Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/vcTAIRTuauloiOeosPM5urcosNU.roa
File: vcTAIRTuauloiOeosPM5urcosNU.roa (raw, json)
Hash identifier: EN17SArwYRA3OQyOo/tCikFmpvj4twgdD7f5XcuRbvc=
Subject key identifier: BD:C4:C0:21:14:EE:6A:E9:68:88:E7:A8:B0:F3:39:BA:B7:28:B0:D5
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 01A16E74B92A67D7A689950DD0BFDD010B55
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/vcTAIRTuauloiOeosPM5urcosNU.roa
Signing time: Sat 24 Oct 2026 15:08:25 +0000
ROA not before: Sat 24 Oct 2026 15:08:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218302
IP address blocks: 212.108.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:74:b9:2a:67:d7:a6:89:95:0d:d0:bf:dd:01:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: Oct 24 15:08:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc4c02114ee6ae96888e7a8b0f339bab728b0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:00:fa:bb:a7:53:a5:44:1f:8b:e4:72:8f:50:
47:49:08:65:3f:f3:4d:0a:4c:e4:55:48:79:6b:2a:
df:47:44:2c:f2:e8:e4:8a:ef:6a:c0:b9:6e:29:13:
a2:f9:ef:35:3d:17:e3:88:dc:de:50:9e:96:cc:f5:
4c:59:7d:1c:c3:07:35:fe:17:be:91:e8:25:1a:6b:
83:03:df:59:b7:ee:9e:7c:12:c5:72:1c:0a:bf:b0:
35:06:66:e8:5e:4a:8e:3e:3c:63:21:41:47:00:14:
22:0f:5b:d5:0b:ae:6f:9b:06:c0:af:18:4b:5a:c0:
62:db:58:0d:0b:fa:f8:41:c0:f3:9d:5c:80:ea:35:
02:ff:d9:de:cc:6a:61:5f:43:27:be:ab:5c:4c:d1:
6d:7b:23:61:18:a6:6a:fe:1c:1c:3b:4f:eb:14:4a:
8c:2c:58:c7:23:8f:f5:1e:38:df:0f:d0:5a:af:97:
37:8f:41:dc:53:79:0a:5f:cc:4c:a4:8b:4b:45:9d:
fa:24:dc:fa:6b:7b:54:bb:fe:c4:03:62:4c:6c:7f:
5f:cb:64:1e:b6:60:e0:1c:a7:a7:91:06:88:12:3a:
95:ce:dd:5f:1e:a4:07:73:38:38:de:80:50:94:26:
ec:c9:e0:34:b1:72:23:56:ad:48:b6:88:a9:1d:d8:
8e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:C0:21:14:EE:6A:E9:68:88:E7:A8:B0:F3:39:BA:B7:28:B0:D5
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/vcTAIRTuauloiOeosPM5urcosNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.97.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d2:5c:2e:c4:ed:0f:4d:99:e9:76:33:dd:81:0c:4a:db:b4:
36:51:38:20:3e:4e:da:aa:d0:f0:91:95:22:64:e9:2e:f6:40:
36:af:38:b1:c2:5b:a3:50:1a:4c:39:d9:5b:fc:f9:f9:c6:a6:
88:30:34:7b:ad:44:86:07:88:2b:9b:a9:7d:ab:ec:ff:c9:c6:
92:26:9a:0b:55:c4:66:a9:2c:f9:2d:92:23:01:cf:16:23:85:
8a:b9:8d:c3:5b:59:8f:28:b3:14:af:32:6e:2e:66:eb:87:38:
95:4a:ae:ee:86:5a:ec:ec:16:cc:bc:8f:f9:74:4e:47:88:13:
99:8e:d6:76:c6:a7:fa:a7:ae:75:4d:04:a4:06:5b:1a:d8:67:
fd:cd:7a:7c:21:7f:db:fd:3b:cc:7b:f3:cb:80:77:a2:5c:e8:
64:58:b5:ac:f1:bf:f9:07:60:1d:1e:fc:59:4d:9a:09:f1:a9:
3b:a5:95:d6:5b:44:96:aa:ba:e5:8a:af:4c:fd:88:e3:bb:9b:
f8:91:da:42:97:08:3d:af:a6:fe:1c:42:16:ab:cf:0c:5a:b9:
06:30:6f:09:e5:62:94:9a:30:6c:77:ba:b8:86:9a:0f:a1:76:
2e:21:08:dc:13:15:df:ac:06:14:53:7c:1b:63:aa:ee:a6:66:
af:ec:78:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFudLkqZ9emiZUN0L/dAQtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MTc4NmEwNjllNDkzNGIyNjgxYmI4ZTliMzczODA3OWIy
NGVmNjUwHhcNMjYxMDI0MTUwODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGM0YzAyMTE0ZWU2YWU5Njg4OGU3YThiMGYzMzliYWI3MjhiMGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gD6u6dTpUQfi+Ryj1BHSQhlP/NN
CkzkVUh5ayrfR0Qs8ujkiu9qwLluKROi+e81PRfjiNzeUJ6WzPVMWX0cwwc1/he+
keglGmuDA99Zt+6efBLFchwKv7A1BmboXkqOPjxjIUFHABQiD1vVC65vmwbArxhL
WsBi21gNC/r4QcDznVyA6jUC/9nezGphX0MnvqtcTNFteyNhGKZq/hwcO0/rFEqM
LFjHI4/1HjjfD9Bar5c3j0HcU3kKX8xMpItLRZ36JNz6a3tUu/7EA2JMbH9fy2Qe
tmDgHKenkQaIEjqVzt1fHqQHczg43oBQlCbsyeA0sXIjVq1ItoipHdiOgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3EwCEU7mrpaIjnqLDzObq3KLDVMB8GA1UdIwQY
MBaAFNkXhqBp5JNLJoG7jps3OAebJO9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUt
NTJjYmE5N2Q5YjllLzEvdmNUQUlSVHVhdWxvaU9lb3NQTTV1cmNvc05VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iY2U5MTUtMDc4My00YTU0LThjNDUtNTJjYmE5N2Q5Yjll
LzEvMlJlR29HbmtrMHNtZ2J1T216YzRCNXNrNzJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1GxhMA0G
CSqGSIb3DQEBCwUAA4IBAQA/0lwuxO0PTZnpdjPdgQxK27Q2UTggPk7aqtDwkZUi
ZOku9kA2rzixwlujUBpMOdlb/Pn5xqaIMDR7rUSGB4grm6l9q+z/ycaSJpoLVcRm
qSz5LZIjAc8WI4WKuY3DW1mPKLMUrzJuLmbrhziVSq7uhlrs7BbMvI/5dE5HiBOZ
jtZ2xqf6p651TQSkBlsa2Gf9zXp8IX/b/TvMe/PLgHeiXOhkWLWs8b/5B2AdHvxZ
TZoJ8ak7pZXWW0SWqrrliq9M/Yjju5v4kdpClwg9r6b+HEIWq88MWrkGMG8J5WKU
mjBsd7q4hpoPoXYuIQjcExXfrAYUU3wbY6rupmav7Hgo
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:35 2026 by rpki-client