Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/k60VeuiydwIrYOhyl5KQa1CJeT0.roa
File: k60VeuiydwIrYOhyl5KQa1CJeT0.roa (raw, json)
Hash identifier: lATiF8eny7SPIFvJ3AYY/s6wbdX9CTzpIB0PH7CIOfI=
Subject key identifier: 93:AD:15:7A:E8:B2:77:02:2B:60:E8:72:97:92:90:6B:50:89:79:3D
Certificate issuer: /CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Certificate serial: 01A13FF1E2F9960CB28165BFC2608518ABCD
Authority key identifier: BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/k60VeuiydwIrYOhyl5KQa1CJeT0.roa
Signing time: Thu 15 Oct 2026 14:22:59 +0000
ROA not before: Thu 15 Oct 2026 14:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41616
IP address blocks: 192.162.194.0/24 maxlen: 24
192.162.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:f1:e2:f9:96:0c:b2:81:65:bf:c2:60:85:18:ab:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc7926e0abeda6c8d72d1d190c2e7d9d00449d8
Validity
Not Before: Oct 15 14:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93ad157ae8b277022b60e8729792906b5089793d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:49:1f:0a:aa:a1:82:80:65:92:a2:cb:0b:
7c:df:e7:2c:a0:f6:aa:f4:50:88:06:a7:18:af:2e:
c1:49:11:3c:8f:12:d0:7f:00:8f:2b:7f:ba:cf:0c:
c7:23:c8:5f:19:b7:7f:a3:48:f4:6b:c1:48:4e:eb:
5c:c0:84:76:d1:18:8d:85:42:25:0d:29:41:2b:bf:
49:e6:5d:ea:78:51:27:f1:ac:5f:46:25:4a:5e:bc:
fd:cf:a1:d0:1a:ff:17:3d:86:af:49:3c:90:5c:97:
99:9b:ba:d9:df:fd:48:31:f4:c6:97:01:a7:dd:03:
f6:05:64:1b:ba:4b:45:2d:d2:c1:90:2d:8e:2e:43:
ea:d7:3c:00:3e:4d:20:69:60:4c:51:ee:cc:f6:38:
4c:7d:3c:ec:2d:df:26:95:27:2f:7e:23:3c:b7:11:
19:8e:31:41:94:08:f1:96:09:41:7b:90:24:c1:77:
6e:a1:ff:bf:c0:c5:3a:65:f3:79:00:5b:bf:1a:f5:
65:1e:c9:ba:b8:d5:b7:10:a5:06:38:ba:c0:09:95:
b5:af:44:57:9e:8c:19:3c:0a:60:21:ab:73:36:ce:
1a:97:d2:49:73:a1:f1:0a:36:8b:bf:22:d1:9a:d3:
47:ae:4d:d6:21:68:0b:d3:f8:4b:48:5b:ec:f0:41:
b1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AD:15:7A:E8:B2:77:02:2B:60:E8:72:97:92:90:6B:50:89:79:3D
X509v3 Authority Key Identifier:
keyid:BD:C7:92:6E:0A:BE:DA:6C:8D:72:D1:D1:90:C2:E7:D9:D0:04:49:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vceSbgq-2myNctHRkMLn2dAESdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/k60VeuiydwIrYOhyl5KQa1CJeT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/c5df57-b710-4625-aaad-5b2b63f39a9d/1/vceSbgq-2myNctHRkMLn2dAESdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.194.0/23
Signature Algorithm: sha256WithRSAEncryption
65:76:ec:24:22:a7:ea:50:5c:72:bd:ba:26:cb:f1:15:d3:1d:
15:62:03:6b:6f:dc:c7:9d:6f:c2:ae:50:78:2b:32:98:4f:d5:
37:59:38:de:f6:da:a6:49:58:a6:43:5f:b5:f6:b1:74:b2:b0:
4d:f2:31:84:29:83:7a:0e:99:59:18:36:a9:5d:ff:ca:fc:8b:
fe:0e:94:ac:9b:15:2c:df:d0:44:d8:7c:9b:91:02:a6:b0:a0:
32:32:73:80:a6:b7:01:55:0f:bb:a8:e8:1d:fe:83:de:4b:f8:
5c:db:66:aa:88:f4:e2:46:7a:b5:f6:61:eb:7c:c0:93:61:4b:
2b:8a:63:9d:be:e8:1f:20:c6:8b:4b:bd:78:c7:4b:a4:85:2f:
05:7f:ee:d4:b1:8e:f4:fc:a8:f4:39:f8:1f:d7:2d:f9:27:0c:
05:58:de:4b:0c:cb:91:11:56:e0:ab:c3:96:fa:6d:f5:09:1c:
11:9f:7b:64:1d:7d:01:95:8e:3d:eb:a4:35:a0:4c:e3:51:b5:
5a:45:27:4f:67:4f:17:e3:e3:90:62:97:61:d4:d7:f0:c7:1b:
1d:1a:22:42:68:ac:e4:89:51:03:d3:ad:30:a9:4a:0a:8a:20:
2a:7d:94:03:fb:20:8b:d2:8e:5b:f5:e0:54:ff:44:de:39:71:
1e:58:66:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE/8eL5lgyygWW/wmCFGKvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYzc5MjZlMGFiZWRhNmM4ZDcyZDFkMTkwYzJlN2Q5ZDAw
NDQ5ZDgwHhcNMjYxMDE1MTQyMjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2FkMTU3YWU4YjI3NzAyMmI2MGU4NzI5NzkyOTA2YjUwODk3OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2RJHwqqoYKAZZKiywt83+csoPaq
9FCIBqcYry7BSRE8jxLQfwCPK3+6zwzHI8hfGbd/o0j0a8FITutcwIR20RiNhUIl
DSlBK79J5l3qeFEn8axfRiVKXrz9z6HQGv8XPYavSTyQXJeZm7rZ3/1IMfTGlwGn
3QP2BWQbuktFLdLBkC2OLkPq1zwAPk0gaWBMUe7M9jhMfTzsLd8mlScvfiM8txEZ
jjFBlAjxlglBe5AkwXduof+/wMU6ZfN5AFu/GvVlHsm6uNW3EKUGOLrACZW1r0RX
nowZPApgIatzNs4al9JJc6HxCjaLvyLRmtNHrk3WIWgL0/hLSFvs8EGxowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJOtFXrosncCK2DocpeSkGtQiXk9MB8GA1UdIwQY
MBaAFL3Hkm4KvtpsjXLR0ZDC59nQBEnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmNlU2JncS0ybXlOY3RIUmtNTG4yZEFFU2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jNWRmNTctYjcxMC00NjI1LWFhYWQt
NWIyYjYzZjM5YTlkLzEvazYwVmV1aXlkd0lyWU9oeWw1S1FhMUNKZVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9jNWRmNTctYjcxMC00NjI1LWFhYWQtNWIyYjYzZjM5YTlk
LzEvdmNlU2JncS0ybXlOY3RIUmtNTG4yZEFFU2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKLCMA0G
CSqGSIb3DQEBCwUAA4IBAQBlduwkIqfqUFxyvbomy/EV0x0VYgNrb9zHnW/CrlB4
KzKYT9U3WTje9tqmSVimQ1+19rF0srBN8jGEKYN6DplZGDapXf/K/Iv+DpSsmxUs
39BE2HybkQKmsKAyMnOAprcBVQ+7qOgd/oPeS/hc22aqiPTiRnq19mHrfMCTYUsr
imOdvugfIMaLS714x0ukhS8Ff+7UsY70/Kj0Ofgf1y35JwwFWN5LDMuREVbgq8OW
+m31CRwRn3tkHX0BlY4966Q1oEzjUbVaRSdPZ08X4+OQYpdh1NfwxxsdGiJCaKzk
iVED060wqUoKiiAqfZQD+yCL0o5b9eBU/0TeOXEeWGbw
-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:36 2026 by rpki-client