Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/vYhb6AGc-xDZmFDTEAzyKLdtLN8.roa
File: vYhb6AGc-xDZmFDTEAzyKLdtLN8.roa (raw, json)
Hash identifier: ugbCx0tJXbSqbm0/IFdHYf2zCeC58MxvvJnLXGdXzrw=
Subject key identifier: BD:88:5B:E8:01:9C:FB:10:D9:98:50:D3:10:0C:F2:28:B7:6D:2C:DF
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 01A15F3B4A52BE4659891AF89C116FC2862B
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/vYhb6AGc-xDZmFDTEAzyKLdtLN8.roa
Signing time: Wed 21 Oct 2026 16:11:23 +0000
ROA not before: Wed 21 Oct 2026 16:11:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210559
IP address blocks: 80.240.105.0/24 maxlen: 24
82.158.122.0/24 maxlen: 24
82.158.127.0/24 maxlen: 24
146.185.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:3b:4a:52:be:46:59:89:1a:f8:9c:11:6f:c2:86:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Oct 21 16:11:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd885be8019cfb10d99850d3100cf228b76d2cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:4e:69:1e:8a:77:13:b3:98:ff:ff:d5:3e:
1f:14:6e:8a:3d:30:8d:16:2f:fe:fb:81:6f:1d:db:
64:e1:23:42:4a:52:89:40:67:e8:9a:e1:0b:4e:11:
78:81:33:98:23:cf:c5:8c:3e:11:80:a1:a3:0d:d0:
93:47:10:3e:43:be:51:aa:f4:90:30:25:d3:a9:6d:
54:f0:bb:69:31:df:9b:5a:c3:31:c8:5a:dc:27:9c:
1e:7f:d9:2f:7a:bd:19:6a:fb:54:f0:be:99:1d:4a:
d3:88:3d:a7:70:37:6e:3a:33:e8:d4:46:e5:04:b5:
98:66:75:be:f7:bc:fa:96:7f:da:f4:7c:92:70:6c:
8a:79:57:35:c2:10:be:c1:2c:46:81:09:28:66:d4:
de:53:68:ea:f7:6d:4f:4c:10:7f:f7:5a:cc:65:05:
20:60:b7:63:83:d9:a1:61:1f:18:51:21:7a:60:a5:
c9:3f:8e:53:f0:63:52:28:fc:b3:75:fb:af:0d:d4:
54:ed:f7:7f:4c:92:30:94:c9:37:57:5d:82:40:c6:
00:77:c0:72:1e:47:47:13:55:85:11:e3:f4:94:5f:
e3:63:ca:a7:00:47:56:4e:19:53:f7:d8:77:33:37:
d4:55:b4:6f:66:e4:6f:f9:3b:12:b1:5c:4b:9f:69:
05:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:5B:E8:01:9C:FB:10:D9:98:50:D3:10:0C:F2:28:B7:6D:2C:DF
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/vYhb6AGc-xDZmFDTEAzyKLdtLN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.105.0/24
82.158.122.0/24
82.158.127.0/24
146.185.216.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6e:11:29:92:c5:04:51:cc:93:3c:6e:95:fd:32:0a:32:6f:
70:2d:f9:6a:08:b3:88:9f:db:92:20:ac:3e:72:b2:91:f8:02:
0c:96:83:33:a0:8a:38:b8:84:17:1d:5e:af:d2:21:4c:0e:1c:
2b:9a:b0:8b:b3:38:37:87:50:23:5e:6a:c1:45:d2:ad:24:e9:
6f:37:ca:3d:fa:5d:63:48:cd:70:27:02:97:c2:a9:3f:23:28:
9d:5a:23:c8:86:85:7b:18:07:45:f8:25:a1:84:e5:2c:a2:98:
bf:6a:93:50:ac:6f:d6:f5:22:1d:1b:aa:ed:80:77:9f:38:08:
3e:5c:4f:a9:2b:5d:f0:7f:08:9f:2e:36:77:5e:41:ba:c8:50:
2f:39:ef:2f:96:be:7e:c4:a6:2a:af:44:f6:0c:cf:a1:b2:7b:
ed:f8:99:1c:f7:77:a8:08:a0:1c:42:93:b0:df:1e:5e:86:c4:
1b:14:14:fd:84:3b:d6:87:9c:48:73:9d:e0:8c:18:58:c5:2a:
54:c2:9c:b4:66:69:50:56:2d:2b:67:7e:10:e1:53:d3:5d:0f:
4b:88:35:1e:59:07:5a:c0:88:e9:3c:89:8c:89:8e:d0:be:5d:
b7:70:62:20:36:82:38:83:b9:05:88:18:ec:93:53:31:60:39:
29:f6:59:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:49:55 2026 by rpki-client