Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/vjWbO2VHpP-vkUenbdLYg6VwxHk.roa
File: vjWbO2VHpP-vkUenbdLYg6VwxHk.roa (raw, json)
Hash identifier: nYXnmLT7OQ0V/vFje3ztCDA1QL2KqTBRpzZPusCnjmU=
Subject key identifier: BE:35:9B:3B:65:47:A4:FF:AF:91:47:A7:6D:D2:D8:83:A5:70:C4:79
Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Certificate serial: 01A0F345E771D58F03A3B2D262719767DF44
Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/vjWbO2VHpP-vkUenbdLYg6VwxHk.roa
Signing time: Wed 30 Sep 2026 17:03:59 +0000
ROA not before: Wed 30 Sep 2026 17:03:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57293
IP address blocks: 5.197.0.0/16 maxlen: 21
5.197.0.0/17 maxlen: 17
5.197.116.0/22 maxlen: 22
5.197.128.0/17 maxlen: 17
5.197.128.0/20 maxlen: 20
5.197.128.0/21 maxlen: 21
5.197.136.0/21 maxlen: 21
5.197.144.0/20 maxlen: 20
5.197.160.0/20 maxlen: 20
5.197.176.0/20 maxlen: 20
5.197.176.0/21 maxlen: 21
5.197.184.0/21 maxlen: 21
5.197.192.0/20 maxlen: 20
5.197.192.0/21 maxlen: 21
5.197.200.0/21 maxlen: 21
5.197.208.0/20 maxlen: 20
5.197.208.0/21 maxlen: 21
5.197.216.0/21 maxlen: 21
5.197.224.0/20 maxlen: 20
5.197.224.0/21 maxlen: 21
5.197.232.0/21 maxlen: 21
5.197.240.0/20 maxlen: 20
5.197.240.0/21 maxlen: 21
5.197.248.0/21 maxlen: 21
149.255.144.0/20 maxlen: 24
149.255.144.0/21 maxlen: 21
149.255.152.0/21 maxlen: 21
149.255.152.0/24 maxlen: 24
149.255.153.0/24 maxlen: 24
149.255.154.0/24 maxlen: 24
149.255.155.0/24 maxlen: 24
185.146.112.0/22 maxlen: 24
185.146.112.0/24 maxlen: 24
185.146.113.0/24 maxlen: 24
185.146.114.0/24 maxlen: 24
185.146.115.0/24 maxlen: 24
2a0b:f9c0::/29 maxlen: 29
2a0b:f9c0::/32 maxlen: 32
2a0b:f9c1::/32 maxlen: 32
2a0b:f9c2::/32 maxlen: 32
2a0b:f9c3::/32 maxlen: 32
2a0b:f9c4::/32 maxlen: 32
2a0b:f9c5::/32 maxlen: 32
2a0b:f9c6::/32 maxlen: 32
2a0b:f9c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:45:e7:71:d5:8f:03:a3:b2:d2:62:71:97:67:df:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974
Validity
Not Before: Sep 30 17:03:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be359b3b6547a4ffaf9147a76dd2d883a570c479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:88:00:d0:9f:1e:81:2b:75:05:a7:97:43:
66:32:0c:5f:4b:fd:e8:3d:ce:96:f4:9f:6e:bd:25:
65:6a:f4:ea:d4:47:20:f1:7c:e4:16:72:54:f2:3b:
8d:b3:dc:c3:dd:a1:6a:4f:b0:4a:e8:db:f0:e1:64:
40:b6:b3:fe:c9:22:ad:41:7c:c5:da:82:4b:3d:bb:
5f:ef:6d:50:71:0c:c4:3d:16:f1:00:63:bb:3f:f1:
04:89:2d:a7:0c:02:87:ce:91:09:ee:82:48:56:ba:
4a:ec:65:9b:fd:36:04:45:f0:72:93:9c:97:62:cd:
c6:9b:5d:8e:0a:c1:79:27:0b:10:07:cb:74:65:70:
c3:fe:74:a3:7d:54:70:cf:dc:91:52:ad:57:18:fc:
81:5c:bf:0d:15:ca:09:88:2f:1b:86:e2:73:eb:40:
7f:03:f7:f8:6f:56:7f:ca:ba:ec:4f:f4:49:b6:a7:
77:2d:40:8d:b2:cd:a3:49:c1:d5:32:c9:68:95:06:
95:50:04:08:1e:a8:ab:01:a8:24:15:fb:fc:0b:49:
39:15:e4:41:ce:41:54:11:5c:64:85:9c:3d:34:2b:
ac:71:4b:66:4d:62:64:70:89:47:1c:4c:48:b5:68:
32:97:70:25:e4:77:e4:1b:50:62:ee:3a:29:c3:0e:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:9B:3B:65:47:A4:FF:AF:91:47:A7:6D:D2:D8:83:A5:70:C4:79
X509v3 Authority Key Identifier:
keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/vjWbO2VHpP-vkUenbdLYg6VwxHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.197.0.0/16
149.255.144.0/20
185.146.112.0/22
IPv6:
2a0b:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
ba:f1:f8:0e:5d:11:6b:34:24:76:05:77:93:cb:ab:da:37:bb:
af:94:35:cb:e8:25:69:33:2f:c4:f4:c2:95:b4:c5:fa:27:44:
7d:79:e2:f5:67:64:ca:ff:cd:68:0b:29:11:30:4a:97:f3:c9:
41:20:a0:b2:4d:78:c2:f8:74:15:2d:83:d5:ea:19:fb:de:e8:
43:82:22:57:2d:8d:97:0e:02:40:dc:88:2c:0d:ea:2f:9f:03:
81:e2:00:77:b1:5d:55:77:95:9e:21:47:90:42:14:d5:63:53:
01:e0:8d:25:fe:d5:48:c4:2f:80:fc:92:2b:c0:df:c0:ca:1e:
6a:5f:01:ae:04:9a:6b:04:6d:8b:1b:db:e3:76:43:30:4b:ea:
dc:b9:fa:fd:11:51:99:4b:dd:57:33:05:15:b7:48:f9:10:b8:
0b:21:59:a9:1b:ad:d3:15:62:2f:ca:ca:7d:1c:8e:6b:1f:65:
70:91:15:95:e3:4e:4a:23:d7:ad:79:1a:0c:74:d0:64:ac:13:
e0:d3:9d:0d:47:d2:a7:2b:0d:21:1a:50:2f:59:d6:10:9f:ef:
db:1e:d4:73:01:88:e7:93:53:41:ad:42:fd:18:c4:5d:ac:e3:
3b:27:71:ce:6e:f5:96:c4:1d:b1:9f:b7:69:6f:99:a7:55:4c:
7d:e8:35:54
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaDzRedx1Y8Do7LSYnGXZ99EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjA4MThiMTg2YjBiOWNiMDlhZjU0MjBkMWU1YWUzMzRm
ZTM5NzQwHhcNMjYwOTMwMTcwMzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTM1OWIzYjY1NDdhNGZmYWY5MTQ3YTc2ZGQyZDg4M2E1NzBjNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN+IANCfHoErdQWnl0NmMgxfS/3o
Pc6W9J9uvSVlavTq1Ecg8XzkFnJU8juNs9zD3aFqT7BK6Nvw4WRAtrP+ySKtQXzF
2oJLPbtf721QcQzEPRbxAGO7P/EEiS2nDAKHzpEJ7oJIVrpK7GWb/TYERfByk5yX
Ys3Gm12OCsF5JwsQB8t0ZXDD/nSjfVRwz9yRUq1XGPyBXL8NFcoJiC8bhuJz60B/
A/f4b1Z/yrrsT/RJtqd3LUCNss2jScHVMslolQaVUAQIHqirAagkFfv8C0k5FeRB
zkFUEVxkhZw9NCuscUtmTWJkcIlHHExItWgyl3Al5HfkG1Bi7jopww4JPwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFL41mztlR6T/r5FHp23S2IOlcMR5MB8GA1UdIwQY
MBaAFGsggYsYawucsJr1Qg0eWuM0/jl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmY5NWUtNWZlNS00YzlhLTg0ZDct
ZTVjOWMyZThlOWJmLzEvdmpXYk8yVkhwUC12a1VlbmJkTFlnNlZ3eEhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wMmY5NWUtNWZlNS00YzlhLTg0ZDctZTVjOWMyZThlOWJm
LzEvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwMABcUDBASV
/5ADBAK5knAwDQQCAAIwBwMFAyoL+cAwDQYJKoZIhvcNAQELBQADggEBALrx+A5d
EWs0JHYFd5PLq9o3u6+UNcvoJWkzL8T0wpW0xfonRH154vVnZMr/zWgLKREwSpfz
yUEgoLJNeML4dBUtg9XqGfve6EOCIlctjZcOAkDciCwN6i+fA4HiAHexXVV3lZ4h
R5BCFNVjUwHgjSX+1UjEL4D8kivA38DKHmpfAa4EmmsEbYsb2+N2QzBL6ty5+v0R
UZlL3VczBRW3SPkQuAshWakbrdMVYi/Kyn0cjmsfZXCRFZXjTkoj1615Ggx00GSs
E+DTnQ1H0qcrDSEaUC9Z1hCf79se1HMBiOeTU0GtQv0YxF2s4zsncc5u9ZbEHbGf
t2lvmadVTH3oNVQ=
-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:56 2026 by rpki-client