Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/vejzv7QOLFz0zBK9dYrkczX41os.roa
File: vejzv7QOLFz0zBK9dYrkczX41os.roa (raw, json)
Hash identifier: 1/t2Mk3JzOfqNQH/xzxEFCnNxDWlMCUoRLu1JrxHRXI=
Subject key identifier: BD:E8:F3:BF:B4:0E:2C:5C:F4:CC:12:BD:75:8A:E4:73:35:F8:D6:8B
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 01A18BE8796670FBD5BCE0560E585C1B8F1B
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/vejzv7QOLFz0zBK9dYrkczX41os.roa
Signing time: Fri 30 Oct 2026 08:23:50 +0000
ROA not before: Fri 30 Oct 2026 08:23:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34619
IP address blocks: 37.148.208.0/21 maxlen: 24
80.253.242.0/24 maxlen: 24
85.159.64.0/21 maxlen: 24
89.19.0.0/19 maxlen: 24
94.73.128.0/18 maxlen: 24
185.22.184.0/22 maxlen: 24
185.22.184.0/24 maxlen: 24
185.22.185.0/24 maxlen: 24
185.22.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:e8:79:66:70:fb:d5:bc:e0:56:0e:58:5c:1b:8f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Oct 30 08:23:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bde8f3bfb40e2c5cf4cc12bd758ae47335f8d68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:52:01:1d:05:ff:ef:ee:e0:e2:7a:a3:f3:
53:93:6e:2c:92:3d:21:5f:f4:35:0d:49:86:56:a3:
ba:ff:15:7a:a0:e9:a1:41:0f:f9:de:05:e3:14:46:
ea:05:62:89:ea:92:5c:01:dd:2b:ab:7d:30:ff:1e:
c1:aa:ad:a9:18:c0:92:fb:2a:96:3b:48:74:f4:ce:
95:25:43:81:b6:e4:9a:db:57:c2:33:3b:ae:47:ec:
18:d1:11:35:47:74:6f:66:e7:71:14:8e:f1:57:d7:
01:91:99:b0:f2:c1:1e:52:36:1b:08:bb:74:be:35:
1f:d3:5e:40:33:b3:01:89:96:0d:0a:34:8e:34:e7:
35:b3:e9:c6:4f:42:03:a3:3d:77:23:67:49:2d:2c:
0c:4e:7c:ff:59:59:60:4f:30:f1:cd:66:b9:fd:bb:
9f:5a:a8:f3:e2:90:50:98:71:45:23:48:4f:ac:51:
32:d2:0a:b7:5b:1a:16:65:9b:ce:98:95:02:9b:51:
d2:99:cf:e9:1a:e0:2b:44:83:bd:31:42:65:7c:36:
66:b7:69:8e:6f:16:ba:35:6d:38:40:59:e9:b3:8e:
da:e8:0e:a9:a2:e6:d6:96:33:97:96:6f:f7:b7:45:
10:c9:48:f1:74:56:17:be:00:ea:75:25:a0:e2:0d:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E8:F3:BF:B4:0E:2C:5C:F4:CC:12:BD:75:8A:E4:73:35:F8:D6:8B
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/vejzv7QOLFz0zBK9dYrkczX41os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.208.0/21
80.253.242.0/24
85.159.64.0/21
89.19.0.0/19
94.73.128.0/18
185.22.184.0/22
Signature Algorithm: sha256WithRSAEncryption
60:0c:cc:da:f4:32:26:0d:f1:c0:44:3a:27:54:ae:2b:a9:0b:
bf:85:03:10:15:ab:f9:33:cc:a1:3b:b7:18:54:f4:92:32:e3:
34:fd:e7:3a:02:87:ac:27:9d:fb:3d:fb:e1:6b:74:e5:e6:9d:
fe:1a:af:64:20:05:a3:f5:ed:f3:67:f5:41:9f:80:01:e7:81:
7a:38:16:67:01:fc:4e:cc:ff:47:31:4e:ea:ff:98:77:ec:52:
7d:84:5d:5e:00:a2:a6:cf:a2:5d:73:71:be:28:01:c5:e7:4e:
80:49:44:96:67:fa:70:af:a3:b4:ce:0d:be:55:57:a8:97:85:
94:de:34:b5:3b:54:9e:d6:8b:18:78:25:85:40:be:eb:6c:44:
b8:cd:49:80:9c:b1:d0:6e:50:59:de:97:7d:d5:b9:7d:22:92:
62:00:0b:41:7f:75:b1:1c:9e:48:e2:46:49:5b:89:7a:c1:01:
34:b2:f5:5a:f9:f1:fe:20:6e:a4:6e:7e:13:6a:89:55:8c:79:
89:ad:96:91:fd:ec:a4:ae:f4:ba:6e:ff:58:6d:26:f3:29:cd:
b7:e2:f5:fa:89:ee:c1:2b:4b:5b:db:14:02:f1:aa:0d:1b:58:
6c:ba:7b:45:03:e9:10:55:9f:ab:35:f0:f8:cf:24:ad:7c:f0:
28:b2:25:c0
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaGL6HlmcPvVvOBWDlhcG48bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGI3YzBjOGJhZTYxMGY3ZTUxOWMwNDg1YTQ3NzNiY2Vi
NDhkYWIwHhcNMjYxMDMwMDgyMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGU4ZjNiZmI0MGUyYzVjZjRjYzEyYmQ3NThhZTQ3MzM1ZjhkNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosRSAR0F/+/u4OJ6o/NTk24skj0h
X/Q1DUmGVqO6/xV6oOmhQQ/53gXjFEbqBWKJ6pJcAd0rq30w/x7Bqq2pGMCS+yqW
O0h09M6VJUOBtuSa21fCMzuuR+wY0RE1R3RvZudxFI7xV9cBkZmw8sEeUjYbCLt0
vjUf015AM7MBiZYNCjSONOc1s+nGT0IDoz13I2dJLSwMTnz/WVlgTzDxzWa5/buf
Wqjz4pBQmHFFI0hPrFEy0gq3WxoWZZvOmJUCm1HSmc/pGuArRIO9MUJlfDZmt2mO
bxa6NW04QFnps47a6A6poubWljOXlm/3t0UQyUjxdFYXvgDqdSWg4g38owIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFL3o87+0Dixc9MwSvXWK5HM1+NaLMB8GA1UdIwQY
MBaAFFULfAyLrmEPflGcBIWkdzvOtI2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZWRiMDMtYjA0Yy00MjEyLTgxM2It
ZmYyNWJhNTk5MDMxLzEvdmVqenY3UU9MRnowekJLOWRZcmtjelg0MW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hZWRiMDMtYjA0Yy00MjEyLTgxM2ItZmYyNWJhNTk5MDMx
LzEvVlF0OERJdXVZUTktVVp3RWhhUjNPODYwamFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDJZTQAwQA
UP3yAwQDVZ9AAwQFWRMAAwQGXkmAAwQCuRa4MA0GCSqGSIb3DQEBCwUAA4IBAQBg
DMza9DImDfHARDonVK4rqQu/hQMQFav5M8yhO7cYVPSSMuM0/ec6AoesJ537Pfvh
a3Tl5p3+Gq9kIAWj9e3zZ/VBn4AB54F6OBZnAfxOzP9HMU7q/5h37FJ9hF1eAKKm
z6Jdc3G+KAHF506ASUSWZ/pwr6O0zg2+VVeol4WU3jS1O1Se1osYeCWFQL7rbES4
zUmAnLHQblBZ3pd91bl9IpJiAAtBf3WxHJ5I4kZJW4l6wQE0svVa+fH+IG6kbn4T
aolVjHmJrZaR/eykrvS6bv9YbSbzKc234vX6ie7BK0tb2xQC8aoNG1hsuntFA+kQ
VZ+rNfD4zyStfPAosiXA
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:41:37 2026 by rpki-client