Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vCqWrNOCymqFZmrO3qaTNn4HbNA.roa
File: vCqWrNOCymqFZmrO3qaTNn4HbNA.roa (raw, json)
Hash identifier: +16nEDZ9QnLxIPnhv/g9EgXn3K+VNKJmvGJKMuEqKoI=
Subject key identifier: BC:2A:96:AC:D3:82:CA:6A:85:66:6A:CE:DE:A6:93:36:7E:07:6C:D0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D5A5B9E5F7AA673F2F6DB1F77F86C75A3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vCqWrNOCymqFZmrO3qaTNn4HbNA.roa
Signing time: Sat 04 Apr 2026 21:17:26 +0000
ROA not before: Sat 04 Apr 2026 21:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.90.17.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.230.65.0/24 maxlen: 24
185.230.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5a:5b:9e:5f:7a:a6:73:f2:f6:db:1f:77:f8:6c:75:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 4 21:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc2a96acd382ca6a85666acedea693367e076cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:71:ef:59:6d:3d:d4:62:d0:6a:24:3b:81:
12:6d:9f:b9:4a:12:74:f6:92:ce:ea:8b:8a:71:51:
60:ff:db:58:84:c6:7d:d8:34:c2:44:93:49:e2:32:
47:5c:1c:a8:53:36:22:e2:90:ad:54:d1:11:78:8d:
75:63:86:4c:e0:56:5f:da:c0:fe:be:a9:a7:18:21:
73:39:eb:c4:d2:4d:02:49:aa:b9:95:2a:a3:93:b9:
5d:a3:9a:d6:01:9a:bf:69:29:d8:30:77:b5:a9:5f:
fc:8c:12:05:1a:ca:a9:54:c9:fb:01:74:1a:0f:c6:
22:a1:45:a8:81:71:a6:67:e0:7c:7d:b6:43:b1:5a:
dc:c1:37:7a:74:6d:3c:ff:33:38:f5:19:37:a2:1a:
be:27:de:26:46:06:83:6e:f9:97:3a:73:0d:3d:91:
01:17:4f:ab:06:3f:41:ba:9e:a3:b5:8b:24:19:94:
8d:fc:9e:9e:08:b8:70:d9:4c:cd:40:65:d1:a3:07:
15:1e:20:31:fa:74:f8:c0:ea:ff:77:be:a0:df:08:
7a:6f:18:48:a4:34:00:87:7b:5f:0d:83:b4:21:b7:
33:78:23:6a:90:f2:e4:51:f8:4b:fd:5a:c4:c7:6b:
3d:87:99:0f:2b:74:6c:63:e8:ad:42:93:61:e7:ae:
00:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2A:96:AC:D3:82:CA:6A:85:66:6A:CE:DE:A6:93:36:7E:07:6C:D0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vCqWrNOCymqFZmrO3qaTNn4HbNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
185.222.30.0/24
185.230.65.0-185.230.66.255
Signature Algorithm: sha256WithRSAEncryption
2a:31:d8:49:c0:48:db:18:08:9e:b0:d8:f6:71:a4:e5:9c:db:
9d:1b:68:6f:31:d0:53:f3:8f:a3:48:6d:74:9b:06:66:a0:30:
fa:7c:89:79:b0:2f:0d:c5:19:00:6d:b5:67:90:c3:0a:3d:40:
8e:ea:9e:1d:26:c1:a8:fa:a4:50:60:c1:e5:d3:b4:c9:73:68:
e2:dc:76:ad:ed:4a:1a:0e:fe:ce:58:44:fc:f5:c2:38:c8:8e:
56:81:43:c3:c0:cf:3d:f4:65:2b:04:9f:2b:b7:9e:cf:ae:8b:
94:91:27:c9:78:53:e7:c6:3c:89:c7:ba:0f:f8:d9:9b:71:bd:
50:2c:59:a8:40:4e:02:97:88:95:ab:2a:6f:2f:ad:4e:ce:bb:
3d:9b:7a:bf:45:4b:e5:3a:49:cd:76:8b:b3:2a:a8:c3:93:70:
90:3e:13:51:50:d5:34:7a:9c:8c:b5:7c:4f:59:2f:e5:b8:49:
88:31:dd:d0:e1:cf:0d:bb:8f:48:4d:0f:f4:2f:89:5e:b9:5b:
c4:2e:e9:08:8b:01:7f:88:5b:a9:69:d5:b4:02:bb:20:16:0d:
63:bc:35:94:24:78:19:49:e9:bf:c0:68:17:f4:a1:c9:26:92:
60:70:16:c7:87:22:f9:29:0f:ad:ff:81:01:9c:c3:e3:2f:72:
9b:65:64:05
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ1aW55feqZz8vbbH3f4bHWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNDA0MjExNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzJhOTZhY2QzODJjYTZhODU2NjZhY2VkZWE2OTMzNjdlMDc2Y2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yJx71ltPdRi0GokO4ESbZ+5ShJ0
9pLO6ouKcVFg/9tYhMZ92DTCRJNJ4jJHXByoUzYi4pCtVNEReI11Y4ZM4FZf2sD+
vqmnGCFzOevE0k0CSaq5lSqjk7ldo5rWAZq/aSnYMHe1qV/8jBIFGsqpVMn7AXQa
D8YioUWogXGmZ+B8fbZDsVrcwTd6dG08/zM49Rk3ohq+J94mRgaDbvmXOnMNPZEB
F0+rBj9Bup6jtYskGZSN/J6eCLhw2UzNQGXRowcVHiAx+nT4wOr/d76g3wh6bxhI
pDQAh3tfDYO0IbczeCNqkPLkUfhL/VrEx2s9h5kPK3RsY+itQpNh564A2wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFLwqlqzTgspqhWZqzt6mkzZ+B2zQMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdkNxV3JOT0N5bXFGWm1yTzNxYVRObjRIYk5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALVoRAwQA
ud4eMAwDBAC55kEDBAC55kIwDQYJKoZIhvcNAQELBQADggEBACox2EnASNsYCJ6w
2PZxpOWc250baG8x0FPzj6NIbXSbBmagMPp8iXmwLw3FGQBttWeQwwo9QI7qnh0m
waj6pFBgweXTtMlzaOLcdq3tShoO/s5YRPz1wjjIjlaBQ8PAzz30ZSsEnyu3ns+u
i5SRJ8l4U+fGPInHug/42ZtxvVAsWahATgKXiJWrKm8vrU7Ouz2ber9FS+U6Sc12
i7MqqMOTcJA+E1FQ1TR6nIy1fE9ZL+W4SYgx3dDhzw27j0hND/QviV65W8Qu6QiL
AX+IW6lp1bQCuyAWDWO8NZQkeBlJ6b/AaBf0ockmkmBwFseHIvkpD63/gQGcw+Mv
cptlZAU=
-----END CERTIFICATE-----
Generated at Fri Apr 10 06:07:28 2026 by rpki-client