Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/VTg1Pqh6gGxJdPipIvY_2TxmpEE.roa
File: VTg1Pqh6gGxJdPipIvY_2TxmpEE.roa (raw, json)
Hash identifier: Re8cRmXCQziE0FT8UEdT+XdkZBUXadu9ZmK30fLj6l0=
Subject key identifier: 55:38:35:3E:A8:7A:80:6C:49:74:F8:A9:22:F6:3F:D9:3C:66:A4:41
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 019F2814DCB22B4E3F4B19B6229830F59901
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/VTg1Pqh6gGxJdPipIvY_2TxmpEE.roa
Signing time: Fri 03 Jul 2026 13:04:43 +0000
ROA not before: Fri 03 Jul 2026 13:04:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 66.179.176.0/24 maxlen: 32
153.52.192.0/22 maxlen: 32
153.52.196.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:14:dc:b2:2b:4e:3f:4b:19:b6:22:98:30:f5:99:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jul 3 13:04:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5538353ea87a806c4974f8a922f63fd93c66a441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:7e:6b:87:81:7f:d1:fd:5c:c0:e9:34:56:
60:97:e3:8c:ba:77:19:d3:db:e9:82:37:74:81:f5:
69:be:d9:23:8f:6f:22:9d:4b:9a:a1:ef:9e:4b:93:
b2:31:9e:b6:4a:10:e5:a2:d4:93:d3:77:66:7f:90:
2e:95:9a:e8:c2:fb:89:7b:a7:dd:03:83:35:aa:d4:
ee:dd:cf:6b:44:6a:bf:9c:dd:d8:3c:69:0c:a1:a1:
a4:9a:c0:17:85:08:69:59:db:c4:19:ea:9e:3b:4e:
62:10:a6:2f:52:eb:82:60:51:88:e3:e7:23:5d:aa:
19:62:ed:a5:56:c3:79:ed:b4:af:7e:74:c1:c3:c6:
b1:5f:70:1b:38:31:b4:7e:9d:2a:c6:7d:89:28:f9:
29:ab:c1:23:16:e5:20:b2:94:2a:d0:b5:27:57:ad:
f0:3a:d2:b6:72:5d:df:b6:0a:5a:6f:d8:5f:63:0d:
d6:9e:48:25:db:a2:bf:c2:20:19:c2:e4:5f:33:e6:
40:01:08:ff:7c:68:da:18:db:7d:af:26:e1:8b:af:
9e:5e:5e:d1:ac:65:4e:5b:8e:ce:23:1c:fe:fc:1e:
3a:d4:8b:0f:8a:d4:c8:b9:1d:05:90:d8:25:fa:2a:
40:fb:1c:80:58:31:cd:85:c8:22:aa:f4:2a:ed:d8:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:38:35:3E:A8:7A:80:6C:49:74:F8:A9:22:F6:3F:D9:3C:66:A4:41
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/VTg1Pqh6gGxJdPipIvY_2TxmpEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.179.176.0/24
153.52.192.0-153.52.197.255
Signature Algorithm: sha256WithRSAEncryption
b1:57:23:bf:d9:cf:15:19:7e:73:e2:88:ac:f7:e1:71:36:95:
c8:d9:6d:15:13:1a:d2:8f:9b:4f:75:4c:a6:3e:69:da:88:60:
7a:18:15:4b:8d:be:27:63:89:31:5f:e7:c0:72:fe:97:a3:ee:
3f:03:1e:7a:4a:17:b0:34:36:6f:9a:7b:09:48:8a:19:3a:c9:
08:22:52:5f:c0:45:73:1c:40:74:a1:15:ec:3d:9a:f6:af:13:
cd:f2:86:20:29:e3:bc:b8:39:9e:07:78:8b:3e:59:d2:c4:1a:
71:32:04:7e:dd:e8:db:88:f8:a5:b9:8a:a8:09:80:f9:35:47:
6d:4d:57:06:17:fa:88:53:bb:bb:e5:52:b3:47:1d:35:a4:f3:
a9:d4:59:fc:c9:af:62:9f:42:7a:dd:6c:63:28:21:86:ef:15:
ae:fe:c0:de:ba:dc:19:67:55:47:56:f7:9d:82:f8:54:24:84:
59:20:05:26:57:75:43:9a:8c:9b:c4:8a:8a:23:03:23:c1:44:
90:11:68:92:32:58:b2:b6:a1:d0:40:ee:21:3d:4e:b9:12:94:
c7:ca:40:8a:d1:51:5d:5c:f2:7d:2e:5a:fe:f5:7a:6e:51:11:
db:67:80:78:a9:88:a4:8f:9e:9b:ff:3d:33:70:07:b0:0a:96:
9b:10:19:3b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8oFNyyK04/Sxm2Ipgw9ZkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx
ZGQ3ZjAwHhcNMjYwNzAzMTMwNDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTM4MzUzZWE4N2E4MDZjNDk3NGY4YTkyMmY2M2ZkOTNjNjZhNDQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstZ+a4eBf9H9XMDpNFZgl+OMuncZ
09vpgjd0gfVpvtkjj28inUuaoe+eS5OyMZ62ShDlotST03dmf5AulZrowvuJe6fd
A4M1qtTu3c9rRGq/nN3YPGkMoaGkmsAXhQhpWdvEGeqeO05iEKYvUuuCYFGI4+cj
XaoZYu2lVsN57bSvfnTBw8axX3AbODG0fp0qxn2JKPkpq8EjFuUgspQq0LUnV63w
OtK2cl3ftgpab9hfYw3Wnkgl26K/wiAZwuRfM+ZAAQj/fGjaGNt9rybhi6+eXl7R
rGVOW47OIxz+/B461IsPitTIuR0FkNgl+ipA+xyAWDHNhcgiqvQq7di7GwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFU4NT6oeoBsSXT4qSL2P9k8ZqRBMB8GA1UdIwQY
MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt
YTRmN2IwODhiYzFhLzEvVlRnMVBxaDZnR3hKZFBpcEl2WV8yVHhtcEVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh
LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAQrOwMAwD
BAaZNMADBAGZNMQwDQYJKoZIhvcNAQELBQADggEBALFXI7/ZzxUZfnPiiKz34XE2
lcjZbRUTGtKPm091TKY+adqIYHoYFUuNvidjiTFf58By/pej7j8DHnpKF7A0Nm+a
ewlIihk6yQgiUl/ARXMcQHShFew9mvavE83yhiAp47y4OZ4HeIs+WdLEGnEyBH7d
6NuI+KW5iqgJgPk1R21NVwYX+ohTu7vlUrNHHTWk86nUWfzJr2KfQnrdbGMoIYbv
Fa7+wN663BlnVUdW952C+FQkhFkgBSZXdUOajJvEioojAyPBRJARaJIyWLK2odBA
7iE9TrkSlMfKQIrRUV1c8n0uWv71em5REdtngHipiKSPnpv/PTNwB7AKlpsQGTs=
-----END CERTIFICATE-----
Generated at Mon Jul 20 09:13:08 2026 by rpki-client