Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/VhmojP-CFFZBA8BPvBh0GkaGc1o.roa
File: VhmojP-CFFZBA8BPvBh0GkaGc1o.roa (raw, json)
Hash identifier: b69Rk2zjrqAJ3RnqwjsPuQNOD6Vq27924r0nv/Rqjjk=
Subject key identifier: 56:19:A8:8C:FF:82:14:56:41:03:C0:4F:BC:18:74:1A:46:86:73:5A
Certificate issuer: /CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Certificate serial: 01A111B9685DB527FD4D8A95BA39B9F5AA58
Authority key identifier: 1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/VhmojP-CFFZBA8BPvBh0GkaGc1o.roa
Signing time: Tue 06 Oct 2026 14:58:45 +0000
ROA not before: Tue 06 Oct 2026 14:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12350
IP address blocks: 144.85.0.0/16 maxlen: 16
185.133.28.0/22 maxlen: 22
194.38.64.0/19 maxlen: 19
194.38.160.0/19 maxlen: 19
194.148.4.0/22 maxlen: 22
194.148.8.0/21 maxlen: 21
194.148.16.0/20 maxlen: 20
194.148.32.0/20 maxlen: 20
194.148.48.0/22 maxlen: 22
194.148.60.0/22 maxlen: 22
194.148.96.0/19 maxlen: 19
195.15.0.0/17 maxlen: 17
212.28.128.0/19 maxlen: 19
212.40.0.0/19 maxlen: 19
212.109.64.0/19 maxlen: 19
212.147.0.0/17 maxlen: 17
212.147.79.0/24 maxlen: 24
212.232.128.0/17 maxlen: 17
212.254.0.0/16 maxlen: 16
213.5.152.0/21 maxlen: 21
213.162.0.0/19 maxlen: 19
2001:4c78::/32 maxlen: 32
2a03:a360::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:b9:68:5d:b5:27:fd:4d:8a:95:ba:39:b9:f5:aa:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f739d213a438f678b322a8f8f84e2d8c7814aca
Validity
Not Before: Oct 6 14:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5619a88cff8214564103c04fbc18741a4686735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a0:0a:73:83:66:a4:f5:8e:84:89:4b:c6:19:
f9:5a:57:83:36:df:ff:41:31:cb:f7:66:61:80:d6:
b8:50:5e:20:ed:fa:d8:e3:4c:e0:4e:78:00:15:7f:
f9:0f:28:67:3e:e4:d2:8a:c8:06:7c:78:c3:85:5d:
3f:6d:fc:d7:61:9c:3b:62:cf:02:ca:5b:b3:7b:87:
37:24:8b:2c:84:b4:9b:71:78:9c:23:86:48:fb:c7:
d7:42:08:43:14:9e:d9:55:35:40:3f:9f:b0:ab:3d:
a7:cf:8a:4b:a7:82:0b:a7:e6:e2:5f:fb:31:3b:e2:
df:7e:cc:f3:6f:61:6e:06:c6:84:ca:68:ca:43:b8:
21:1a:4c:6a:f2:b2:03:7c:b3:b3:1c:5b:09:bb:61:
d5:87:eb:ab:b1:bb:ba:24:9f:f5:ae:2f:38:a1:c9:
e6:70:ba:7f:85:13:18:d3:23:6f:04:9f:58:ed:1e:
99:43:f5:8b:44:a7:2e:2b:b2:05:69:4f:7a:ce:8e:
3a:d2:94:03:bd:9a:12:e7:8c:06:44:13:f4:db:e8:
b9:a9:c8:5c:a4:f9:84:45:72:27:1c:e9:bc:10:eb:
ec:bc:fd:85:c7:d9:3c:df:d9:2e:ff:b1:80:67:a1:
24:75:19:8a:1a:85:0f:5d:8d:22:a1:ec:ee:35:1d:
ac:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:A8:8C:FF:82:14:56:41:03:C0:4F:BC:18:74:1A:46:86:73:5A
X509v3 Authority Key Identifier:
keyid:1F:73:9D:21:3A:43:8F:67:8B:32:2A:8F:8F:84:E2:D8:C7:81:4A:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3OdITpDj2eLMiqPj4Ti2MeBSso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/VhmojP-CFFZBA8BPvBh0GkaGc1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/81bc95-1444-408a-92f1-392e05a84277/1/H3OdITpDj2eLMiqPj4Ti2MeBSso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.85.0.0/16
185.133.28.0/22
194.38.64.0/19
194.38.160.0/19
194.148.4.0-194.148.51.255
194.148.60.0/22
194.148.96.0/19
195.15.0.0/17
212.28.128.0/19
212.40.0.0/19
212.109.64.0/19
212.147.0.0/17
212.232.128.0/17
212.254.0.0/16
213.5.152.0/21
213.162.0.0/19
IPv6:
2001:4c78::/32
2a03:a360::/32
Signature Algorithm: sha256WithRSAEncryption
ae:86:63:25:35:5f:ed:55:f1:fe:3d:39:67:bb:aa:bd:2a:85:
de:8e:f1:84:7b:ba:fb:22:6f:ef:b9:12:91:5e:58:7f:a9:19:
15:16:e4:cf:fc:89:d6:f6:98:2d:df:1f:60:12:f2:54:29:fa:
27:bb:65:62:78:e8:c4:1f:ad:be:08:7f:d3:12:ba:d5:7b:36:
86:ef:6f:db:ed:15:8e:df:47:5f:f1:cd:01:c2:74:f5:32:70:
7b:ba:a9:14:92:23:a9:70:3d:e2:4a:c3:d5:84:74:38:70:79:
3e:69:09:84:ab:c9:19:cd:1c:55:00:13:b3:d3:17:59:c5:f0:
a1:78:d8:72:7b:4e:37:26:03:e7:cf:12:c5:88:24:2c:4f:b5:
6e:e3:d9:2a:2f:09:32:73:86:96:bc:22:31:ed:d5:b0:37:ad:
0f:e5:2e:be:b8:46:60:d9:27:26:86:47:d0:fb:c6:a8:49:93:
35:94:72:55:c2:bc:03:f8:0d:b7:ee:9e:4e:22:16:c1:51:66:
71:51:ac:35:a4:98:a4:8b:6a:e4:ba:24:ff:c8:e2:8b:6b:86:
a6:18:eb:01:f8:25:8f:7b:41:ae:e3:85:29:c3:db:2c:11:77:
4c:7d:74:f7:24:d7:f3:22:dd:e9:dc:79:17:96:59:e7:0c:07:
2e:24:59:ef
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgISAaERuWhdtSf9TYqVujm59apYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNzM5ZDIxM2E0MzhmNjc4YjMyMmE4ZjhmODRlMmQ4Yzc4
MTRhY2EwHhcNMjYxMDA2MTQ1ODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjE5YTg4Y2ZmODIxNDU2NDEwM2MwNGZiYzE4NzQxYTQ2ODY3MzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKAKc4NmpPWOhIlLxhn5WleDNt//
QTHL92ZhgNa4UF4g7frY40zgTngAFX/5DyhnPuTSisgGfHjDhV0/bfzXYZw7Ys8C
yluze4c3JIsshLSbcXicI4ZI+8fXQghDFJ7ZVTVAP5+wqz2nz4pLp4ILp+biX/sx
O+Lffszzb2FuBsaEymjKQ7ghGkxq8rIDfLOzHFsJu2HVh+ursbu6JJ/1ri84ocnm
cLp/hRMY0yNvBJ9Y7R6ZQ/WLRKcuK7IFaU96zo460pQDvZoS54wGRBP02+i5qchc
pPmERXInHOm8EOvsvP2Fx9k839ku/7GAZ6EkdRmKGoUPXY0ioezuNR2ssQIDAQAB
o4ICgjCCAn4wHQYDVR0OBBYEFFYZqIz/ghRWQQPAT7wYdBpGhnNaMB8GA1UdIwQY
MBaAFB9znSE6Q49nizIqj4+E4tjHgUrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEt
MzkyZTA1YTg0Mjc3LzEvVmhtb2pQLUNGRlpCQThCUHZCaDBHa2FHYzFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84MWJjOTUtMTQ0NC00MDhhLTkyZjEtMzkyZTA1YTg0Mjc3
LzEvSDNPZElUcERqMmVMTWlxUGo0VGkyTWVCU3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGXBggrBgEFBQcBBwEB/wSBhzCBhDBsBAIAATBmAwMAkFUD
BAK5hRwDBAXCJkADBAXCJqAwDAMEAsKUBAMEAsKUMAMEAsKUPAMEBcKUYAMEB8MP
AAMEBdQcgAMEBdQoAAMEBdRtQAMEB9STAAMEB9TogAMDANT+AwQD1QWYAwQF1aIA
MBQEAgACMA4DBQAgAUx4AwUAKgOjYDANBgkqhkiG9w0BAQsFAAOCAQEAroZjJTVf
7VXx/j05Z7uqvSqF3o7xhHu6+yJv77kSkV5Yf6kZFRbkz/yJ1vaYLd8fYBLyVCn6
J7tlYnjoxB+tvgh/0xK61Xs2hu9v2+0Vjt9HX/HNAcJ09TJwe7qpFJIjqXA94krD
1YR0OHB5PmkJhKvJGc0cVQATs9MXWcXwoXjYcntONyYD588SxYgkLE+1buPZKi8J
MnOGlrwiMe3VsDetD+UuvrhGYNknJoZH0PvGqEmTNZRyVcK8A/gNt+6eTiIWwVFm
cVGsNaSYpItq5Lok/8jii2uGphjrAfglj3tBruOFKcPbLBF3TH109yTX8yLd6dx5
F5ZZ5wwHLiRZ7w==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:30:10 2026 by rpki-client