Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/V_Kh06r57R4-cHgvMsY4H5LLsSc.roa
File: V_Kh06r57R4-cHgvMsY4H5LLsSc.roa (raw, json)
Hash identifier: 0G5HiXCOnDZPyMe34cIbZAecXXwFaWC9i7dLhLjQZSk=
Subject key identifier: 57:F2:A1:D3:AA:F9:ED:1E:3E:70:78:2F:32:C6:38:1F:92:CB:B1:27
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A167E83737ECBBFC64AC738C8BF068DC6A
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/V_Kh06r57R4-cHgvMsY4H5LLsSc.roa
Signing time: Fri 23 Oct 2026 08:37:14 +0000
ROA not before: Fri 23 Oct 2026 08:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 85.137.248.0/23 maxlen: 24
85.137.248.0/24 maxlen: 24
85.137.249.0/24 maxlen: 24
91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
131.123.32.0/19 maxlen: 24
131.123.32.0/24 maxlen: 24
131.123.33.0/24 maxlen: 24
131.123.34.0/24 maxlen: 24
131.123.35.0/24 maxlen: 24
131.123.36.0/24 maxlen: 24
131.123.37.0/24 maxlen: 24
131.123.38.0/24 maxlen: 24
131.123.39.0/24 maxlen: 24
131.123.40.0/24 maxlen: 24
131.123.41.0/24 maxlen: 24
131.123.42.0/24 maxlen: 24
131.123.43.0/24 maxlen: 24
131.123.44.0/22 maxlen: 22
131.123.48.0/20 maxlen: 20
131.123.50.0/24 maxlen: 24
143.246.192.0/21 maxlen: 24
143.246.192.0/24 maxlen: 24
143.246.193.0/24 maxlen: 24
143.246.194.0/24 maxlen: 24
143.246.195.0/24 maxlen: 24
143.246.196.0/24 maxlen: 24
143.246.197.0/24 maxlen: 24
143.246.198.0/24 maxlen: 24
143.246.199.0/24 maxlen: 24
143.246.200.0/24 maxlen: 24
143.246.201.0/24 maxlen: 24
143.246.202.0/24 maxlen: 24
143.246.203.0/24 maxlen: 24
143.246.204.0/24 maxlen: 24
143.246.208.0/24 maxlen: 24
143.246.209.0/24 maxlen: 24
143.246.210.0/24 maxlen: 24
143.246.211.0/24 maxlen: 24
143.246.212.0/24 maxlen: 24
143.246.215.0/24 maxlen: 24
143.246.216.0/24 maxlen: 24
143.246.217.0/24 maxlen: 24
143.246.218.0/24 maxlen: 24
143.246.219.0/24 maxlen: 24
143.246.221.0/24 maxlen: 24
143.246.222.0/24 maxlen: 24
176.123.0.0/21 maxlen: 21
176.123.0.0/24 maxlen: 24
176.123.1.0/24 maxlen: 24
176.123.2.0/24 maxlen: 24
176.123.3.0/24 maxlen: 24
176.123.4.0/24 maxlen: 24
176.123.5.0/24 maxlen: 24
176.123.6.0/24 maxlen: 24
176.123.7.0/24 maxlen: 24
176.123.8.0/22 maxlen: 22
176.123.8.0/24 maxlen: 24
176.123.9.0/24 maxlen: 24
176.123.10.0/24 maxlen: 24
176.123.11.0/24 maxlen: 24
2001:678:6d4::/48 maxlen: 48
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f45::/32 maxlen: 32
2a0f:5f46::/32 maxlen: 32
2a0f:5f46:600::/40 maxlen: 40
2a0f:5f46:700::/40 maxlen: 40
2a0f:5f46:800::/40 maxlen: 40
2a0f:5f46:1000::/40 maxlen: 40
2a0f:5f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:67:e8:37:37:ec:bb:fc:64:ac:73:8c:8b:f0:68:dc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Oct 23 08:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57f2a1d3aaf9ed1e3e70782f32c6381f92cbb127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b4:2c:d7:f6:b6:30:96:42:0f:b9:8b:a1:1a:
0c:5e:ea:9e:a5:59:21:31:76:01:36:4f:b4:5b:40:
7d:a5:66:a2:38:aa:84:2b:b2:80:fd:d2:3d:14:8a:
bc:27:7f:3e:d7:9e:fa:06:8f:ff:2c:a9:11:81:6c:
31:dd:32:5f:dc:4f:71:50:7a:93:c4:09:1c:c6:49:
ae:44:4a:4c:c4:bf:76:cf:04:51:42:cb:33:81:87:
b6:47:00:9f:a2:09:d8:ce:12:01:e2:12:81:5b:8b:
5a:94:a1:23:b2:ae:fa:50:86:0b:cb:41:74:b6:20:
ca:25:f5:64:c4:c3:a5:c6:79:5b:0f:90:f1:c2:47:
39:08:77:c6:ce:c8:c5:7c:db:d4:c4:e7:bb:4c:30:
32:e5:46:dd:ff:04:17:c5:9c:08:37:07:6b:11:95:
bd:1a:ce:28:7a:88:00:95:af:0b:fa:db:9d:58:4a:
12:fd:4e:30:9d:85:2a:0c:e3:b0:f5:ef:77:88:f6:
f8:5c:88:b3:35:19:b3:98:2a:d3:a1:1e:3d:79:d7:
32:b3:76:3f:a8:d8:5b:d4:10:22:3d:f1:35:05:37:
97:b8:0c:b9:d3:cc:59:8b:4d:b8:33:ca:2d:0b:92:
ec:c9:9f:b9:b0:e7:c3:1e:20:02:70:b8:dd:96:bf:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F2:A1:D3:AA:F9:ED:1E:3E:70:78:2F:32:C6:38:1F:92:CB:B1:27
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/V_Kh06r57R4-cHgvMsY4H5LLsSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.248.0/23
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
131.123.32.0/19
143.246.192.0-143.246.204.255
143.246.208.0-143.246.212.255
143.246.215.0-143.246.219.255
143.246.221.0-143.246.222.255
176.123.0.0-176.123.11.255
IPv6:
2001:678:6d4::/48
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
60:fb:64:e4:84:a7:c4:78:a3:05:46:1f:94:0c:d1:a2:f5:e4:
02:92:6f:72:f9:b0:dc:86:6b:f3:65:a8:bb:54:b6:fb:ad:1f:
12:90:80:19:45:42:d9:72:34:ab:43:b0:a8:9d:96:1b:bc:dc:
46:20:cb:bc:fc:f5:99:48:91:04:b9:5d:fb:3b:06:1d:40:dc:
cd:a0:81:89:3a:c1:ef:c0:04:e1:72:6e:14:94:e1:47:d3:c4:
86:0f:f5:d2:88:53:d1:36:3b:63:f4:27:2c:03:84:81:e1:61:
f4:54:1a:a9:80:52:8b:d3:93:3f:95:52:f1:8d:da:2e:ad:8e:
74:fa:78:71:16:bc:da:d7:28:91:b1:a5:e1:7a:a7:3e:b5:54:
1c:eb:f0:ce:56:8a:68:1b:69:38:1b:f1:07:f0:dc:85:48:8b:
f2:94:25:12:f4:de:45:8f:a5:ff:9b:21:6c:a5:92:12:a2:8e:
dc:4c:93:a3:50:e1:44:2b:46:94:d3:be:83:6a:16:eb:b1:83:
16:88:ce:01:f0:a8:a0:bb:01:43:e6:3a:40:49:03:5c:9c:d1:
d3:38:5a:79:f9:db:cf:3f:6f:fe:95:e2:23:09:c3:a5:6a:da:
b4:97:03:59:f4:d6:7b:06:3c:5f:c6:09:5c:6f:e2:e3:bd:c2:
db:82:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:43:04 2026 by rpki-client