Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/vZIyS6c1wljxH2c6MXzM3TX8YYw.roa
File: vZIyS6c1wljxH2c6MXzM3TX8YYw.roa (raw, json)
Hash identifier: NSPuMxbzM++qsGZdGKDu5X82WpViX4+Cyq/cFOR13fs=
Subject key identifier: BD:92:32:4B:A7:35:C2:58:F1:1F:67:3A:31:7C:CC:DD:35:FC:61:8C
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 01A032A80675792DC8ABC027DABDE5170A0F
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/vZIyS6c1wljxH2c6MXzM3TX8YYw.roa
Signing time: Mon 24 Aug 2026 07:24:27 +0000
ROA not before: Mon 24 Aug 2026 07:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57388
IP address blocks: 130.0.24.0/21 maxlen: 21
130.0.24.0/22 maxlen: 24
130.0.24.0/24 maxlen: 24
130.0.25.0/24 maxlen: 24
130.0.26.0/24 maxlen: 24
130.0.27.0/24 maxlen: 24
130.0.28.0/22 maxlen: 24
130.0.28.0/24 maxlen: 24
130.0.30.0/24 maxlen: 24
130.0.31.0/24 maxlen: 24
185.85.152.0/22 maxlen: 24
185.85.152.0/24 maxlen: 24
185.85.153.0/24 maxlen: 24
185.85.154.0/24 maxlen: 24
185.85.155.0/24 maxlen: 24
2a02:dd00::/29 maxlen: 48
2a02:dd00:1a::/48 maxlen: 48
2a02:dd00:1b::/48 maxlen: 48
2a02:dd01:9ff0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:a8:06:75:79:2d:c8:ab:c0:27:da:bd:e5:17:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Aug 24 07:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd92324ba735c258f11f673a317cccdd35fc618c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:1b:a3:f9:f4:30:b5:e9:a9:65:85:d1:78:
ea:ed:23:33:21:5f:f5:60:55:49:61:29:6c:63:24:
df:c6:4b:94:f1:2b:27:c4:51:8f:09:b3:ea:b3:ff:
ac:5b:6d:bd:c9:5c:e9:cf:77:37:e1:3c:03:59:e2:
fe:03:de:08:79:bd:f3:5b:81:07:24:ce:80:d4:92:
ae:2b:50:22:f4:dd:c0:fd:10:d6:4f:f5:4d:d6:93:
64:1d:8c:7a:c0:10:d8:e8:6e:bc:2c:89:7d:87:77:
36:5c:89:61:c6:0a:79:c3:be:2a:e2:a3:d0:e5:92:
34:8c:bd:ee:ff:a6:d9:b0:8c:7a:a4:54:10:d1:b9:
23:35:7f:a4:c2:09:5c:5a:ec:c6:bb:f5:6b:f4:fd:
1e:ca:41:8b:40:75:2c:ec:70:a8:04:d9:7d:9a:a1:
e0:c8:ae:75:20:40:d5:29:de:4e:5a:76:08:c9:71:
c6:62:fa:ca:76:0d:be:1a:43:0c:c3:19:58:db:6a:
a5:6b:4d:d1:06:d6:f7:c0:0b:cc:6e:cb:75:f6:e1:
8b:3d:e8:70:49:56:35:27:e2:70:ab:bc:11:85:77:
52:8c:69:f2:f0:cb:70:15:b2:b0:4b:de:80:df:db:
30:9e:8d:b5:5f:68:2c:5d:16:dd:c2:35:06:f2:a9:
e2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:32:4B:A7:35:C2:58:F1:1F:67:3A:31:7C:CC:DD:35:FC:61:8C
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/vZIyS6c1wljxH2c6MXzM3TX8YYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.0.24.0/21
185.85.152.0/22
IPv6:
2a02:dd00::/29
Signature Algorithm: sha256WithRSAEncryption
2e:bd:aa:3e:af:d7:76:03:10:8b:12:78:5c:9b:b9:1e:3c:31:
35:c0:47:ca:61:a4:b1:82:e0:31:31:f5:e2:96:29:a0:18:b5:
03:52:98:66:6b:20:33:2f:c6:be:53:e8:4d:6e:ae:1e:9f:92:
83:13:b3:2a:8b:c4:8c:7a:8f:59:a1:51:d6:3c:b3:fd:26:6e:
ca:2f:e7:b9:22:a6:b5:87:3b:02:69:21:5f:ee:2e:23:d5:d1:
40:a6:69:6f:96:bf:1c:19:f1:f8:9f:3c:fe:e6:11:ec:7d:31:
f6:f8:0a:ed:60:f7:ac:72:38:f9:23:63:92:21:dd:5d:26:b0:
75:e9:fd:35:59:77:d3:10:97:01:56:09:aa:f2:96:7a:50:c0:
df:cd:f9:c8:11:63:7d:c7:ea:61:8c:80:42:e8:10:df:bb:e2:
a5:3f:7f:78:bd:b7:00:ff:00:26:1f:30:4c:db:7b:ed:5a:1f:
18:c7:9b:a1:b4:2f:42:9e:3f:d6:80:49:71:c0:f4:7f:ed:1c:
cf:9c:32:25:49:e5:95:91:6f:bd:93:ee:d8:0a:6a:bf:6e:35:
f0:d1:47:83:98:f7:77:86:41:56:d6:7a:16:87:3f:cb:46:47:
80:ed:1a:d8:55:e7:84:45:10:28:80:e5:4c:b0:8b:93:d1:58:
ee:d3:f4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:22:22 2026 by rpki-client