Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/EKm6lRYBy71eLpah99Z7siLol84.roa
File: EKm6lRYBy71eLpah99Z7siLol84.roa (raw, json)
Hash identifier: vHi1kL6cNlMxGSyF4hR0aJzdSYex1J7WkrgUK7ir1c0=
Subject key identifier: 10:A9:BA:95:16:01:CB:BD:5E:2E:96:A1:F7:D6:7B:B2:22:E8:97:CE
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019985211BE81D090D08F55153A2AA0E951B
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/EKm6lRYBy71eLpah99Z7siLol84.roa
Signing time: Fri 26 Sep 2025 08:26:03 +0000
ROA not before: Fri 26 Sep 2025 08:26:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 95.85.192.0/22 maxlen: 22
95.85.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:85:21:1b:e8:1d:09:0d:08:f5:51:53:a2:aa:0e:95:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Sep 26 08:26:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10a9ba951601cbbd5e2e96a1f7d67bb222e897ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:98:c2:d1:64:c2:5c:fa:08:e6:95:46:22:fa:
ac:7c:dd:0b:94:9b:a2:67:1a:2e:7b:8c:c6:be:9a:
8c:e5:13:0d:d8:e8:f6:b3:5a:cb:8d:1b:db:30:54:
9b:c1:95:8d:04:c1:b9:b3:4e:9d:e1:37:c7:f0:89:
e8:6a:df:14:ef:19:8d:ae:71:65:23:b6:7e:fd:06:
be:f6:dc:9f:b8:32:1b:05:00:e9:7d:5e:af:fd:82:
93:28:4a:4c:12:c0:4a:c9:8f:a1:3e:2d:1e:e2:30:
e5:37:ed:84:85:2d:4b:f0:08:85:9d:6e:22:66:93:
fa:b2:84:ea:cd:f1:18:d2:3a:b0:79:ad:6d:88:18:
12:ba:bf:ff:09:77:86:f3:c3:e7:e8:2f:25:4d:b2:
11:d7:fc:70:ee:29:71:14:63:1e:c5:0a:b3:15:40:
05:ba:57:95:ca:ad:c0:18:93:2d:6a:e7:4c:a5:e9:
40:6b:ab:ba:e7:29:29:f8:aa:cd:cf:da:59:7d:84:
18:15:e3:14:2a:e0:da:fe:16:7d:b2:9b:ab:8e:0e:
e5:5d:49:86:47:07:2d:2e:36:97:d3:a2:53:80:bf:
40:f1:a5:f6:6c:23:c5:d9:66:df:3d:16:14:fc:6b:
49:d4:96:62:b0:f8:ad:07:4d:e7:2a:ea:b3:d6:d6:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A9:BA:95:16:01:CB:BD:5E:2E:96:A1:F7:D6:7B:B2:22:E8:97:CE
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/EKm6lRYBy71eLpah99Z7siLol84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/22
95.85.216.0/22
Signature Algorithm: sha256WithRSAEncryption
56:59:7b:75:aa:9c:99:9d:fe:a2:2c:3d:fb:99:62:e5:d6:4c:
b8:d0:43:d8:c8:5b:2d:ca:b6:45:55:9b:06:c3:05:62:38:01:
27:58:49:d7:1f:4e:24:49:c5:8f:44:ff:27:4e:09:ff:15:81:
cc:cf:6d:e3:75:c8:fe:a2:4f:48:b3:3a:64:1f:bd:b3:02:0d:
b6:62:68:1b:d5:10:48:90:24:93:cc:0c:89:18:bc:f6:d9:5d:
95:82:2a:5c:08:b8:e0:45:89:74:d2:b1:cb:f3:a7:2f:b9:4f:
5d:c9:2a:44:b4:c6:6f:9f:ae:3f:48:31:d6:6b:82:70:d6:75:
39:b7:49:f0:bf:e4:64:e7:8d:32:da:bf:86:6a:49:6a:ff:3e:
70:0c:57:6a:24:ae:8a:dc:74:08:9d:c3:26:63:3a:b8:0d:63:
61:d1:8f:72:78:ac:70:d1:e7:18:30:2b:b9:3c:51:d8:1a:0f:
3a:e4:de:ce:83:de:83:b4:c3:fc:12:4c:a7:12:11:be:20:ab:
d4:ba:86:e0:04:0c:30:64:39:fb:0a:b9:69:46:1c:aa:19:21:
62:f0:98:5a:99:af:70:24:2e:f7:e7:11:3e:96:a5:af:c8:ed:
e3:7d:5e:b0:c3:24:0f:3e:eb:25:80:b0:84:0a:05:3b:fa:2e:
7b:99:80:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZmFIRvoHQkNCPVRU6KqDpUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjUwOTI2MDgyNjAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGE5YmE5NTE2MDFjYmJkNWUyZTk2YTFmN2Q2N2JiMjIyZTg5N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5jC0WTCXPoI5pVGIvqsfN0LlJui
Zxoue4zGvpqM5RMN2Oj2s1rLjRvbMFSbwZWNBMG5s06d4TfH8Inoat8U7xmNrnFl
I7Z+/Qa+9tyfuDIbBQDpfV6v/YKTKEpMEsBKyY+hPi0e4jDlN+2EhS1L8AiFnW4i
ZpP6soTqzfEY0jqwea1tiBgSur//CXeG88Pn6C8lTbIR1/xw7ilxFGMexQqzFUAF
uleVyq3AGJMtaudMpelAa6u65ykp+KrNz9pZfYQYFeMUKuDa/hZ9spurjg7lXUmG
RwctLjaX06JTgL9A8aX2bCPF2WbfPRYU/GtJ1JZisPitB03nKuqz1tbL0wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBCpupUWAcu9Xi6WoffWe7Ii6JfOMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvRUttNmxSWUJ5NzFlTHBhaDk5WjdzaUxvbDg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCX1XAAwQC
X1XYMA0GCSqGSIb3DQEBCwUAA4IBAQBWWXt1qpyZnf6iLD37mWLl1ky40EPYyFst
yrZFVZsGwwViOAEnWEnXH04kScWPRP8nTgn/FYHMz23jdcj+ok9IszpkH72zAg22
Ymgb1RBIkCSTzAyJGLz22V2VgipcCLjgRYl00rHL86cvuU9dySpEtMZvn64/SDHW
a4Jw1nU5t0nwv+Rk540y2r+Gaklq/z5wDFdqJK6K3HQIncMmYzq4DWNh0Y9yeKxw
0ecYMCu5PFHYGg865N7Og96DtMP8EkynEhG+IKvUuobgBAwwZDn7CrlpRhyqGSFi
8Jhama9wJC735xE+lqWvyO3jfV6wwyQPPuslgLCECgU7+i57mYAI
-----END CERTIFICATE-----
Generated at Sun Oct 19 08:19:50 2025 by rpki-client