Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/VJgdfznTsn_f_xZjZ51umHkL6uw.roa
File: VJgdfznTsn_f_xZjZ51umHkL6uw.roa (raw, json)
Hash identifier: 7xW2Iyq3pVc6CY0RorN4xdkGeO++KUCDdJjl3w/fvMI=
Subject key identifier: 54:98:1D:7F:39:D3:B2:7F:DF:FF:16:63:67:9D:6E:98:79:0B:EA:EC
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 01A0F91C0B1CCE52AA819C7B3749AB1DCBE3
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/VJgdfznTsn_f_xZjZ51umHkL6uw.roa
Signing time: Thu 01 Oct 2026 20:15:59 +0000
ROA not before: Thu 01 Oct 2026 20:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8517
IP address blocks: 79.123.128.0/17 maxlen: 24
95.183.128.0/17 maxlen: 24
185.7.0.0/22 maxlen: 24
193.140.0.0/16 maxlen: 24
193.140.1.0/24 maxlen: 24
193.140.2.0/23 maxlen: 23
193.140.4.0/22 maxlen: 22
193.140.24.0/22 maxlen: 22
193.140.35.0/24 maxlen: 24
193.140.68.0/23 maxlen: 23
193.140.83.0/24 maxlen: 24
193.140.88.0/24 maxlen: 24
193.140.98.0/23 maxlen: 23
193.140.99.0/24 maxlen: 24
193.140.134.0/24 maxlen: 24
193.140.152.0/22 maxlen: 22
193.140.159.0/24 maxlen: 24
193.140.183.0/24 maxlen: 24
193.140.244.0/22 maxlen: 22
193.140.248.0/22 maxlen: 22
193.140.252.0/23 maxlen: 23
193.255.0.0/16 maxlen: 24
193.255.58.0/24 maxlen: 24
194.27.0.0/16 maxlen: 24
194.27.43.0/24 maxlen: 24
194.27.232.0/22 maxlen: 22
194.27.236.0/23 maxlen: 23
2001:a98::/32 maxlen: 32
2001:a98:1e::/48 maxlen: 48
2001:a98:20::/48 maxlen: 48
2001:a98:120::/48 maxlen: 48
2001:a98:130::/48 maxlen: 48
2001:a98:150::/48 maxlen: 48
2001:a98:160::/48 maxlen: 48
2001:a98:170::/48 maxlen: 48
2001:a98:180::/48 maxlen: 48
2001:a98:190::/48 maxlen: 48
2001:a98:1a0::/48 maxlen: 48
2001:a98:1b0::/48 maxlen: 48
2001:a98:1c0::/48 maxlen: 48
2001:a98:1d0::/48 maxlen: 48
2001:a98:1e0::/48 maxlen: 48
2001:a98:1f0::/48 maxlen: 48
2001:a98:200::/48 maxlen: 48
2001:a98:210::/48 maxlen: 48
2001:a98:220::/48 maxlen: 48
2001:a98:230::/48 maxlen: 48
2001:a98:240::/48 maxlen: 48
2001:a98:250::/48 maxlen: 48
2001:a98:260::/48 maxlen: 48
2001:a98:280::/48 maxlen: 48
2001:a98:290::/48 maxlen: 48
2001:a98:600::/48 maxlen: 48
2001:a98:1050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:1c:0b:1c:ce:52:aa:81:9c:7b:37:49:ab:1d:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Oct 1 20:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54981d7f39d3b27fdfff1663679d6e98790beaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8e:1e:b2:41:2f:d4:8d:33:87:20:86:75:78:
db:ea:d0:f0:71:1c:06:a0:df:45:50:e2:a8:b4:35:
70:bf:c3:0d:8b:42:69:4e:08:7b:b8:44:42:15:2d:
b4:16:7c:1f:32:16:b5:52:a5:60:43:30:3d:74:92:
90:17:23:e1:5b:f8:40:81:c8:11:e7:3b:99:bb:82:
18:8d:28:16:8e:a2:93:14:e0:32:77:b4:4b:05:86:
8b:8b:44:c0:dc:95:8f:ed:46:67:f1:b2:8c:14:f5:
9a:fc:28:45:a1:96:71:d1:fd:30:a1:bb:34:3b:24:
b9:73:fd:71:2e:7b:91:cc:3e:82:77:9e:0b:8e:6e:
a6:65:18:0d:6b:de:79:c7:b9:d2:fd:15:01:73:6b:
2b:e8:73:a4:62:c4:64:54:dd:70:02:1c:53:c3:65:
15:02:e6:69:67:d1:29:06:21:b2:f4:ab:06:03:62:
e4:b9:50:0b:62:ad:6e:c0:20:5d:dc:7a:ac:bb:30:
da:62:e1:91:c8:7f:7a:a1:87:2b:05:db:70:1e:ce:
2e:65:14:6d:f6:90:ff:d7:9c:db:ee:97:0f:0d:8e:
a6:65:55:82:0b:e0:93:e5:7f:6f:92:5c:b9:cb:bd:
b5:76:3d:6e:40:a5:31:57:23:f9:9c:8a:a0:c0:f0:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:98:1D:7F:39:D3:B2:7F:DF:FF:16:63:67:9D:6E:98:79:0B:EA:EC
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/VJgdfznTsn_f_xZjZ51umHkL6uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.123.128.0/17
95.183.128.0/17
185.7.0.0/22
193.140.0.0/16
193.255.0.0/16
194.27.0.0/16
IPv6:
2001:a98::/32
Signature Algorithm: sha256WithRSAEncryption
3e:58:4d:6f:bd:e7:3c:67:d2:9f:cc:e5:1f:5c:f3:e7:92:cf:
cb:e1:15:cf:93:4a:aa:b2:19:b0:4d:fd:f5:59:c9:7e:1c:18:
79:7d:d6:c8:c9:69:5f:72:b7:28:66:11:29:f6:20:a3:98:56:
70:05:80:59:38:8a:8e:4e:99:26:82:d2:c6:82:61:7b:73:7f:
d7:ba:04:80:75:c8:a5:f4:64:bd:88:f9:93:0e:86:04:71:54:
1e:f5:49:9c:f8:c8:23:e5:f8:56:66:23:fa:bc:9d:e4:0e:47:
10:db:7f:d8:cf:31:44:10:52:23:1e:4c:c8:97:8d:33:79:90:
a3:0f:a0:8a:ad:3a:9b:23:4c:d2:db:f7:96:98:df:fc:a9:c7:
cd:a2:ca:ae:b2:e7:f5:a4:d7:ec:6d:ad:31:54:29:f6:23:d8:
1b:c0:df:30:1f:04:25:5b:cc:b1:6d:17:91:04:ee:c9:4f:11:
79:6a:8a:70:a5:4d:9c:75:92:8a:e0:65:2a:e1:30:dc:4a:b7:
0b:67:c3:b1:e4:a0:8b:55:bc:d8:62:0f:6e:50:13:d4:20:29:
be:98:0e:be:1c:82:ca:8c:88:69:1f:8b:11:04:11:5e:7c:fc:
72:02:25:06:bd:1a:ca:b7:84:3b:51:18:8b:ef:f7:d5:bd:9f:
47:ce:02:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:56:47 2026 by rpki-client