Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/oXE_rYF-aSqN-_2di6w00CT0oEo.roa
File: oXE_rYF-aSqN-_2di6w00CT0oEo.roa (raw, json)
Hash identifier: 3+GF+vVivGXAZOPBJ/tYJQjUdAa+gAXrJ0aGZcMKcTU=
Subject key identifier: A1:71:3F:AD:81:7E:69:2A:8D:FB:FD:9D:8B:AC:34:D0:24:F4:A0:4A
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019EB3B7DBB987CCCF81BE347EFB5740F264
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/oXE_rYF-aSqN-_2di6w00CT0oEo.roa
Signing time: Wed 10 Jun 2026 22:47:11 +0000
ROA not before: Wed 10 Jun 2026 22:47:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209946
IP address blocks: 95.85.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b3:b7:db:b9:87:cc:cf:81:be:34:7e:fb:57:40:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Jun 10 22:47:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1713fad817e692a8dfbfd9d8bac34d024f4a04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c6:1b:6d:00:6e:77:f0:8d:c5:21:bb:cc:0c:
82:90:f0:55:f8:e7:b0:72:6a:4e:aa:74:01:e9:b0:
54:26:13:72:cf:42:ef:7e:77:62:e8:e3:bd:b7:b5:
4f:6e:de:36:44:4d:16:fa:f1:0e:e8:66:90:af:3e:
c9:d8:22:ef:11:84:ab:46:3d:1f:a5:be:26:55:4f:
c7:96:7f:5d:e4:2d:08:da:a4:bb:75:4f:a4:30:0f:
66:e9:6a:a8:8a:55:25:0f:57:da:62:ed:fd:b4:a9:
77:24:c4:98:31:fa:1c:6f:48:c6:d3:8f:9e:bc:b0:
f6:23:fe:c0:76:5a:95:34:08:d5:8d:48:df:13:0e:
c7:81:80:46:68:97:ee:b2:e4:9b:20:d5:59:ce:cf:
70:fb:c7:db:ca:f1:28:35:0f:c9:79:76:2a:b5:fb:
66:1c:64:21:24:d8:f2:2a:bb:d6:7a:66:ac:93:36:
aa:5a:56:4c:6e:24:5c:fa:6e:ab:4b:3a:d7:65:ac:
e6:6a:fe:a7:f5:bd:7a:c8:c7:e7:4d:fa:d3:69:05:
bb:db:75:62:39:91:db:e0:92:b8:3b:03:6d:3d:b9:
eb:20:06:ab:8f:dc:83:00:2b:b9:4f:8e:db:fb:a0:
10:54:15:c2:06:e2:7d:43:44:ad:d3:d2:61:ca:86:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:3F:AD:81:7E:69:2A:8D:FB:FD:9D:8B:AC:34:D0:24:F4:A0:4A
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/oXE_rYF-aSqN-_2di6w00CT0oEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:b8:df:8e:6f:84:8d:33:96:14:9a:ba:f9:bc:d5:6e:e7:37:
7a:a8:18:23:4e:4c:f1:b7:82:f3:73:10:5d:43:25:fb:a8:9e:
b0:9f:da:29:4c:d9:6c:3e:e4:5b:4f:97:97:2c:b8:23:fc:1a:
cd:ba:23:52:ea:86:68:2e:8c:1f:c6:03:02:fe:8e:8e:d3:ee:
09:95:3c:56:92:3f:c5:4f:21:0b:b2:85:1a:aa:31:be:6d:3d:
f7:7c:09:88:58:4b:d9:b0:cb:c0:aa:0b:84:c8:8a:4c:2c:c1:
4c:d7:3d:ca:c7:18:23:cd:f5:54:55:c5:fc:87:fb:d4:4e:42:
17:42:87:8c:87:68:34:2f:68:a0:07:9c:39:98:fb:49:aa:9d:
8d:aa:4c:2f:a9:3b:de:8a:78:f0:55:e5:4c:74:03:82:91:68:
d5:fd:67:44:03:3a:f7:73:d0:0c:18:78:fb:f3:7d:90:3a:15:
55:b0:89:d8:49:2c:34:83:62:07:a9:9c:39:f3:0d:f3:6c:87:
75:ad:ec:1d:8e:02:3c:d6:50:13:fc:04:c2:b5:d5:83:59:36:
fd:91:a9:f6:5e:c9:5b:ac:a7:8b:9b:5f:08:8e:16:d6:0f:fe:
90:61:15:bc:2a:3e:89:bf:e6:0c:70:d4:5e:0f:11:e6:ea:62:
c6:7a:73:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6zt9u5h8zPgb40fvtXQPJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjBiZWM4ZjU4ZGIwY2U1YjkxZjM0NTA1Mjc3ZTQwYmZk
M2FlMTEwHhcNMjYwNjEwMjI0NzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTcxM2ZhZDgxN2U2OTJhOGRmYmZkOWQ4YmFjMzRkMDI0ZjRhMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8YbbQBud/CNxSG7zAyCkPBV+Oew
cmpOqnQB6bBUJhNyz0Lvfndi6OO9t7VPbt42RE0W+vEO6GaQrz7J2CLvEYSrRj0f
pb4mVU/Hln9d5C0I2qS7dU+kMA9m6WqoilUlD1faYu39tKl3JMSYMfocb0jG04+e
vLD2I/7AdlqVNAjVjUjfEw7HgYBGaJfusuSbINVZzs9w+8fbyvEoNQ/JeXYqtftm
HGQhJNjyKrvWemaskzaqWlZMbiRc+m6rSzrXZazmav6n9b16yMfnTfrTaQW723Vi
OZHb4JK4OwNtPbnrIAarj9yDACu5T47b+6AQVBXCBuJ9Q0St09JhyoY1BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFxP62Bfmkqjfv9nYusNNAk9KBKMB8GA1UdIwQY
MBaAFFSwvsj1jbDOW5HzRQUnfkC/064RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUt
MGY0ZGJiODkwYmQwLzEvb1hFX3JZRi1hU3FOLV8yZGk2dzAwQ1Qwb0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8yYWQzNGUtYjFlNS00ZDhjLTk0OGUtMGY0ZGJiODkwYmQw
LzEvVkxDLXlQV05zTTVia2ZORkJTZC1RTF9UcmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX1XuMA0G
CSqGSIb3DQEBCwUAA4IBAQDBuN+Ob4SNM5YUmrr5vNVu5zd6qBgjTkzxt4LzcxBd
QyX7qJ6wn9opTNlsPuRbT5eXLLgj/BrNuiNS6oZoLowfxgMC/o6O0+4JlTxWkj/F
TyELsoUaqjG+bT33fAmIWEvZsMvAqguEyIpMLMFM1z3KxxgjzfVUVcX8h/vUTkIX
QoeMh2g0L2igB5w5mPtJqp2NqkwvqTveinjwVeVMdAOCkWjV/WdEAzr3c9AMGHj7
832QOhVVsInYSSw0g2IHqZw58w3zbId1rewdjgI81lAT/ATCtdWDWTb9kan2Xslb
rKeLm18IjhbWD/6QYRW8Kj6Jv+YMcNReDxHm6mLGenMx
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:42 2026 by rpki-client