Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/VKqs21MQvvW6f8bRMvaO1Rl7mFk.roa
File: VKqs21MQvvW6f8bRMvaO1Rl7mFk.roa (raw, json)
Hash identifier: GzpicyrNztpFqW+maP0D/wwDJTjeIzWdY2di348fsQA=
Subject key identifier: 54:AA:AC:DB:53:10:BE:F5:BA:7F:C6:D1:32:F6:8E:D5:19:7B:98:59
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019C048C6DD2E746BBF9802A623FA416061D
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/VKqs21MQvvW6f8bRMvaO1Rl7mFk.roa
Signing time: Wed 28 Jan 2026 12:20:37 +0000
ROA not before: Wed 28 Jan 2026 12:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35039
IP address blocks: 139.66.0.0/23 maxlen: 23
139.66.2.0/23 maxlen: 23
139.66.4.0/23 maxlen: 23
139.66.6.0/23 maxlen: 23
139.66.8.0/23 maxlen: 23
139.66.10.0/23 maxlen: 23
139.66.12.0/23 maxlen: 23
139.66.14.0/23 maxlen: 23
139.66.16.0/23 maxlen: 23
139.66.18.0/23 maxlen: 23
139.66.26.0/23 maxlen: 23
139.66.28.0/23 maxlen: 23
139.66.30.0/23 maxlen: 23
139.66.32.0/23 maxlen: 23
139.66.34.0/23 maxlen: 23
139.66.36.0/23 maxlen: 23
139.66.40.0/23 maxlen: 23
139.66.122.0/23 maxlen: 23
139.66.124.0/23 maxlen: 23
139.66.126.0/23 maxlen: 23
155.56.128.0/23 maxlen: 23
155.56.210.0/24 maxlen: 24
155.56.227.0/24 maxlen: 24
155.56.228.0/23 maxlen: 23
155.56.248.0/24 maxlen: 24
217.77.240.0/22 maxlen: 22
217.77.244.0/22 maxlen: 22
217.77.252.0/24 maxlen: 24
217.77.253.0/24 maxlen: 24
217.77.254.0/24 maxlen: 24
217.77.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Feb 2026 19:57:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:04:8c:6d:d2:e7:46:bb:f9:80:2a:62:3f:a4:16:06:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Jan 28 12:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54aaacdb5310bef5ba7fc6d132f68ed5197b9859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:37:81:ac:fe:e9:ff:b9:21:67:31:8f:07:
02:61:28:c3:12:a5:22:04:66:c0:41:11:3d:db:d4:
27:7b:47:9b:dd:a2:11:a4:f6:5e:63:8d:30:dd:99:
fb:6b:9a:78:6c:00:4e:f3:22:63:f5:24:19:74:cb:
3d:7b:e5:7a:5f:17:85:ef:23:08:e4:94:13:e2:39:
9b:fc:8e:0e:ed:d0:5f:67:6c:06:39:0b:93:58:36:
63:dd:83:b2:04:8f:b6:d1:09:6d:5b:5d:85:11:15:
91:9a:fe:10:37:9a:3b:67:6f:1e:84:75:2b:81:88:
8e:3a:90:c7:16:5b:b9:4d:1d:c7:10:79:d6:69:35:
e6:b1:b6:8b:68:1b:ba:5e:4d:ab:cb:a5:3c:32:10:
2a:76:23:c1:e5:63:ae:f8:9d:9e:ae:3c:8d:50:15:
d4:1b:57:5b:7e:11:39:19:13:3c:1c:35:fb:53:76:
98:10:2a:42:91:cc:06:ee:98:23:36:e3:ff:58:4e:
0f:82:51:d6:26:8b:66:13:2d:43:92:4a:57:5a:40:
ed:2e:b0:8c:8b:9d:21:27:08:34:9d:fa:91:14:65:
2f:86:af:d9:ad:9a:fd:4e:42:bd:42:9c:2c:1a:b0:
35:d9:3f:a5:22:48:f1:1c:88:b3:83:33:a1:71:a5:
10:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AA:AC:DB:53:10:BE:F5:BA:7F:C6:D1:32:F6:8E:D5:19:7B:98:59
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/VKqs21MQvvW6f8bRMvaO1Rl7mFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.66.0.0-139.66.19.255
139.66.26.0-139.66.37.255
139.66.40.0/23
139.66.122.0-139.66.127.255
155.56.128.0/23
155.56.210.0/24
155.56.227.0-155.56.229.255
155.56.248.0/24
217.77.240.0/21
217.77.252.0/22
Signature Algorithm: sha256WithRSAEncryption
66:57:c2:f9:77:6a:31:cf:75:dc:37:8c:d2:de:02:f0:c6:ef:
47:de:52:f9:5c:15:07:80:d6:a4:25:1a:1c:ab:4c:a7:8a:11:
0d:7e:bf:f2:66:0c:4b:38:9d:9f:22:c1:d9:31:43:e2:32:43:
1b:7e:78:39:44:78:fa:81:0f:37:26:e7:c2:42:d5:83:7e:8a:
0f:69:0d:58:1f:62:16:d6:3d:8c:45:d5:9a:78:86:63:68:30:
c2:62:00:18:00:14:da:d6:33:f7:55:7c:2e:6e:86:37:b5:21:
d5:fc:82:43:b0:8c:f8:65:03:65:5e:2b:9f:db:ea:ad:a0:2a:
52:2d:a0:ae:64:df:aa:cf:d8:54:65:42:42:5b:cb:51:c0:58:
7c:18:31:e7:77:6d:4b:64:44:67:52:40:23:89:d5:23:2e:c0:
31:b1:3c:76:67:26:7c:c9:81:38:4e:5d:e6:84:e6:f5:53:ea:
91:98:48:18:89:da:57:ed:e8:4c:c8:b7:8a:eb:3b:61:fd:80:
6f:5b:0f:1e:cd:3e:de:52:26:69:48:ae:e0:c6:10:68:e4:c4:
c0:6a:cf:d6:c4:b6:b8:4e:26:da:7f:ec:31:54:e7:90:f2:d7:
7f:ff:e6:f7:ef:42:47:d8:a9:68:d1:bd:c2:21:7a:50:12:19:
44:06:e5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:41:20 2026 by rpki-client