Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/VSmC_QJINT3znATBNn5vOuC0Ve8.roa
File: VSmC_QJINT3znATBNn5vOuC0Ve8.roa (raw, json)
Hash identifier: EvfOUavYU8lJOU+waBxeqpzj0kPPNe6NKdaR+oEW2EQ=
Subject key identifier: 55:29:82:FD:02:48:35:3D:F3:9C:04:C1:36:7E:6F:3A:E0:B4:55:EF
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019CB961E4BBCC85FC63710D28F557050BD9
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/VSmC_QJINT3znATBNn5vOuC0Ve8.roa
Signing time: Wed 04 Mar 2026 15:05:26 +0000
ROA not before: Wed 04 Mar 2026 15:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 110.172.189.0/24 maxlen: 24
114.69.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:61:e4:bb:cc:85:fc:63:71:0d:28:f5:57:05:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Mar 4 15:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=552982fd0248353df39c04c1367e6f3ae0b455ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cb:cb:43:f1:ab:aa:9c:3b:8c:37:0d:04:e5:
1e:6f:c1:b2:12:ac:70:8a:85:ea:fd:5c:f1:34:27:
c0:95:64:a9:83:df:34:e7:2b:a5:b2:43:02:57:bf:
78:13:83:88:02:42:28:e9:71:6a:e9:0b:52:ae:4a:
a8:19:e1:73:22:50:41:94:8f:08:f7:bb:63:b5:39:
49:ea:30:1b:d4:43:7c:bc:10:9a:48:84:9b:bf:dc:
4a:43:61:59:9a:33:c7:77:63:89:0d:4d:10:86:24:
f6:30:3a:84:06:a6:3d:f9:ae:a1:f9:0b:6a:75:f8:
43:92:8e:2d:4d:88:39:ad:22:13:f0:cd:ac:5b:c3:
5d:d4:3b:c9:ab:71:da:90:39:5d:a6:f0:0e:ca:ad:
e7:f6:b1:cc:b5:d3:10:4a:7c:4f:55:14:58:5b:02:
56:f3:8d:c1:eb:fc:72:20:bc:27:8a:44:01:54:6e:
dc:e6:5f:19:cd:97:a3:7a:54:7f:c3:32:92:83:2b:
8f:be:95:bc:c1:01:35:2d:16:79:94:d2:d9:df:32:
b8:f4:b1:c0:5f:de:b5:34:1f:02:a6:ed:10:49:1a:
13:be:a4:e8:d1:c6:7b:bf:61:6a:e3:a5:16:cb:50:
b7:32:3b:71:a4:0f:04:93:e8:55:b0:dd:a8:6a:a9:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:29:82:FD:02:48:35:3D:F3:9C:04:C1:36:7E:6F:3A:E0:B4:55:EF
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/VSmC_QJINT3znATBNn5vOuC0Ve8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.172.189.0/24
114.69.247.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b8:a9:8d:21:03:d8:3b:5e:43:ba:cb:d9:86:c4:66:fe:6f:
fd:75:f6:14:9c:d0:b3:76:73:d8:ea:56:55:7b:13:a5:b0:65:
2d:da:90:be:f2:e7:a4:5d:5f:39:1d:8f:85:db:96:dc:5d:f7:
9c:6a:76:e6:25:51:c4:d1:76:16:86:ad:51:2f:ec:52:d8:93:
82:40:9e:b3:34:c8:4c:5e:e4:e5:1a:dc:e5:91:15:ff:92:6a:
f6:c6:1e:63:11:ed:39:66:11:eb:79:7c:39:77:66:24:05:0b:
26:7e:a0:26:1a:fe:ff:b0:de:fa:65:49:04:ab:bd:b2:c6:4d:
82:be:89:eb:bb:76:bb:29:98:88:8e:b1:68:78:bb:e7:4a:70:
0f:4a:bd:35:34:00:1b:bb:bd:d3:34:5e:67:01:ec:e7:db:9e:
b4:7a:54:f9:2b:da:34:ce:85:b6:4d:ac:19:ed:fc:59:9d:67:
43:4b:fd:1a:a6:c7:df:83:ac:42:8a:76:09:ba:9b:49:d1:4c:
f5:82:21:d2:5e:1c:6e:a8:d5:14:b0:f5:1d:7f:51:e1:bf:c8:
12:10:ec:bf:6b:a5:52:d5:3c:95:6a:f7:b7:aa:52:8c:f0:b6:
dd:45:ec:b0:29:1e:52:ef:41:69:e1:73:51:2e:47:20:a5:6a:
3a:9e:74:6e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZy5YeS7zIX8Y3ENKPVXBQvZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx
ZWUyZDMwHhcNMjYwMzA0MTUwNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTI5ODJmZDAyNDgzNTNkZjM5YzA0YzEzNjdlNmYzYWUwYjQ1NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMvLQ/Grqpw7jDcNBOUeb8GyEqxw
ioXq/VzxNCfAlWSpg9805yulskMCV794E4OIAkIo6XFq6QtSrkqoGeFzIlBBlI8I
97tjtTlJ6jAb1EN8vBCaSISbv9xKQ2FZmjPHd2OJDU0QhiT2MDqEBqY9+a6h+Qtq
dfhDko4tTYg5rSIT8M2sW8Nd1DvJq3HakDldpvAOyq3n9rHMtdMQSnxPVRRYWwJW
843B6/xyILwnikQBVG7c5l8ZzZejelR/wzKSgyuPvpW8wQE1LRZ5lNLZ3zK49LHA
X961NB8Cpu0QSRoTvqTo0cZ7v2Fq46UWy1C3MjtxpA8Ek+hVsN2oaql56QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFUpgv0CSDU985wEwTZ+bzrgtFXvMB8GA1UdIwQY
MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt
NTFmNWZmODFjMTE3LzEvVlNtQ19RSklOVDN6bkFUQk5uNXZPdUMwVmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3
LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbqy9AwQA
ckX3MA0GCSqGSIb3DQEBCwUAA4IBAQASuKmNIQPYO15DusvZhsRm/m/9dfYUnNCz
dnPY6lZVexOlsGUt2pC+8uekXV85HY+F25bcXfecanbmJVHE0XYWhq1RL+xS2JOC
QJ6zNMhMXuTlGtzlkRX/kmr2xh5jEe05ZhHreXw5d2YkBQsmfqAmGv7/sN76ZUkE
q72yxk2Cvonru3a7KZiIjrFoeLvnSnAPSr01NAAbu73TNF5nAezn2560elT5K9o0
zoW2TawZ7fxZnWdDS/0apsffg6xCinYJuptJ0Uz1giHSXhxuqNUUsPUdf1Hhv8gS
EOy/a6VS1TyVave3qlKM8LbdReywKR5S70Fp4XNRLkcgpWo6nnRu
-----END CERTIFICATE-----
Generated at Thu Mar 5 09:30:28 2026 by rpki-client