Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/vjnnj3G5SebpeaPAIXJb8Tt62MQ.roa
File: vjnnj3G5SebpeaPAIXJb8Tt62MQ.roa (raw, json)
Hash identifier: BmcmdODjCytMNk+M3oaKSDAoiHNkc3B1YVmJUX1D3tg=
Subject key identifier: BE:39:E7:8F:71:B9:49:E6:E9:79:A3:C0:21:72:5B:F1:3B:7A:D8:C4
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019CE1491CAD5267400A96B55EF04274A159
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/vjnnj3G5SebpeaPAIXJb8Tt62MQ.roa
Signing time: Thu 12 Mar 2026 09:03:10 +0000
ROA not before: Thu 12 Mar 2026 09:03:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 91.217.223.0/24 maxlen: 24
103.69.226.0/24 maxlen: 24
185.191.20.0/24 maxlen: 24
185.191.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:49:1c:ad:52:67:40:0a:96:b5:5e:f0:42:74:a1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Mar 12 09:03:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be39e78f71b949e6e979a3c021725bf13b7ad8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:5f:16:ab:0f:97:18:4e:3e:f3:c9:22:f0:
cc:63:29:28:44:3a:b6:94:a4:89:7c:19:78:10:e6:
24:91:a7:32:94:48:76:63:5f:12:e5:a4:54:3b:44:
ef:52:32:ca:2e:9f:34:53:0f:f4:ca:e5:24:54:35:
5b:0a:ea:6d:0c:a8:d6:c6:df:2f:aa:d7:fd:26:eb:
99:a9:37:6f:d2:09:1f:00:61:b1:a1:6e:cb:a7:4c:
4e:9f:fc:1d:f9:c8:5b:ab:97:3e:fa:21:0e:be:d8:
75:14:77:39:b1:a9:8a:35:f8:f5:e7:ed:b7:9a:7a:
d1:d5:b0:9b:20:c5:80:60:c8:76:42:42:49:8f:2b:
43:29:74:4a:c2:c8:11:34:ac:c2:a3:71:17:30:06:
0d:df:9a:4a:5c:4b:6b:41:d2:42:c1:0b:17:94:2c:
45:de:ac:67:fc:24:ec:cc:70:4c:1b:b5:93:24:70:
5e:90:17:8f:6d:c2:66:fb:f0:66:3d:ca:98:45:4b:
b1:b8:d8:f7:8b:ec:b3:de:3b:a9:38:de:ab:4e:39:
24:1d:a0:f0:35:4e:c0:f1:d7:09:c3:73:5f:4b:82:
27:e4:e6:8a:0e:cf:aa:6a:ec:af:d2:08:4c:54:54:
88:14:dd:cc:06:d7:aa:7a:e3:be:d6:bf:46:dd:ac:
b9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:39:E7:8F:71:B9:49:E6:E9:79:A3:C0:21:72:5B:F1:3B:7A:D8:C4
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/vjnnj3G5SebpeaPAIXJb8Tt62MQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
103.69.226.0/24
185.191.20.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:2a:63:17:17:74:b4:7a:a2:01:d5:d8:5e:23:e5:8c:4d:9a:
64:f0:47:9b:a6:ea:39:5f:0a:cd:51:f8:0f:f0:25:e4:c8:e8:
6c:ad:55:6f:73:ad:2c:9f:c1:a7:40:4c:32:7c:a7:cf:93:3d:
9b:b5:b9:fb:b6:37:35:3b:a2:b0:0c:11:27:4c:ff:0a:d3:1a:
d0:9a:5a:01:32:96:28:f7:e0:0d:b5:e6:54:2c:96:1e:de:e6:
24:15:29:82:b9:47:04:08:3d:28:1b:56:cd:12:1a:a6:6c:ec:
1c:ff:c5:92:80:41:54:49:31:42:78:f2:ff:95:5d:8b:d5:1e:
de:0f:58:e5:80:45:30:d5:f8:b8:2c:e9:be:b9:8c:e4:68:0d:
61:5e:5a:57:1e:e0:5f:7a:38:64:27:42:47:08:bb:14:ac:06:
cc:f6:fd:fe:43:ef:91:88:39:92:cd:14:1e:78:32:cb:ea:91:
c2:ec:d2:88:39:7a:96:8b:57:25:51:35:ff:17:66:50:ba:f1:
ca:18:ce:84:d8:8e:72:07:e5:88:5b:83:20:ea:65:52:c5:85:
84:ca:39:dd:df:a4:93:fc:ea:c2:f0:82:1d:6a:cb:0e:a4:9c:
13:b3:d6:43:fa:6e:c3:da:b3:58:16:e9:02:b9:9a:5a:f6:b3:
1c:b0:78:2c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZzhSRytUmdACpa1XvBCdKFZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjYwMzEyMDkwMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTM5ZTc4ZjcxYjk0OWU2ZTk3OWEzYzAyMTcyNWJmMTNiN2FkOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojJfFqsPlxhOPvPJIvDMYykoRDq2
lKSJfBl4EOYkkacylEh2Y18S5aRUO0TvUjLKLp80Uw/0yuUkVDVbCuptDKjWxt8v
qtf9JuuZqTdv0gkfAGGxoW7Lp0xOn/wd+chbq5c++iEOvth1FHc5samKNfj15+23
mnrR1bCbIMWAYMh2QkJJjytDKXRKwsgRNKzCo3EXMAYN35pKXEtrQdJCwQsXlCxF
3qxn/CTszHBMG7WTJHBekBePbcJm+/BmPcqYRUuxuNj3i+yz3jupON6rTjkkHaDw
NU7A8dcJw3NfS4In5OaKDs+qauyv0ghMVFSIFN3MBteqeuO+1r9G3ay5yQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL45549xuUnm6XmjwCFyW/E7etjEMB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvdmpubmozRzVTZWJwZWFQQUlYSmI4VHQ2Mk1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9nfAwQA
Z0XiAwQBub8UMA0GCSqGSIb3DQEBCwUAA4IBAQArKmMXF3S0eqIB1dheI+WMTZpk
8Eebpuo5XwrNUfgP8CXkyOhsrVVvc60sn8GnQEwyfKfPkz2btbn7tjc1O6KwDBEn
TP8K0xrQmloBMpYo9+ANteZULJYe3uYkFSmCuUcECD0oG1bNEhqmbOwc/8WSgEFU
STFCePL/lV2L1R7eD1jlgEUw1fi4LOm+uYzkaA1hXlpXHuBfejhkJ0JHCLsUrAbM
9v3+Q++RiDmSzRQeeDLL6pHC7NKIOXqWi1clUTX/F2ZQuvHKGM6E2I5yB+WIW4Mg
6mVSxYWEyjnd36ST/OrC8IIdassOpJwTs9ZD+m7D2rNYFukCuZpa9rMcsHgs
-----END CERTIFICATE-----
Generated at Fri Mar 13 19:32:12 2026 by rpki-client