Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VRM2BjUx4uyjWThf0dIbYdyuXsU.roa
File: VRM2BjUx4uyjWThf0dIbYdyuXsU.roa (raw, json)
Hash identifier: 2Xbu3TKVUpL9aBd0gYW9ThnfCDwc3RiZFwDP4oQLO1E=
Subject key identifier: 55:13:36:06:35:31:E2:EC:A3:59:38:5F:D1:D2:1B:61:DC:AE:5E:C5
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A04DEADC8EE0D6494055D950D23836EC6C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VRM2BjUx4uyjWThf0dIbYdyuXsU.roa
Signing time: Sat 29 Aug 2026 14:27:12 +0000
ROA not before: Sat 29 Aug 2026 14:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203273
IP address blocks: 2.56.118.0/24 maxlen: 24
2.56.119.0/24 maxlen: 24
2.56.120.0/24 maxlen: 24
2.56.121.0/24 maxlen: 24
2.56.122.0/24 maxlen: 24
2.56.123.0/24 maxlen: 24
2.56.124.0/24 maxlen: 24
2.56.125.0/24 maxlen: 24
2.56.126.0/24 maxlen: 24
2.56.172.0/24 maxlen: 24
2.56.174.0/24 maxlen: 24
171.22.114.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
171.22.129.0/24 maxlen: 24
171.22.130.0/24 maxlen: 24
171.22.131.0/24 maxlen: 24
171.22.132.0/24 maxlen: 24
185.203.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:ea:dc:8e:e0:d6:49:40:55:d9:50:d2:38:36:ec:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 29 14:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=551336063531e2eca359385fd1d21b61dcae5ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:91:06:ee:d2:4d:f7:bc:82:24:ea:f0:1d:9f:
05:f8:ff:9b:cd:eb:c9:1a:be:eb:a0:26:2f:10:ae:
2f:59:3e:24:24:4e:df:2b:05:80:ea:0d:09:07:11:
cc:54:d3:ac:24:fc:5e:7f:25:67:9b:ba:32:b1:f9:
c5:7e:69:23:f0:74:e4:ea:dd:d2:1e:5c:02:7c:55:
2d:b7:2b:06:61:94:4e:90:9a:ca:86:06:e2:6b:c9:
eb:30:0e:7a:c7:19:fc:ad:bd:d0:e9:66:91:ed:9b:
ed:1c:68:9a:2b:80:1b:08:76:62:95:e7:20:98:d4:
2e:af:33:9a:28:1f:72:39:9e:b8:a2:c1:33:66:86:
2a:59:a4:42:a4:08:ee:6f:46:bd:e0:1e:37:8b:84:
7b:21:0a:db:85:3a:a1:fe:18:84:c8:b5:17:5d:0e:
4e:79:9f:b0:56:b9:72:bd:d6:1d:67:7d:a6:af:5c:
c6:c5:c9:ba:1e:26:ef:79:10:3c:c5:93:eb:0b:6c:
4c:da:f9:9a:bd:db:95:47:15:fe:a3:89:6f:89:b3:
15:3e:8a:75:68:8f:d0:a0:30:d8:dd:06:54:0b:4e:
22:a6:7d:8c:b6:53:5b:7e:54:50:ef:e1:d9:ef:f5:
5c:24:1d:8c:6b:df:85:20:51:e7:6b:7c:70:66:37:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:36:06:35:31:E2:EC:A3:59:38:5F:D1:D2:1B:61:DC:AE:5E:C5
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VRM2BjUx4uyjWThf0dIbYdyuXsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.118.0-2.56.126.255
2.56.172.0/24
2.56.174.0/24
171.22.114.0/24
171.22.119.0/24
171.22.128.0-171.22.132.255
185.203.4.0/24
Signature Algorithm: sha256WithRSAEncryption
45:8a:4c:4f:e5:b4:36:4b:7c:d6:14:bf:da:b9:3b:fb:13:5d:
51:4a:dc:0a:a9:46:20:05:92:c1:92:bc:4c:f0:94:ed:02:1e:
ea:ff:c3:05:eb:2d:bb:f5:80:76:c5:58:08:66:ea:1e:d1:bc:
38:2c:0a:d3:48:16:72:25:89:ff:b6:06:17:80:52:bd:af:e4:
0d:5c:56:c4:30:31:06:f3:f6:2c:d7:fe:40:b0:54:46:83:d9:
d6:3c:61:c8:43:c8:bd:e4:46:6f:3c:d4:e3:7a:04:3a:91:38:
25:6c:32:c3:10:eb:94:0f:ba:fb:05:bb:ae:bb:99:09:da:78:
d7:4c:24:c9:1f:a7:c2:fa:e2:b3:b8:b1:38:9a:16:46:5e:89:
3e:f8:35:7b:3b:6c:34:da:32:d3:77:0f:66:98:d3:d2:eb:f5:
7c:8e:3f:e6:72:d1:45:d1:d3:54:aa:b6:4b:a3:82:12:28:b9:
c1:7f:51:23:4c:db:e9:e3:b1:e9:d1:c0:65:b1:4d:82:86:01:
cb:ab:19:42:ef:17:eb:74:26:6c:ad:91:f3:88:46:8e:42:ee:
58:db:76:d3:8d:91:eb:48:e3:35:52:f0:82:c0:72:06:2d:cd:
84:39:38:37:ce:6d:2e:c4:35:49:35:8c:f8:16:0b:c0:2b:91:
f6:a9:9a:79
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAaBN6tyO4NZJQFXZUNI4NuxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwODI5MTQyNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTEzMzYwNjM1MzFlMmVjYTM1OTM4NWZkMWQyMWI2MWRjYWU1ZWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZEG7tJN97yCJOrwHZ8F+P+bzevJ
Gr7roCYvEK4vWT4kJE7fKwWA6g0JBxHMVNOsJPxefyVnm7oysfnFfmkj8HTk6t3S
HlwCfFUttysGYZROkJrKhgbia8nrMA56xxn8rb3Q6WaR7ZvtHGiaK4AbCHZilecg
mNQurzOaKB9yOZ64osEzZoYqWaRCpAjub0a94B43i4R7IQrbhTqh/hiEyLUXXQ5O
eZ+wVrlyvdYdZ32mr1zGxcm6HibveRA8xZPrC2xM2vmavduVRxX+o4lvibMVPop1
aI/QoDDY3QZUC04ipn2MtlNbflRQ7+HZ7/VcJB2Ma9+FIFHna3xwZjcDyQIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFFUTNgY1MeLso1k4X9HSG2Hcrl7FMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvVlJNMkJqVXg0dXlqV1RoZjBkSWJZZHl1WHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6MAwDBAECOHYD
BAACOH4DBAACOKwDBAACOK4DBACrFnIDBACrFncwDAMEB6sWgAMEAKsWhAMEALnL
BDANBgkqhkiG9w0BAQsFAAOCAQEARYpMT+W0Nkt81hS/2rk7+xNdUUrcCqlGIAWS
wZK8TPCU7QIe6v/DBestu/WAdsVYCGbqHtG8OCwK00gWciWJ/7YGF4BSva/kDVxW
xDAxBvP2LNf+QLBURoPZ1jxhyEPIveRGbzzU43oEOpE4JWwywxDrlA+6+wW7rruZ
Cdp410wkyR+nwvris7ixOJoWRl6JPvg1eztsNNoy03cPZpjT0uv1fI4/5nLRRdHT
VKq2S6OCEii5wX9RI0zb6eOx6dHAZbFNgoYBy6sZQu8X63QmbK2R84hGjkLuWNt2
042R60jjNVLwgsByBi3NhDk4N85tLsQ1STWM+BYLwCuR9qmaeQ==
-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:21 2026 by rpki-client