Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa
File: Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa (raw, json)
Hash identifier: eTI4gnLg2t5AMJXWsqRgOPsBhukLdQ0XY5+wofN0AgI=
Subject key identifier: 56:1B:EC:EC:05:C1:7F:C2:59:54:A2:13:67:78:76:36:5F:08:48:37
Certificate issuer: /CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Certificate serial: 01A00EC77521081989F40C8C48B72E38E5CC
Authority key identifier: 95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa
Signing time: Mon 17 Aug 2026 08:12:27 +0000
ROA not before: Mon 17 Aug 2026 08:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43754
IP address blocks: 31.216.62.0/24 maxlen: 24
193.111.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0e:c7:75:21:08:19:89:f4:0c:8c:48:b7:2e:38:e5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9568c6005b2840ab7bf8a3ad72a1751d0db29b9c
Validity
Not Before: Aug 17 08:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=561becec05c17fc25954a213677876365f084837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:41:7e:13:54:6f:bd:0d:06:ed:3c:f4:44:a0:
4b:02:ad:30:f5:12:c1:c9:2d:46:3b:82:46:00:b7:
50:59:a2:db:2c:ea:fb:b3:13:b6:61:45:11:85:d5:
9e:7c:bb:96:54:5f:1f:3d:e0:63:85:03:ac:43:bf:
c8:45:56:fd:af:77:40:e6:17:dd:c3:b8:19:1c:ae:
13:50:fa:2f:75:5c:ae:87:44:3e:35:ae:ea:6a:73:
b7:62:ca:c8:54:9a:b4:1d:53:4d:a8:73:0a:8f:26:
50:63:77:9c:53:33:6f:a2:a5:ec:a4:dc:6b:ce:4a:
8e:0d:a3:bb:36:3a:30:b1:7d:a2:fc:b5:6a:6f:f5:
01:e9:9d:fe:60:76:6e:6a:b0:71:0d:01:f0:55:9c:
a5:e1:38:a1:9c:36:c2:7a:e7:ae:3f:b8:d8:68:69:
9d:37:71:51:23:90:6a:d1:24:2b:5e:09:48:a5:ce:
a9:e7:c8:e6:d1:8d:fe:f6:85:6a:56:90:9a:ce:bc:
10:14:94:bd:b3:02:7e:ad:39:6a:f9:23:49:c0:6c:
d1:0c:bf:1a:f0:c3:72:4c:a2:e0:b0:43:e0:a9:01:
ae:64:a1:c5:24:df:3f:f8:f5:9c:ad:29:5c:60:d2:
72:37:3a:43:3a:60:26:43:74:88:0f:1b:2e:56:f9:
7f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:EC:EC:05:C1:7F:C2:59:54:A2:13:67:78:76:36:5F:08:48:37
X509v3 Authority Key Identifier:
keyid:95:68:C6:00:5B:28:40:AB:7B:F8:A3:AD:72:A1:75:1D:0D:B2:9B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/Vhvs7AXBf8JZVKITZ3h2Nl8ISDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b980a-1eb6-4808-8afa-3a5e18d00ddc/1/lWjGAFsoQKt7-KOtcqF1HQ2ym5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.62.0/24
193.111.234.0/24
Signature Algorithm: sha256WithRSAEncryption
38:72:d8:ca:fd:37:60:c9:c6:1c:61:13:90:bd:b3:e8:f1:9e:
71:7a:0b:97:7e:aa:8e:d7:16:bb:13:da:4d:bf:e2:1b:37:f2:
18:bd:f0:59:85:4b:c9:63:f5:97:d4:11:2c:18:31:12:aa:14:
40:a2:74:57:1d:d7:9e:f1:c2:31:b5:03:7d:42:db:30:a0:03:
dd:7d:da:a2:56:08:98:9a:43:08:42:d6:15:a9:67:fc:b9:8c:
26:20:6d:77:8e:7a:22:d2:d4:54:0a:7d:2f:b3:5e:24:85:c9:
02:8e:0b:ac:03:3f:0f:a3:92:50:1f:4f:04:d1:2d:6a:0c:cc:
af:eb:de:25:39:ff:c2:6c:55:34:58:b8:bc:58:2c:bc:f3:e7:
61:a4:e4:f2:82:ad:d1:44:96:8a:63:8c:ef:c3:33:70:70:3a:
ed:ae:be:0a:52:43:f9:33:8f:1f:19:f5:55:95:6a:21:28:1f:
3f:47:42:19:5c:9a:2a:a3:bb:c3:b0:ba:94:a6:86:92:cd:c2:
71:8b:7a:1b:10:83:3e:50:c0:38:13:29:74:31:91:f4:f7:7f:
e0:dd:20:fa:3f:46:9a:35:a8:c8:a0:54:32:cb:a5:a6:fe:f9:
af:5a:46:c8:ad:49:ff:f4:03:21:c6:23:77:76:9a:04:86:d5:
b9:51:49:4a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAOx3UhCBmJ9AyMSLcuOOXMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NjhjNjAwNWIyODQwYWI3YmY4YTNhZDcyYTE3NTFkMGRi
MjliOWMwHhcNMjYwODE3MDgxMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjFiZWNlYzA1YzE3ZmMyNTk1NGEyMTM2Nzc4NzYzNjVmMDg0ODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUF+E1RvvQ0G7Tz0RKBLAq0w9RLB
yS1GO4JGALdQWaLbLOr7sxO2YUURhdWefLuWVF8fPeBjhQOsQ7/IRVb9r3dA5hfd
w7gZHK4TUPovdVyuh0Q+Na7qanO3YsrIVJq0HVNNqHMKjyZQY3ecUzNvoqXspNxr
zkqODaO7NjowsX2i/LVqb/UB6Z3+YHZuarBxDQHwVZyl4TihnDbCeueuP7jYaGmd
N3FRI5Bq0SQrXglIpc6p58jm0Y3+9oVqVpCazrwQFJS9swJ+rTlq+SNJwGzRDL8a
8MNyTKLgsEPgqQGuZKHFJN8/+PWcrSlcYNJyNzpDOmAmQ3SIDxsuVvl//QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFYb7OwFwX/CWVSiE2d4djZfCEg3MB8GA1UdIwQY
MBaAFJVoxgBbKECre/ijrXKhdR0NspucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEt
M2E1ZTE4ZDAwZGRjLzEvVmh2czdBWEJmOEpaVktJVFozaDJObDhJU0RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjk4MGEtMWViNi00ODA4LThhZmEtM2E1ZTE4ZDAwZGRj
LzEvbFdqR0FGc29RS3Q3LUtPdGNxRjFIUTJ5bTV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH9g+AwQA
wW/qMA0GCSqGSIb3DQEBCwUAA4IBAQA4ctjK/TdgycYcYROQvbPo8Z5xeguXfqqO
1xa7E9pNv+IbN/IYvfBZhUvJY/WX1BEsGDESqhRAonRXHdee8cIxtQN9QtswoAPd
fdqiVgiYmkMIQtYVqWf8uYwmIG13jnoi0tRUCn0vs14khckCjgusAz8Po5JQH08E
0S1qDMyv694lOf/CbFU0WLi8WCy88+dhpOTygq3RRJaKY4zvwzNwcDrtrr4KUkP5
M48fGfVVlWohKB8/R0IZXJoqo7vDsLqUpoaSzcJxi3obEIM+UMA4Eyl0MZH093/g
3SD6P0aaNajIoFQyy6Wm/vmvWkbIrUn/9AMhxiN3dpoEhtW5UUlK
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:53 2026 by rpki-client