Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VeHeRdRz1N9Og-HWE_Y0vXMbeOw.roa
File: VeHeRdRz1N9Og-HWE_Y0vXMbeOw.roa (raw, json)
Hash identifier: jGjApBtJFo3dv0gZaqRw/tSAWdbHGTDk2YBJBKD0oyc=
Subject key identifier: 55:E1:DE:45:D4:73:D4:DF:4E:83:E1:D6:13:F6:34:BD:73:1B:78:EC
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A063633225A53F40B11549DD4EEAB95F51
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VeHeRdRz1N9Og-HWE_Y0vXMbeOw.roa
Signing time: Wed 02 Sep 2026 18:30:40 +0000
ROA not before: Wed 02 Sep 2026 18:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 194.143.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:63:32:25:a5:3f:40:b1:15:49:dd:4e:ea:b9:5f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 2 18:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55e1de45d473d4df4e83e1d613f634bd731b78ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:cd:ed:93:02:b5:c2:e4:b2:90:fc:7f:66:
01:ce:be:44:c1:3f:b3:16:21:59:39:4d:d7:e2:42:
39:72:39:57:13:69:00:53:0a:f6:12:ec:79:63:ec:
57:9f:be:48:ee:b3:5a:31:15:e6:46:7e:6a:41:fe:
3d:dd:79:65:aa:e9:42:2b:7f:1c:98:c2:75:3b:25:
85:c5:4c:3a:ce:de:d6:ba:e0:f9:11:df:0b:fc:09:
61:eb:c1:c5:b5:fa:92:3f:06:41:eb:8b:5b:45:9e:
c8:58:2d:c6:a9:3d:ff:fe:26:5c:d3:da:73:9e:92:
34:16:48:7d:bc:c3:f3:ce:15:17:b9:89:f0:90:72:
17:6e:59:1b:3d:c3:67:a5:37:77:67:ab:cc:43:e4:
63:b0:47:40:df:28:b2:34:57:32:e2:f1:2c:c5:5a:
a1:cd:c6:0c:49:a6:9a:c9:9b:c2:20:cc:98:0e:ff:
bc:eb:30:c2:e7:4e:44:16:13:e5:2f:59:32:3d:d2:
b3:64:21:4a:70:12:94:a5:64:63:55:5d:c6:16:a8:
7c:0c:db:5e:60:ab:37:72:a1:47:c5:da:22:03:c0:
de:af:25:72:57:a3:d8:df:79:25:51:e2:87:44:9e:
97:a6:99:37:36:8f:a7:8b:ed:34:98:48:db:38:5f:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E1:DE:45:D4:73:D4:DF:4E:83:E1:D6:13:F6:34:BD:73:1B:78:EC
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/VeHeRdRz1N9Og-HWE_Y0vXMbeOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
Signature Algorithm: sha256WithRSAEncryption
54:38:10:87:1d:d7:e5:fc:08:0f:e5:25:3b:82:ef:ca:86:93:
20:2d:bc:4b:35:44:a7:18:3e:0e:71:d7:75:9d:79:cc:b1:4a:
33:54:9f:10:ef:6c:1f:4d:21:6b:28:86:e8:10:35:16:d2:c9:
07:e6:93:a9:a2:96:90:b4:42:83:2f:5a:3d:fd:62:97:36:82:
18:51:57:90:53:83:d9:ae:be:9f:8e:e6:a2:16:95:af:3f:59:
22:29:4e:75:95:4d:f2:f7:15:22:04:f4:50:8a:b4:0f:48:eb:
a7:47:77:13:83:de:e5:54:1d:8c:d4:41:79:fb:62:f0:ad:dd:
da:da:0b:2b:f3:05:d4:63:b7:d9:89:9f:fa:7d:3a:4c:2d:65:
05:e4:b8:ed:47:c3:93:0d:39:e5:0d:10:2b:64:06:06:73:83:
84:3d:b3:e8:bb:51:6e:1b:5c:df:ea:0c:cd:41:5f:e3:21:fe:
d4:21:56:68:7d:bc:cb:dd:5b:bf:f8:91:1c:c3:b2:a2:1f:df:
e4:cd:70:23:a5:78:06:06:ef:7d:a0:3b:a2:7c:74:49:92:d3:
46:b7:f9:1a:f9:46:52:43:e8:10:0a:a2:3b:cb:02:b0:e9:98:
e3:05:c4:a7:b8:ca:aa:97:2f:43:26:de:59:79:7e:f6:f3:6d:
4b:89:36:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBjYzIlpT9AsRVJ3U7quV9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjBkNDZkMWQ4MDQ2YjRkNzRlNGQ4MTU4MThjOGUzNjU5
ZWRiZTkwHhcNMjYwOTAyMTgzMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWUxZGU0NWQ0NzNkNGRmNGU4M2UxZDYxM2Y2MzRiZDczMWI3OGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlLN7ZMCtcLkspD8f2YBzr5EwT+z
FiFZOU3X4kI5cjlXE2kAUwr2Eux5Y+xXn75I7rNaMRXmRn5qQf493XllqulCK38c
mMJ1OyWFxUw6zt7WuuD5Ed8L/Alh68HFtfqSPwZB64tbRZ7IWC3GqT3//iZc09pz
npI0Fkh9vMPzzhUXuYnwkHIXblkbPcNnpTd3Z6vMQ+RjsEdA3yiyNFcy4vEsxVqh
zcYMSaaayZvCIMyYDv+86zDC505EFhPlL1kyPdKzZCFKcBKUpWRjVV3GFqh8DNte
YKs3cqFHxdoiA8DeryVyV6PY33klUeKHRJ6Xppk3No+ni+00mEjbOF/z/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFXh3kXUc9TfToPh1hP2NL1zG3jsMB8GA1UdIwQY
MBaAFMBg1G0dgEa0105NgVgYyONlntvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvVmVIZVJkUnoxTjlPZy1IV0VfWTB2WE1iZU93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwo/ZMA0G
CSqGSIb3DQEBCwUAA4IBAQBUOBCHHdfl/AgP5SU7gu/KhpMgLbxLNUSnGD4Ocdd1
nXnMsUozVJ8Q72wfTSFrKIboEDUW0skH5pOpopaQtEKDL1o9/WKXNoIYUVeQU4PZ
rr6fjuaiFpWvP1kiKU51lU3y9xUiBPRQirQPSOunR3cTg97lVB2M1EF5+2Lwrd3a
2gsr8wXUY7fZiZ/6fTpMLWUF5LjtR8OTDTnlDRArZAYGc4OEPbPou1FuG1zf6gzN
QV/jIf7UIVZofbzL3Vu/+JEcw7KiH9/kzXAjpXgGBu99oDuifHRJktNGt/ka+UZS
Q+gQCqI7ywKw6ZjjBcSnuMqqly9DJt5ZeX72821LiTa6
-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:36 2026 by rpki-client