Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/VU2LpNILYhS1I4lYnpe7oJedEdI.roa
File: VU2LpNILYhS1I4lYnpe7oJedEdI.roa (raw, json)
Hash identifier: AqJWB4N76uKWpRoYnPeMZTvd8JXE1PEbm4JBEfEgFs0=
Subject key identifier: 55:4D:8B:A4:D2:0B:62:14:B5:23:89:58:9E:97:BB:A0:97:9D:11:D2
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 01A010209C7B4F96A43D783E688DED46BB00
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/VU2LpNILYhS1I4lYnpe7oJedEdI.roa
Signing time: Mon 17 Aug 2026 14:29:27 +0000
ROA not before: Mon 17 Aug 2026 14:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31445
IP address blocks: 77.88.224.0/20 maxlen: 24
195.137.253.0/24 maxlen: 24
2a14:2c02::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:20:9c:7b:4f:96:a4:3d:78:3e:68:8d:ed:46:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Aug 17 14:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=554d8ba4d20b6214b52389589e97bba0979d11d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:54:10:89:f0:ac:83:f6:de:38:87:81:fa:fb:
65:2f:f3:e4:24:d1:ac:58:3f:39:78:01:cc:08:1d:
f3:1d:1c:d7:b7:1d:f3:6d:0d:46:79:2b:c8:61:cc:
38:e8:07:f7:53:d6:00:d0:47:e2:b2:a0:72:8f:cb:
2f:f9:fe:50:a0:9f:10:bd:5b:17:95:fb:1a:2c:36:
2b:75:85:d0:fc:eb:ec:32:7a:2a:d9:3c:32:a5:bf:
69:17:36:46:87:a0:a5:19:3e:86:04:62:e1:d1:16:
54:c8:22:4c:88:62:d4:30:c8:df:ba:f4:c2:5a:8c:
d6:96:f5:39:0f:92:9a:17:7e:18:c0:a6:64:da:9b:
07:9c:f4:53:4c:d7:e4:93:5b:ca:a9:dc:d2:84:58:
a8:b3:d3:ff:cd:a5:bc:b0:68:33:66:5f:b8:44:70:
7c:9f:08:99:5f:34:a0:21:55:1b:45:2f:b7:ed:18:
46:2b:ac:89:fe:21:1d:bd:85:58:5b:72:2d:29:da:
88:15:fe:81:5b:06:7b:f1:4f:15:cf:9d:23:73:50:
74:76:59:80:0d:7f:92:0f:93:79:ce:2e:5e:cc:d0:
d9:49:2d:e8:26:7e:7b:46:33:a3:cc:9b:43:3b:be:
96:02:94:8f:5f:01:9b:7b:d2:17:7f:e1:b0:2e:c8:
81:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:4D:8B:A4:D2:0B:62:14:B5:23:89:58:9E:97:BB:A0:97:9D:11:D2
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/VU2LpNILYhS1I4lYnpe7oJedEdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.88.224.0/20
195.137.253.0/24
IPv6:
2a14:2c02::/32
Signature Algorithm: sha256WithRSAEncryption
1e:b5:98:5d:15:fa:fe:97:01:d6:db:d6:c6:cf:b8:35:aa:e0:
b5:4d:1d:36:ac:9a:56:9f:67:bb:ac:e1:17:57:93:19:8a:71:
98:57:ee:46:1c:df:89:8d:61:c4:8b:0c:53:26:df:70:49:46:
96:ff:30:2a:04:0e:f9:3a:17:18:08:56:6a:a8:67:70:41:ea:
c3:d8:43:6b:4e:48:8f:ab:4c:2a:6d:f0:44:01:4c:c7:de:d0:
17:66:b8:a8:b7:71:4e:ca:de:5d:95:eb:c2:4e:9a:75:6f:74:
6f:4c:a3:21:01:06:43:33:60:c9:b8:0b:34:a4:35:5e:3e:bd:
f2:49:ad:4b:2c:e0:1b:b2:98:aa:d3:45:e9:91:5d:a8:9b:ea:
f4:9d:bc:9d:92:e8:67:24:71:ae:cf:7d:d1:35:2f:c2:71:fb:
e2:44:a1:5d:fb:4d:e6:d5:bd:ae:dc:4e:5f:0e:75:0d:dc:79:
d7:ff:9f:11:ae:84:c2:57:ec:92:d3:f7:97:5d:a9:6b:b9:b9:
20:71:53:82:b6:39:9a:c3:7c:6c:55:cf:f2:74:c1:0d:98:a4:
c3:9f:3d:67:a6:c0:3c:0f:c5:15:ce:96:b8:70:e6:62:bb:fd:
a4:74:8e:7c:4f:f6:ae:ea:e6:de:cc:67:f6:f0:6d:b2:28:b2:
bf:7a:07:d1
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaAQIJx7T5akPXg+aI3tRrsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NTNmMWI4ZTI5NjVmZDAzODc4MTBhMmY2MmNmNzE0ODE2
ZDE0OTcwHhcNMjYwODE3MTQyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTRkOGJhNGQyMGI2MjE0YjUyMzg5NTg5ZTk3YmJhMDk3OWQxMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFQQifCsg/beOIeB+vtlL/PkJNGs
WD85eAHMCB3zHRzXtx3zbQ1GeSvIYcw46Af3U9YA0EfisqByj8sv+f5QoJ8QvVsX
lfsaLDYrdYXQ/OvsMnoq2Twypb9pFzZGh6ClGT6GBGLh0RZUyCJMiGLUMMjfuvTC
WozWlvU5D5KaF34YwKZk2psHnPRTTNfkk1vKqdzShFios9P/zaW8sGgzZl+4RHB8
nwiZXzSgIVUbRS+37RhGK6yJ/iEdvYVYW3ItKdqIFf6BWwZ78U8Vz50jc1B0dlmA
DX+SD5N5zi5ezNDZSS3oJn57RjOjzJtDO76WApSPXwGbe9IXf+GwLsiBMwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFVNi6TSC2IUtSOJWJ6Xu6CXnRHSMB8GA1UdIwQY
MBaAFKlT8bjill/QOHgQovYs9xSBbRSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQt
YWU4NjMzYzE3Yjg3LzEvVlUyTHBOSUxZaFMxSTRsWW5wZTdvSmVkRWRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZTM0OTMtY2UwMy00ZDk0LWJkZmQtYWU4NjMzYzE3Yjg3
LzEvcVZQeHVPS1dYOUE0ZUJDaTlpejNGSUZ0RkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQETVjgAwQA
w4n9MA0EAgACMAcDBQAqFCwCMA0GCSqGSIb3DQEBCwUAA4IBAQAetZhdFfr+lwHW
29bGz7g1quC1TR02rJpWn2e7rOEXV5MZinGYV+5GHN+JjWHEiwxTJt9wSUaW/zAq
BA75OhcYCFZqqGdwQerD2ENrTkiPq0wqbfBEAUzH3tAXZriot3FOyt5dlevCTpp1
b3RvTKMhAQZDM2DJuAs0pDVePr3ySa1LLOAbspiq00XpkV2om+r0nbydkuhnJHGu
z33RNS/CcfviRKFd+03m1b2u3E5fDnUN3HnX/58RroTCV+yS0/eXXalrubkgcVOC
tjmaw3xsVc/ydMENmKTDnz1npsA8D8UVzpa4cOZiu/2kdI58T/au6ubezGf28G2y
KLK/egfR
-----END CERTIFICATE-----
Generated at Wed Aug 26 11:14:21 2026 by rpki-client