Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/VpoR4ytDHWEH5qJGhTngwFniYvk.roa
File: VpoR4ytDHWEH5qJGhTngwFniYvk.roa (raw, json)
Hash identifier: x6eFh+FvocnjchDTOElJQmMu4KdVVQsAbUfVxqlk4YQ=
Subject key identifier: 56:9A:11:E3:2B:43:1D:61:07:E6:A2:46:85:39:E0:C0:59:E2:62:F9
Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Certificate serial: 01A00FB00017D076E82E572E0DCDC41A0B0F
Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/VpoR4ytDHWEH5qJGhTngwFniYvk.roa
Signing time: Mon 17 Aug 2026 12:26:27 +0000
ROA not before: Mon 17 Aug 2026 12:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204800
IP address blocks: 65.98.12.0/24 maxlen: 24
65.98.32.0/24 maxlen: 24
103.138.189.0/24 maxlen: 24
192.250.228.0/24 maxlen: 24
192.250.235.0/24 maxlen: 24
198.38.91.0/24 maxlen: 24
209.42.27.0/24 maxlen: 24
216.67.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:b0:00:17:d0:76:e8:2e:57:2e:0d:cd:c4:1a:0b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd
Validity
Not Before: Aug 17 12:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=569a11e32b431d6107e6a2468539e0c059e262f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c4:30:40:0b:2a:fb:f4:cc:a2:53:29:6c:09:
b4:2d:9d:b7:a1:db:48:30:d0:04:1a:ce:e1:bd:75:
c1:08:a8:9f:35:76:5a:2a:da:35:80:94:17:e8:cb:
c2:61:60:53:8d:32:3b:ae:b3:7e:9c:ad:62:b6:5b:
6c:52:bd:92:63:78:12:f6:05:32:d0:de:9d:8c:4d:
53:df:6c:b1:d8:17:c1:43:44:49:c7:af:09:e8:67:
98:95:1f:d3:10:07:e9:f0:26:a4:26:5a:8c:62:1e:
dd:cb:cd:62:1c:a1:df:e7:0e:35:73:d1:c4:69:3f:
5b:0c:d2:f9:e9:bb:ab:5c:4c:44:08:13:50:70:65:
be:6d:ba:40:81:e2:5c:d4:1b:8b:b1:01:51:de:b0:
f9:71:7b:18:42:7b:00:4b:ca:45:e2:9a:98:92:b8:
ba:89:fd:b4:a1:7f:3e:9a:e6:8f:0d:da:52:db:4f:
d8:1f:57:51:d8:36:8b:de:ac:b5:b6:38:6f:c7:f5:
f7:dd:47:3f:e8:e8:31:44:18:d8:fb:35:cb:3b:b3:
a3:52:a8:e5:21:68:b7:95:f7:47:c7:60:76:bd:b7:
16:67:4f:a0:e0:9c:5f:6f:3c:5a:e0:a9:a6:6d:35:
3a:b7:79:2c:78:82:17:0e:21:68:81:a6:08:2c:9c:
9e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9A:11:E3:2B:43:1D:61:07:E6:A2:46:85:39:E0:C0:59:E2:62:F9
X509v3 Authority Key Identifier:
keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/VpoR4ytDHWEH5qJGhTngwFniYvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.98.12.0/24
65.98.32.0/24
103.138.189.0/24
192.250.228.0/24
192.250.235.0/24
198.38.91.0/24
209.42.27.0/24
216.67.230.0/24
Signature Algorithm: sha256WithRSAEncryption
52:45:d4:1a:0d:98:3c:74:95:27:30:02:66:08:13:34:d4:22:
c2:a6:27:83:ff:a6:a5:29:78:c1:1b:2f:b4:d1:db:de:6b:c2:
55:a8:05:92:21:a9:b1:eb:e8:89:6e:72:e0:6d:1c:ad:7f:66:
6e:29:f3:42:b5:61:d7:4f:15:20:11:27:c2:2c:7c:f1:29:1a:
01:5f:8f:36:9f:c6:4c:04:4c:2f:e0:5b:ef:29:a9:c4:94:c2:
cb:93:c1:7b:19:0d:72:3e:a3:e9:a4:24:91:5f:fd:47:02:4f:
76:7a:34:7f:4e:2b:d6:04:28:49:0d:87:05:c9:f6:37:21:9c:
50:83:45:2b:46:b4:75:0d:59:16:2d:e6:6c:10:c1:d8:ec:c8:
cf:e4:30:cb:0f:fd:ad:5a:f4:34:c3:ee:4d:62:cc:cc:bf:0c:
da:cd:96:47:5a:3e:57:8e:d2:e7:c2:6a:11:9e:8f:62:96:6b:
ed:41:7b:c5:ae:0b:33:8d:68:c7:40:00:53:3f:b1:43:5a:ab:
0e:c8:13:b5:cf:f8:b3:3e:38:0a:ec:13:9d:98:0e:3e:5f:d4:
1c:03:81:7a:76:8f:01:d1:6a:3a:a7:2f:5b:c7:bc:2c:e5:45:
4a:1b:d2:c0:df:31:cd:33:cf:3c:4c:68:5f:3d:65:ad:cc:80:
f8:09:f8:0a
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAaAPsAAX0HboLlcuDc3EGgsPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy
ZWU4ZGQwHhcNMjYwODE3MTIyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjlhMTFlMzJiNDMxZDYxMDdlNmEyNDY4NTM5ZTBjMDU5ZTI2MmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcQwQAsq+/TMolMpbAm0LZ23odtI
MNAEGs7hvXXBCKifNXZaKto1gJQX6MvCYWBTjTI7rrN+nK1itltsUr2SY3gS9gUy
0N6djE1T32yx2BfBQ0RJx68J6GeYlR/TEAfp8CakJlqMYh7dy81iHKHf5w41c9HE
aT9bDNL56burXExECBNQcGW+bbpAgeJc1BuLsQFR3rD5cXsYQnsAS8pF4pqYkri6
if20oX8+muaPDdpS20/YH1dR2DaL3qy1tjhvx/X33Uc/6OgxRBjY+zXLO7OjUqjl
IWi3lfdHx2B2vbcWZ0+g4Jxfbzxa4KmmbTU6t3kseIIXDiFogaYILJyemQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFFaaEeMrQx1hB+aiRoU54MBZ4mL5MB8GA1UdIwQY
MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt
Y2NhMzc2MDZiZjE4LzEvVnBvUjR5dERIV0VINXFKR2hUbmd3Rm5pWXZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4
LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAQWIMAwQA
QWIgAwQAZ4q9AwQAwPrkAwQAwPrrAwQAxiZbAwQA0SobAwQA2EPmMA0GCSqGSIb3
DQEBCwUAA4IBAQBSRdQaDZg8dJUnMAJmCBM01CLCpieD/6alKXjBGy+00dvea8JV
qAWSIamx6+iJbnLgbRytf2ZuKfNCtWHXTxUgESfCLHzxKRoBX482n8ZMBEwv4Fvv
KanElMLLk8F7GQ1yPqPppCSRX/1HAk92ejR/TivWBChJDYcFyfY3IZxQg0UrRrR1
DVkWLeZsEMHY7MjP5DDLD/2tWvQ0w+5NYszMvwzazZZHWj5XjtLnwmoRno9ilmvt
QXvFrgszjWjHQABTP7FDWqsOyBO1z/izPjgK7BOdmA4+X9QcA4F6do8B0Wo6py9b
x7ws5UVKG9LA3zHNM888TGhfPWWtzID4CfgK
-----END CERTIFICATE-----
Generated at Sat Aug 22 22:36:48 2026 by rpki-client