzWA9SUoOtQhht2/y5p4q1JBH/nuiqfnqsiO3V
IWUw/9IUxou2+296ExUxXpObuEGIvTwPmv0uoiiSnKHJ6jZiiUy38/UgwQIDAQAB
o4IDVzCCA1MwHQYDVR0OBBYEFL2vqwaMRKiNM9fGODUfj0Qr8bSoMB8GA1UdIwQY
MBaAFAHRoTU/f4tQX8mHUOhnh/TgRkMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEt
NjQzYTQxNTlhYjQ2LzEvdmEtckJveEVxSTB6MThZNE5SLVBSQ3Z4dEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iMTM5M2QtY2NhOC00YTk3LTgxYWEtNjQzYTQxNTlhYjQ2
LzEvQWRHaE5UOV9pMUJmeVlkUTZHZUg5T0JHUXk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBawYIKwYBBQUHAQcBAf8EggFaMIIBVjCCAScEAgABMIIB
HwMEBhgogAMDAC6OAwQHLr0AAwQFPQiAAwQFPkhAAwMAPtYDBAU+2SADBAU+3AAD
BARQ8cADBAVQ8qADBAVSd6ADBAZSjAADBAVSkCADBAVSkQADBAVSwmADBAdSz4AD
AwBThwMEBVQTwAMDAVd6AwMAWIIDBAdZG4ADBANZz8gDAwJZ9AMDAV6GAwQHaJcA
AwQGjzpAAwQBuWzkAwQCuYBEAwQAwdsPAwQEw6fQAwQFw8ogAwQFw+JgAwQFw+Kg
AwQEykeAAwQEylmQAwQF1AeAAwQF1FDgAwQF1F0AAwQF1MwAAwQG1R7AAwQF1Yog
AwQF1YuAAwQF1baAAwQF2QkgAwQF2QlgAwQE2RvAAwQE2UEQAwQE2U6AAwQE2cdA
MCkEAgACMCMDBQAgAQewAwUAIAEJ6AMFACABFDgDBQAgARa4AwUDKgAPuDANBgkq
hkiG9w0BAQsFAAOCAQEAo8V2sLTVWErYUpT/+iWIX/jv9c/3T7XshRGCw4IVBJLA
7F+oZq5TAycfX90QryKWlALifeOWHqMfTjDP4GZawcRrgvzbjM4Jh1y4Q/ontlZN
q+D0r1ZM8JakfWjY0UWGoGSN27fEQf4AT0sgjwN/PraEbZ1RM39updJQL9WVwBcN
FrALB5Y6bf/pcop3XZmrgIJ+O+643svkbvhGx19AyhfaLrWdTeO4MN2OkvzPPWU1
KuUkL3YfTZjGCl8qNbAD7XQ07RsV2v2z6BlM7IV6+JF0IqTzi+8DZXH05lbp07bs
8jAqy2OA0RTNnZY3/wwhevNMpl6Gt+loCbPcDVkiYg==
-----END CERTIFICATE-----
Generated at Sun Jun 21 18:44:28 2026 by rpki-client