Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vT4REK5orNl1C2B5JSlJeXIjzzw.roa
File: vT4REK5orNl1C2B5JSlJeXIjzzw.roa (raw, json)
Hash identifier: QYk6qbypJYCCLDwgoyVOhwoJkr+SNmf8HnODNLT48XQ=
Subject key identifier: BD:3E:11:10:AE:68:AC:D9:75:0B:60:79:25:29:49:79:72:23:CF:3C
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 019E81ED367D1B2F77EC094F7479F9C4BA11
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vT4REK5orNl1C2B5JSlJeXIjzzw.roa
Signing time: Mon 01 Jun 2026 06:44:27 +0000
ROA not before: Mon 01 Jun 2026 06:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215285
IP address blocks: 37.32.40.0/24 maxlen: 24
185.215.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:81:ed:36:7d:1b:2f:77:ec:09:4f:74:79:f9:c4:ba:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jun 1 06:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd3e1110ae68acd9750b6079252949797223cf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2a:bb:25:77:c0:6c:35:14:1b:d7:36:47:9b:
b8:f5:6b:48:13:4f:67:ca:25:de:a2:7e:2c:5c:c8:
f4:eb:c2:16:62:85:af:c7:31:fd:a0:6e:cb:66:36:
30:ba:62:49:b9:b1:53:ab:c6:3c:47:5c:42:d9:c9:
1e:8f:c9:2a:11:7d:83:1c:08:2e:92:6b:29:b0:1f:
0a:2c:50:e9:58:39:ac:90:88:d6:7a:5b:d6:fb:8d:
00:81:50:0c:5e:c2:e1:fb:2b:65:99:92:b4:4d:f9:
72:0d:99:71:62:e4:01:cb:27:75:f1:4e:2d:f3:ed:
61:27:d6:03:10:28:e0:39:b2:ad:dd:e7:35:79:4e:
ef:73:ee:b7:77:7b:72:8d:56:95:81:81:42:4b:b9:
e4:da:23:5e:d3:e8:11:2f:a3:34:4d:ef:53:28:ca:
c2:e2:9b:66:90:01:2b:03:fe:cf:74:7a:e4:5a:19:
82:cf:98:5a:b4:cb:cb:26:7a:c6:b5:b5:cc:e9:d9:
d2:38:40:20:0e:70:81:c3:f1:b9:f6:8c:7b:c3:0a:
0d:64:d4:79:91:9a:ca:ec:f8:c3:50:a1:33:1f:40:
72:c1:b0:af:34:09:f8:cb:e9:c8:0c:17:b0:e7:15:
d0:f3:3c:31:88:b7:25:1b:48:d0:1a:41:c4:fb:69:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3E:11:10:AE:68:AC:D9:75:0B:60:79:25:29:49:79:72:23:CF:3C
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/vT4REK5orNl1C2B5JSlJeXIjzzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.40.0/24
185.215.228.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:ff:43:d3:1e:48:0b:42:32:3d:31:f4:5f:14:9e:c0:ef:d5:
71:0e:33:e7:9a:6b:aa:90:d7:7d:b3:30:d2:34:9e:60:89:06:
e7:93:36:f1:11:05:a1:05:de:ae:19:bf:42:94:38:ad:a0:77:
b8:ba:2c:2b:cc:0e:0e:84:00:d1:a8:b7:d7:12:b3:99:21:3b:
c3:d0:6c:62:71:c4:8a:12:57:83:a4:23:3a:9c:97:51:4d:74:
9b:df:44:ca:3a:15:c3:2b:a1:05:82:26:db:eb:b0:2c:cc:97:
01:65:49:bd:78:6f:a4:06:bd:66:e2:05:28:96:f3:08:5c:e7:
49:aa:94:b6:d5:b9:03:34:27:58:45:79:73:f3:fc:c6:bc:b0:
11:90:00:24:a9:25:5f:81:7c:68:e5:b4:8d:63:df:2b:ca:e3:
99:71:ff:00:9a:8d:61:f5:2d:ef:60:83:45:84:33:8a:b4:cc:
37:09:af:ee:19:78:e8:73:78:24:f7:c8:a5:97:91:04:f7:19:
a1:36:a7:0d:e3:e0:4a:c4:26:3c:ea:22:f1:5b:d9:a5:24:1b:
c5:3b:a6:3b:a5:bf:d7:df:98:d0:5d:1d:cb:fa:fc:46:c5:8e:
12:1b:cd:62:ea:59:b3:62:35:1b:94:d6:04:ba:22:17:bc:86:
a7:bf:ba:61
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ6B7TZ9Gy937AlPdHn5xLoRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjYwNjAxMDY0NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDNlMTExMGFlNjhhY2Q5NzUwYjYwNzkyNTI5NDk3OTcyMjNjZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiq7JXfAbDUUG9c2R5u49WtIE09n
yiXeon4sXMj068IWYoWvxzH9oG7LZjYwumJJubFTq8Y8R1xC2ckej8kqEX2DHAgu
kmspsB8KLFDpWDmskIjWelvW+40AgVAMXsLh+ytlmZK0TflyDZlxYuQByyd18U4t
8+1hJ9YDECjgObKt3ec1eU7vc+63d3tyjVaVgYFCS7nk2iNe0+gRL6M0Te9TKMrC
4ptmkAErA/7PdHrkWhmCz5hatMvLJnrGtbXM6dnSOEAgDnCBw/G59ox7wwoNZNR5
kZrK7PjDUKEzH0BywbCvNAn4y+nIDBew5xXQ8zwxiLclG0jQGkHE+2mdowIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL0+ERCuaKzZdQtgeSUpSXlyI888MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvdlQ0UkVLNW9yTmwxQzJCNUpTbEplWElqenp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJSAoAwQA
udfkMA0GCSqGSIb3DQEBCwUAA4IBAQCw/0PTHkgLQjI9MfRfFJ7A79VxDjPnmmuq
kNd9szDSNJ5giQbnkzbxEQWhBd6uGb9ClDitoHe4uiwrzA4OhADRqLfXErOZITvD
0GxiccSKEleDpCM6nJdRTXSb30TKOhXDK6EFgibb67AszJcBZUm9eG+kBr1m4gUo
lvMIXOdJqpS21bkDNCdYRXlz8/zGvLARkAAkqSVfgXxo5bSNY98ryuOZcf8Amo1h
9S3vYINFhDOKtMw3Ca/uGXjoc3gk98ill5EE9xmhNqcN4+BKxCY86iLxW9mlJBvF
O6Y7pb/X35jQXR3L+vxGxY4SG81i6lmzYjUblNYEuiIXvIanv7ph
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:06:20 2026 by rpki-client