Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/vbX9076Frxcx_plLCOCB5SOvIQE.roa
File: vbX9076Frxcx_plLCOCB5SOvIQE.roa (raw, json)
Hash identifier: Q9JN1yMr+vGLfO3kp9olxJthLjI2hUrFMH1jj0oA/QM=
Subject key identifier: BD:B5:FD:D3:BE:85:AF:17:31:FE:99:4B:08:E0:81:E5:23:AF:21:01
Certificate issuer: /CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Certificate serial: 019F1CED54F769578944D555621368F40D38
Authority key identifier: E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/vbX9076Frxcx_plLCOCB5SOvIQE.roa
Signing time: Wed 01 Jul 2026 09:05:43 +0000
ROA not before: Wed 01 Jul 2026 09:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205007
IP address blocks: 130.49.163.0/24 maxlen: 24
2a09:31c0:babe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:ed:54:f7:69:57:89:44:d5:55:62:13:68:f4:0d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e91ef22adaa16d53dcf637c569f4131f26215b91
Validity
Not Before: Jul 1 09:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb5fdd3be85af1731fe994b08e081e523af2101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:f5:c5:60:42:7a:66:73:43:14:29:6f:80:
7e:c4:b1:df:63:bd:61:cb:8f:b3:c4:86:36:ba:83:
be:9d:29:5f:95:71:d9:ec:1f:69:82:f3:02:f8:b8:
bf:b8:d4:f6:86:40:f5:46:e3:c0:fb:a6:43:d3:6f:
1f:bf:5c:6f:64:75:a9:2f:33:cc:e2:22:0c:39:ad:
e0:2e:3d:22:0f:ac:ac:4e:6e:7d:01:d6:ea:08:1d:
cd:c2:fd:47:fd:39:5a:6d:e1:1c:3f:04:6f:85:66:
a6:70:f1:5a:f5:80:e1:36:df:f4:b3:84:5c:92:4f:
0c:37:16:74:b9:2d:e9:88:cb:1d:8d:b1:03:bd:6d:
9d:24:a9:cc:1c:f9:e9:b3:0d:0a:01:a3:7a:4c:e2:
d8:98:1f:b5:59:90:87:48:5f:a1:eb:cb:6a:6f:e0:
71:01:c8:4a:80:b7:63:be:01:b1:2b:f8:88:fd:a8:
19:e0:0c:93:0a:f7:f9:46:65:eb:f4:a3:83:81:d1:
64:a5:b9:e3:77:1c:33:26:d8:18:f6:2f:2b:d4:7c:
61:3e:ac:dc:a5:76:b8:e2:cf:d5:0b:3a:e0:16:67:
03:91:6a:4d:a2:9e:c7:cd:d2:56:97:7d:70:7d:4c:
4a:7f:43:ae:05:7e:f6:c6:cb:ea:ff:27:d2:cd:79:
49:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B5:FD:D3:BE:85:AF:17:31:FE:99:4B:08:E0:81:E5:23:AF:21:01
X509v3 Authority Key Identifier:
keyid:E9:1E:F2:2A:DA:A1:6D:53:DC:F6:37:C5:69:F4:13:1F:26:21:5B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6R7yKtqhbVPc9jfFafQTHyYhW5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/vbX9076Frxcx_plLCOCB5SOvIQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/111385-2eb6-4c6a-b9c4-34ae891a72cf/1/6R7yKtqhbVPc9jfFafQTHyYhW5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.163.0/24
IPv6:
2a09:31c0:babe::/48
Signature Algorithm: sha256WithRSAEncryption
06:91:61:27:73:b3:ba:35:46:b7:5a:7a:ac:f3:e3:66:b6:98:
00:75:4c:ee:f7:42:65:df:eb:68:5e:23:29:da:8c:40:57:40:
33:43:46:cf:03:a0:4b:76:da:97:09:74:e5:40:38:69:2b:aa:
f1:f1:52:29:41:66:72:a4:01:8b:1f:7d:fb:7a:e2:fe:2d:87:
3c:f8:3a:ac:37:d3:6c:96:c3:b1:92:80:9a:14:a0:88:ac:b0:
26:0f:4f:a8:48:93:b4:92:d7:01:d6:a7:d4:4e:1c:96:ba:c0:
83:a4:3d:33:22:0b:3f:20:e3:50:fa:ae:c7:52:f2:44:f6:07:
97:b7:6e:e6:f2:6b:27:90:14:94:cc:69:dc:04:ed:e4:a3:7f:
92:38:d5:d2:2c:67:60:73:fd:08:c4:02:89:1e:05:5b:09:40:
65:38:9e:78:f5:49:59:da:84:fe:35:e6:90:9d:4d:41:98:a4:
fd:37:3b:04:5b:0b:f3:14:0e:38:bf:3a:c1:3a:66:54:8f:62:
bb:10:68:f3:e8:a8:8f:6d:80:94:c1:79:14:84:d4:d1:52:ea:
c0:22:90:da:c1:c4:e2:db:e5:b7:73:c9:1b:fe:c2:01:5c:3f:
ad:e6:98:97:09:fa:15:9f:70:47:23:d4:ac:18:18:e4:32:d8:
ac:86:59:79
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ8c7VT3aVeJRNVVYhNo9A04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MWVmMjJhZGFhMTZkNTNkY2Y2MzdjNTY5ZjQxMzFmMjYy
MTViOTEwHhcNMjYwNzAxMDkwNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGI1ZmRkM2JlODVhZjE3MzFmZTk5NGIwOGUwODFlNTIzYWYyMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolX1xWBCemZzQxQpb4B+xLHfY71h
y4+zxIY2uoO+nSlflXHZ7B9pgvMC+Li/uNT2hkD1RuPA+6ZD028fv1xvZHWpLzPM
4iIMOa3gLj0iD6ysTm59AdbqCB3Nwv1H/TlabeEcPwRvhWamcPFa9YDhNt/0s4Rc
kk8MNxZ0uS3piMsdjbEDvW2dJKnMHPnpsw0KAaN6TOLYmB+1WZCHSF+h68tqb+Bx
AchKgLdjvgGxK/iI/agZ4AyTCvf5RmXr9KODgdFkpbnjdxwzJtgY9i8r1HxhPqzc
pXa44s/VCzrgFmcDkWpNop7HzdJWl31wfUxKf0OuBX72xsvq/yfSzXlJpQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFL21/dO+ha8XMf6ZSwjggeUjryEBMB8GA1UdIwQY
MBaAFOke8iraoW1T3PY3xWn0Ex8mIVuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQt
MzRhZTg5MWE3MmNmLzEvdmJYOTA3NkZyeGN4X3BsTENPQ0I1U092SVFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8xMTEzODUtMmViNi00YzZhLWI5YzQtMzRhZTg5MWE3MmNm
LzEvNlI3eUt0cWhiVlBjOWpmRmFmUVRIeVloVzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAgjGjMA8E
AgACMAkDBwAqCTHAur4wDQYJKoZIhvcNAQELBQADggEBAAaRYSdzs7o1Rrdaeqzz
42a2mAB1TO73QmXf62heIynajEBXQDNDRs8DoEt22pcJdOVAOGkrqvHxUilBZnKk
AYsffft64v4thzz4Oqw302yWw7GSgJoUoIissCYPT6hIk7SS1wHWp9ROHJa6wIOk
PTMiCz8g41D6rsdS8kT2B5e3bubyayeQFJTMadwE7eSjf5I41dIsZ2Bz/QjEAoke
BVsJQGU4nnj1SVnahP415pCdTUGYpP03OwRbC/MUDji/OsE6ZlSPYrsQaPPoqI9t
gJTBeRSE1NFS6sAikNrBxOLb5bdzyRv+wgFcP63mmJcJ+hWfcEcj1KwYGOQy2KyG
WXk=
-----END CERTIFICATE-----
Generated at Sat Jul 4 12:29:34 2026 by rpki-client