Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/vunf0fhZ-ps0n7IoE5p1_oQ8YBw.roa
File: vunf0fhZ-ps0n7IoE5p1_oQ8YBw.roa (raw, json)
Hash identifier: r2ngMEqAG8rzjx0Z4Hl+BFiV+K+4/Bg8slgAf2nfxJ0=
Subject key identifier: BE:E9:DF:D1:F8:59:FA:9B:34:9F:B2:28:13:9A:75:FE:84:3C:60:1C
Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial: 01A0680CC9D764E3286AA3D33411FFF0873A
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/vunf0fhZ-ps0n7IoE5p1_oQ8YBw.roa
Signing time: Thu 03 Sep 2026 16:14:23 +0000
ROA not before: Thu 03 Sep 2026 16:14:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200845
IP address blocks: 185.227.216.0/24 maxlen: 24
185.227.217.0/24 maxlen: 24
185.240.165.0/24 maxlen: 24
185.240.166.0/24 maxlen: 24
185.240.167.0/24 maxlen: 24
194.30.161.0/24 maxlen: 24
194.30.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 11:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:0c:c9:d7:64:e3:28:6a:a3:d3:34:11:ff:f0:87:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Validity
Not Before: Sep 3 16:14:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bee9dfd1f859fa9b349fb228139a75fe843c601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:f5:98:d7:dd:73:9f:f4:1f:9e:a3:ba:1b:
07:6d:7a:e8:09:56:54:f1:dd:a2:3c:97:d8:30:f1:
0c:fe:29:4b:21:6e:69:5c:8d:34:35:e2:d0:af:95:
fe:34:f0:f5:18:c7:c5:19:16:c4:11:2b:89:a8:43:
ed:9e:18:0d:9f:0c:38:e9:a8:91:c3:35:48:c7:ea:
7a:94:23:f0:fb:be:5f:01:de:cb:25:df:51:6c:c3:
b2:92:6d:d5:09:87:49:44:fe:b7:f1:a0:f9:8c:ef:
e3:f7:95:ba:22:eb:0d:aa:be:48:92:43:d0:3d:68:
1b:44:bd:77:51:e1:9b:dd:47:13:f6:b9:fc:85:0e:
1b:5b:35:0e:70:35:a7:b2:74:1a:cf:0d:57:f9:24:
dd:fd:be:a7:4c:31:fd:90:23:e9:6a:8e:db:a0:c0:
a9:26:93:e9:5d:21:d8:24:7b:85:db:8c:57:af:b4:
be:d1:0f:3c:02:02:bc:a7:9b:ea:a4:27:35:79:06:
26:c9:a9:82:d7:c4:9f:a6:b5:34:17:e3:2a:16:a9:
f2:99:aa:22:65:e6:ff:40:69:c7:eb:1c:94:94:8b:
9d:1e:cf:fa:c0:0b:cb:dc:e0:b2:cc:65:a0:c2:34:
b2:3e:87:cd:2f:e7:e8:dd:f4:40:10:9d:8b:3b:02:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E9:DF:D1:F8:59:FA:9B:34:9F:B2:28:13:9A:75:FE:84:3C:60:1C
X509v3 Authority Key Identifier:
keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/vunf0fhZ-ps0n7IoE5p1_oQ8YBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.216.0/23
185.240.165.0-185.240.167.255
194.30.161.0/24
194.30.165.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:95:45:6c:c0:e7:a9:d2:3d:67:0d:20:ac:32:3b:be:0a:3b:
5c:55:13:8a:a9:54:e3:73:64:13:d2:e7:2b:ad:74:1a:ed:93:
e7:fc:7c:e9:c7:eb:3a:cb:92:9c:77:51:a9:0e:03:99:d6:fe:
01:4b:af:18:12:c5:bf:d0:7d:63:84:8e:7e:83:fe:8a:f8:16:
b8:4b:0a:af:29:1d:42:fd:df:43:9d:2a:d1:96:db:a3:bc:9f:
77:b8:f6:a9:ef:28:4e:2d:f9:5d:6c:a4:91:81:52:3e:09:9c:
e6:df:e9:9a:b9:db:7f:13:8a:28:2e:e6:ae:72:95:32:6a:7b:
ce:9e:b0:19:e4:c7:f8:b3:72:16:91:c7:c8:0d:5f:a2:73:17:
56:c2:1a:de:a5:56:e9:ba:62:16:ee:f2:98:af:eb:24:95:9f:
04:46:68:a0:b2:fe:1d:85:b1:71:37:b5:59:eb:6c:33:14:59:
1c:6b:8d:70:66:55:77:43:79:86:85:d3:71:8d:84:14:56:52:
59:28:c7:ef:9f:dd:7c:d6:9f:8b:c4:f9:25:2a:5d:5a:fd:e6:
04:17:a9:6c:e8:ec:27:fd:e3:db:74:54:73:bf:dd:87:49:92:
3d:c7:23:16:03:c9:2b:48:67:ef:24:f7:1d:5e:6f:6a:14:2f:
e7:a2:6f:9b
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaBoDMnXZOMoaqPTNBH/8Ic6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx
OWM0NDgwHhcNMjYwOTAzMTYxNDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZWU5ZGZkMWY4NTlmYTliMzQ5ZmIyMjgxMzlhNzVmZTg0M2M2MDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK31mNfdc5/0H56juhsHbXroCVZU
8d2iPJfYMPEM/ilLIW5pXI00NeLQr5X+NPD1GMfFGRbEESuJqEPtnhgNnww46aiR
wzVIx+p6lCPw+75fAd7LJd9RbMOykm3VCYdJRP638aD5jO/j95W6IusNqr5IkkPQ
PWgbRL13UeGb3UcT9rn8hQ4bWzUOcDWnsnQazw1X+STd/b6nTDH9kCPpao7boMCp
JpPpXSHYJHuF24xXr7S+0Q88AgK8p5vqpCc1eQYmyamC18SfprU0F+MqFqnymaoi
Zeb/QGnH6xyUlIudHs/6wAvL3OCyzGWgwjSyPofNL+fo3fRAEJ2LOwJdoQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFL7p39H4WfqbNJ+yKBOadf6EPGAcMB8GA1UdIwQY
MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt
YWQyZmRhNDc5ODhlLzEvdnVuZjBmaFotcHMwbjdJb0U1cDFfb1E4WUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl
LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBuePYMAwD
BAC58KUDBAO58KADBADCHqEDBADCHqUwDQYJKoZIhvcNAQELBQADggEBAHuVRWzA
56nSPWcNIKwyO74KO1xVE4qpVONzZBPS5yutdBrtk+f8fOnH6zrLkpx3UakOA5nW
/gFLrxgSxb/QfWOEjn6D/or4FrhLCq8pHUL930OdKtGW26O8n3e49qnvKE4t+V1s
pJGBUj4JnObf6Zq5238Tiigu5q5ylTJqe86esBnkx/izchaRx8gNX6JzF1bCGt6l
Vum6Yhbu8piv6ySVnwRGaKCy/h2FsXE3tVnrbDMUWRxrjXBmVXdDeYaF03GNhBRW
Ulkox++f3XzWn4vE+SUqXVr95gQXqWzo7Cf949t0VHO/3YdJkj3HIxYDyStIZ+8k
9x1eb2oUL+eib5s=
-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:31 2026 by rpki-client