Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vduP_X8YQLvDH5gjVvr28wZEst0.roa
File: vduP_X8YQLvDH5gjVvr28wZEst0.roa (raw, json)
Hash identifier: RvbBWNadCB950M7fK5k7HiU+i56A2rC0qAh52KEqpHA=
Subject key identifier: BD:DB:8F:FD:7F:18:40:BB:C3:1F:98:23:56:FA:F6:F3:06:44:B2:DD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CB4D9EE73A545BF27E5B9B69C1F022DEF
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vduP_X8YQLvDH5gjVvr28wZEst0.roa
Signing time: Tue 03 Mar 2026 17:58:27 +0000
ROA not before: Tue 03 Mar 2026 17:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197963
IP address blocks: 185.229.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:d9:ee:73:a5:45:bf:27:e5:b9:b6:9c:1f:02:2d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 3 17:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bddb8ffd7f1840bbc31f982356faf6f30644b2dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:99:7c:c4:bf:dd:db:e2:3c:58:a2:71:48:
a8:7e:48:26:6c:27:b2:d6:69:41:c7:81:ca:c7:44:
da:b3:d2:08:05:f6:ce:2b:46:ac:f2:60:22:6b:2e:
d3:9c:01:36:47:13:e1:c0:c8:bd:80:9b:0d:c9:0a:
23:4c:06:de:ad:23:31:3c:4c:94:4d:32:b9:29:2b:
30:52:c0:01:23:f5:e6:dc:8d:0d:44:f3:eb:75:52:
19:f9:7b:ea:5a:91:4c:a0:09:22:07:f2:52:dd:95:
4e:48:b8:a2:16:a8:f0:97:3c:76:db:4a:60:12:24:
ff:8c:a7:10:04:1f:d7:47:da:56:ab:b5:e6:b0:77:
4d:11:16:27:fa:c4:c3:65:73:1b:ca:0c:25:6b:78:
44:06:39:21:69:72:6f:ac:f6:72:dd:6f:f5:be:9c:
f1:99:66:d0:d1:7f:22:a1:b4:23:5f:e8:d4:52:74:
23:66:06:ed:3a:ed:d7:70:e2:c5:98:6d:86:ed:9a:
ab:cf:3c:ed:04:f3:e6:02:31:cc:b7:12:b2:ae:21:
17:db:1b:91:40:7e:29:c6:2a:3a:4f:f2:8f:87:2b:
76:d2:28:27:37:e9:50:01:f5:c5:ff:7a:a3:9d:5f:
63:70:08:1f:07:4d:e4:e8:32:bc:7f:53:03:51:d2:
c7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:8F:FD:7F:18:40:BB:C3:1F:98:23:56:FA:F6:F3:06:44:B2:DD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/vduP_X8YQLvDH5gjVvr28wZEst0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
71:83:95:0c:65:1c:45:19:f6:1b:71:fa:c2:1d:3b:a4:bf:4e:
6b:5b:4c:52:0f:41:20:c5:e2:10:c8:64:49:e6:4f:33:e8:f7:
e7:06:a3:6f:3c:f4:76:aa:31:86:23:b6:3a:7d:93:f9:cb:20:
89:59:17:a1:f1:c4:78:69:53:70:f4:2e:95:cc:2d:3f:df:3a:
21:80:50:74:53:71:4c:71:ec:17:ef:3f:ec:13:89:e4:e8:7b:
bb:9b:32:d9:0c:8e:79:1b:ee:6c:0a:0a:a8:a3:a2:cd:ff:ea:
80:70:3a:82:b4:ba:30:d7:90:70:e7:29:33:d9:ff:89:d7:b3:
62:cd:4e:a4:61:2a:86:1b:99:d3:07:66:de:03:9a:2f:e5:c3:
46:85:22:a5:f4:a7:84:01:59:52:52:cb:77:de:43:f8:89:82:
a7:b2:45:e0:e0:a0:43:32:fd:1d:6d:33:fa:90:5f:03:b1:75:
49:55:cb:af:2a:6c:ba:06:e2:7d:0d:da:d0:df:76:3b:78:f2:
7d:e6:08:2e:fa:3d:96:3b:f0:a1:f6:56:cc:07:86:bc:2f:ab:
9b:7f:df:05:22:0e:cc:1f:bb:de:15:2d:22:e8:27:85:40:1c:
ec:e9:9d:87:fc:a4:4c:ca:5c:fb:11:b0:93:ba:85:b3:5a:12:
49:16:89:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZy02e5zpUW/J+W5tpwfAi3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwMzAzMTc1ODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGRiOGZmZDdmMTg0MGJiYzMxZjk4MjM1NmZhZjZmMzA2NDRiMmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusiZfMS/3dviPFiicUiofkgmbCey
1mlBx4HKx0Tas9IIBfbOK0as8mAiay7TnAE2RxPhwMi9gJsNyQojTAberSMxPEyU
TTK5KSswUsABI/Xm3I0NRPPrdVIZ+XvqWpFMoAkiB/JS3ZVOSLiiFqjwlzx220pg
EiT/jKcQBB/XR9pWq7XmsHdNERYn+sTDZXMbygwla3hEBjkhaXJvrPZy3W/1vpzx
mWbQ0X8iobQjX+jUUnQjZgbtOu3XcOLFmG2G7ZqrzzztBPPmAjHMtxKyriEX2xuR
QH4pxio6T/KPhyt20ignN+lQAfXF/3qjnV9jcAgfB03k6DK8f1MDUdLHdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3bj/1/GEC7wx+YI1b69vMGRLLdMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvdmR1UF9YOFlRTHZESDVnalZ2cjI4d1pFc3QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueXfMA0G
CSqGSIb3DQEBCwUAA4IBAQBxg5UMZRxFGfYbcfrCHTukv05rW0xSD0EgxeIQyGRJ
5k8z6PfnBqNvPPR2qjGGI7Y6fZP5yyCJWReh8cR4aVNw9C6VzC0/3zohgFB0U3FM
cewX7z/sE4nk6Hu7mzLZDI55G+5sCgqoo6LN/+qAcDqCtLow15Bw5ykz2f+J17Ni
zU6kYSqGG5nTB2beA5ov5cNGhSKl9KeEAVlSUst33kP4iYKnskXg4KBDMv0dbTP6
kF8DsXVJVcuvKmy6BuJ9DdrQ33Y7ePJ95ggu+j2WO/Ch9lbMB4a8L6ubf98FIg7M
H7veFS0i6CeFQBzs6Z2H/KRMylz7EbCTuoWzWhJJFokc
-----END CERTIFICATE-----
Generated at Thu Mar 5 14:54:37 2026 by rpki-client