Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vbjucXqjNnyfhjhuVVFGwMoeWTg.roa
File: vbjucXqjNnyfhjhuVVFGwMoeWTg.roa (raw, json)
Hash identifier: tnlPU/q1yHQunj8YqcFkgwLwwmk301hsq54Usws1MM4=
Subject key identifier: BD:B8:EE:71:7A:A3:36:7C:9F:86:38:6E:55:51:46:C0:CA:1E:59:38
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0013075C437495F97AD626FB5D7F93F8D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vbjucXqjNnyfhjhuVVFGwMoeWTg.roa
Signing time: Fri 14 Aug 2026 16:52:28 +0000
ROA not before: Fri 14 Aug 2026 16:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215294
IP address blocks: 200.165.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:30:75:c4:37:49:5f:97:ad:62:6f:b5:d7:f9:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 14 16:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb8ee717aa3367c9f86386e555146c0ca1e5938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:d4:2b:3b:a0:dd:20:7a:aa:27:e0:c6:1b:
3d:b4:76:b8:d3:e6:ed:95:e1:87:c0:7a:99:37:25:
a3:fc:2f:5b:c0:ab:32:05:a3:98:bd:fd:76:79:45:
6e:11:ad:2d:8f:18:13:15:70:ce:e6:db:d7:82:92:
a5:a3:16:b7:84:76:5f:07:ab:9e:94:b9:80:54:36:
4b:ae:2b:63:7c:14:31:07:5a:0a:fd:05:8e:94:96:
57:2c:5c:46:1b:bb:07:50:37:e0:fc:b7:c0:26:a5:
0d:49:59:61:c2:01:1d:19:93:5b:a0:03:6d:81:6d:
8e:c5:8d:2e:f8:43:d8:17:26:97:11:0e:53:97:23:
af:c0:75:ea:35:fb:ec:78:c4:f0:89:9b:ce:a7:6a:
8f:fc:ff:ea:7e:a3:8f:88:aa:53:b8:63:bc:f0:45:
36:5c:e1:c1:b7:39:3c:66:20:c1:2c:70:1d:bf:b0:
a2:62:f3:2d:14:49:b7:23:9d:62:1f:f2:a0:fa:0c:
78:71:f6:44:c2:4e:5a:bb:ac:3d:70:86:c6:50:67:
98:35:51:ab:ca:fc:0f:1d:86:83:36:9e:d4:c8:89:
93:4f:02:43:99:49:4d:b9:ea:57:2b:f7:e0:59:fb:
1e:a3:6c:ec:26:fd:e5:a9:45:cb:f3:34:d0:c2:d5:
45:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:EE:71:7A:A3:36:7C:9F:86:38:6E:55:51:46:C0:CA:1E:59:38
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vbjucXqjNnyfhjhuVVFGwMoeWTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.165.20.0/22
Signature Algorithm: sha256WithRSAEncryption
88:f2:ad:4d:8f:58:d1:1e:a1:1c:cc:eb:6e:26:e7:eb:9b:b2:
5b:26:59:26:b2:b3:f6:e6:1f:36:36:b1:c1:9e:34:4d:07:4f:
85:02:81:f9:d0:3e:fa:2e:6b:24:06:02:f7:05:56:24:2a:d3:
d7:8f:a7:28:6c:ac:6d:fa:f8:59:84:fd:ed:f7:57:33:1f:29:
44:89:18:16:83:37:5a:e4:a7:e3:57:85:01:e9:63:59:af:78:
59:6b:5e:43:cb:7a:31:ac:bd:5c:42:6a:dd:37:81:dd:1f:cb:
20:79:9b:fd:94:7e:32:98:60:de:0c:e6:3d:01:ab:8f:9d:15:
a3:b8:cb:5b:20:2b:f4:48:99:45:1c:b2:c4:e8:71:5e:a3:01:
19:c7:f5:b2:4a:f8:ae:0c:af:58:dd:25:ef:e8:88:bb:9f:75:
f4:87:39:2d:77:a9:88:78:04:61:53:5f:f3:05:c2:79:4b:2e:
3a:c4:4b:0f:82:ec:bc:4a:62:75:c4:cd:ee:a5:68:b0:b3:4d:
d5:ac:bc:d4:f8:dc:89:9b:c1:8b:33:b8:1c:72:52:46:8d:ef:
f3:08:df:04:81:9d:76:8d:71:66:ef:10:72:db:53:4a:bb:35:
4b:55:37:fc:6b:b6:6f:25:77:99:00:0e:0a:4d:9d:b5:e0:32:
c6:2a:12:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaABMHXEN0lfl61ib7XX+T+NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz
MGNiNjMwHhcNMjYwODE0MTY1MjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGI4ZWU3MTdhYTMzNjdjOWY4NjM4NmU1NTUxNDZjMGNhMWU1OTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbXUKzug3SB6qifgxhs9tHa40+bt
leGHwHqZNyWj/C9bwKsyBaOYvf12eUVuEa0tjxgTFXDO5tvXgpKloxa3hHZfB6ue
lLmAVDZLritjfBQxB1oK/QWOlJZXLFxGG7sHUDfg/LfAJqUNSVlhwgEdGZNboANt
gW2OxY0u+EPYFyaXEQ5TlyOvwHXqNfvseMTwiZvOp2qP/P/qfqOPiKpTuGO88EU2
XOHBtzk8ZiDBLHAdv7CiYvMtFEm3I51iH/Kg+gx4cfZEwk5au6w9cIbGUGeYNVGr
yvwPHYaDNp7UyImTTwJDmUlNuepXK/fgWfseo2zsJv3lqUXL8zTQwtVFeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL247nF6ozZ8n4Y4blVRRsDKHlk4MB8GA1UdIwQY
MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt
YjRiOGRiMjBiMWZiLzEvdmJqdWNYcWpObnlmaGpodVZWRkd3TW9lV1RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi
LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyKUUMA0G
CSqGSIb3DQEBCwUAA4IBAQCI8q1Nj1jRHqEczOtuJufrm7JbJlkmsrP25h82NrHB
njRNB0+FAoH50D76LmskBgL3BVYkKtPXj6cobKxt+vhZhP3t91czHylEiRgWgzda
5KfjV4UB6WNZr3hZa15Dy3oxrL1cQmrdN4HdH8sgeZv9lH4ymGDeDOY9AauPnRWj
uMtbICv0SJlFHLLE6HFeowEZx/WySviuDK9Y3SXv6Ii7n3X0hzktd6mIeARhU1/z
BcJ5Sy46xEsPguy8SmJ1xM3upWiws03VrLzU+NyJm8GLM7gcclJGje/zCN8EgZ12
jXFm7xBy21NKuzVLVTf8a7ZvJXeZAA4KTZ214DLGKhLy
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:21:03 2026 by rpki-client