Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa
File: g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa (raw, json)
Hash identifier: TOrWaXuO5cnSwfcfdr4weZtfskD6uoAqK0dRobZ2NQc=
Subject key identifier: 83:F0:DC:D2:83:90:25:BC:63:A1:39:78:06:1B:75:ED:94:FF:56:97
Certificate issuer: /CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Certificate serial: 019FD6552DAC30DFD7712CD26B8276DBDD52
Authority key identifier: 33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa
Signing time: Thu 06 Aug 2026 09:08:54 +0000
ROA not before: Thu 06 Aug 2026 09:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57803
IP address blocks: 91.236.148.0/22 maxlen: 22
91.238.64.0/22 maxlen: 22
91.238.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d6:55:2d:ac:30:df:d7:71:2c:d2:6b:82:76:db:dd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3335efbdd16fdfb03799ea1be279cf3334d1b8b1
Validity
Not Before: Aug 6 09:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83f0dcd2839025bc63a13978061b75ed94ff5697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:ba:46:44:e9:1d:cd:64:5e:b5:4d:86:18:
6c:9b:cf:8b:d1:4c:83:b6:fe:4b:00:8a:32:f9:e2:
bd:49:1f:4e:15:1f:21:88:28:ef:ea:67:27:59:48:
cd:d1:82:f1:12:b5:be:1d:40:a7:7b:e7:22:b3:d6:
3d:ec:b4:14:d9:d1:91:19:22:a9:3c:ac:03:6b:71:
b1:de:0e:6f:ba:3f:fb:05:62:ca:82:37:05:e9:83:
dc:ac:5c:67:c5:67:11:c6:b7:38:b1:a7:85:3a:be:
ee:1b:ce:9d:0c:03:03:ac:b1:53:73:8f:08:d1:1f:
49:17:7a:7f:1c:b6:b8:7d:5e:a6:0a:b0:8b:a0:06:
2c:9b:e5:c2:d3:69:f1:d2:88:08:fe:48:ed:eb:10:
4b:b3:f3:7d:dc:16:2c:d2:42:99:cf:b3:d2:ea:3b:
4f:b8:81:00:d0:0f:04:0f:ff:eb:9d:28:6a:ce:3e:
e6:38:01:4e:49:db:31:f2:50:ee:a7:62:df:fc:94:
be:16:57:fe:c4:81:8c:0f:1f:59:0e:ab:a7:c4:ca:
fe:cc:d7:5b:87:da:f9:55:50:84:84:0b:74:fc:21:
4f:62:8c:16:7e:37:2b:87:c9:0f:92:31:b2:fa:35:
b0:d7:5c:20:c2:04:a5:33:5a:30:0f:be:5c:ad:00:
66:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:DC:D2:83:90:25:BC:63:A1:39:78:06:1B:75:ED:94:FF:56:97
X509v3 Authority Key Identifier:
keyid:33:35:EF:BD:D1:6F:DF:B0:37:99:EA:1B:E2:79:CF:33:34:D1:B8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzXvvdFv37A3meob4nnPMzTRuLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/g_Dc0oOQJbxjoTl4Bht17ZT_Vpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7eb648-1268-4a19-a212-a257cb913e71/1/MzXvvdFv37A3meob4nnPMzTRuLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.148.0/22
91.238.64.0-91.238.69.255
Signature Algorithm: sha256WithRSAEncryption
38:65:cf:db:77:42:35:2c:cb:f6:62:47:13:9c:0b:03:5a:df:
f0:2e:ef:6e:19:48:96:39:3c:ad:1f:d2:bd:4b:a0:0a:60:69:
75:c0:13:23:46:2b:b0:0d:04:33:cc:d3:a7:6f:24:fc:3c:e6:
a4:5c:2e:06:06:62:0e:0a:4a:f5:f9:c6:ec:38:e7:6f:45:a2:
0f:a6:79:f8:b0:c9:e2:69:78:0d:d9:b7:6a:1d:f6:0d:c3:0f:
8b:dd:6b:1d:2f:a2:9c:88:d5:21:94:1d:73:32:4e:4f:33:2c:
5a:a4:c3:68:52:ff:cb:d5:74:ae:f5:a6:e0:ae:1b:1d:20:48:
8d:ac:64:3e:60:65:d5:22:98:2c:1c:5d:2c:23:6f:07:ec:d1:
13:25:9a:64:ae:da:c1:96:87:76:5f:ca:ae:d8:a6:76:4d:32:
9b:f8:3b:46:26:03:57:a7:11:e6:2e:b3:fa:fa:8d:e2:92:45:
c2:08:e0:89:18:64:3e:76:8a:d6:9e:17:f5:63:ae:15:85:ce:
4a:f8:85:f7:11:55:f9:92:78:eb:11:1c:74:d6:eb:6a:99:ee:
23:b7:5b:6c:11:fc:ff:8c:c4:c5:6a:27:c1:41:8c:91:36:f5:
dd:40:2c:47:cc:df:1c:2c:69:8d:25:9c:78:a0:d3:47:07:62:
03:31:be:ad
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ/WVS2sMN/XcSzSa4J2291SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzVlZmJkZDE2ZmRmYjAzNzk5ZWExYmUyNzljZjMzMzRk
MWI4YjEwHhcNMjYwODA2MDkwODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2YwZGNkMjgzOTAyNWJjNjNhMTM5NzgwNjFiNzVlZDk0ZmY1Njk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG66RkTpHc1kXrVNhhhsm8+L0UyD
tv5LAIoy+eK9SR9OFR8hiCjv6mcnWUjN0YLxErW+HUCne+cis9Y97LQU2dGRGSKp
PKwDa3Gx3g5vuj/7BWLKgjcF6YPcrFxnxWcRxrc4saeFOr7uG86dDAMDrLFTc48I
0R9JF3p/HLa4fV6mCrCLoAYsm+XC02nx0ogI/kjt6xBLs/N93BYs0kKZz7PS6jtP
uIEA0A8ED//rnShqzj7mOAFOSdsx8lDup2Lf/JS+Flf+xIGMDx9ZDqunxMr+zNdb
h9r5VVCEhAt0/CFPYowWfjcrh8kPkjGy+jWw11wgwgSlM1owD75crQBm+QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFIPw3NKDkCW8Y6E5eAYbde2U/1aXMB8GA1UdIwQY
MBaAFDM1773Rb9+wN5nqG+J5zzM00bixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpYdnZkRnYzN0EzbWVvYjRublBNelRSdUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83ZWI2NDgtMTI2OC00YTE5LWEyMTIt
YTI1N2NiOTEzZTcxLzEvZ19EYzBvT1FKYnhqb1RsNEJodDE3WlRfVnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83ZWI2NDgtMTI2OC00YTE5LWEyMTItYTI1N2NiOTEzZTcx
LzEvTXpYdnZkRnYzN0EzbWVvYjRublBNelRSdUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCW+yUMAwD
BAZb7kADBAFb7kQwDQYJKoZIhvcNAQELBQADggEBADhlz9t3QjUsy/ZiRxOcCwNa
3/Au724ZSJY5PK0f0r1LoApgaXXAEyNGK7ANBDPM06dvJPw85qRcLgYGYg4KSvX5
xuw4529Fog+mefiwyeJpeA3Zt2od9g3DD4vdax0vopyI1SGUHXMyTk8zLFqkw2hS
/8vVdK71puCuGx0gSI2sZD5gZdUimCwcXSwjbwfs0RMlmmSu2sGWh3Zfyq7YpnZN
Mpv4O0YmA1enEeYus/r6jeKSRcII4IkYZD52itaeF/VjrhWFzkr4hfcRVfmSeOsR
HHTW62qZ7iO3W2wR/P+MxMVqJ8FBjJE29d1ALEfM3xwsaY0lnHig00cHYgMxvq0=
-----END CERTIFICATE-----
Generated at Thu Sep 10 02:47:50 2026 by rpki-client