Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/vpcXfvOVUYvgdsD39Q3TEMF747w.roa
File: vpcXfvOVUYvgdsD39Q3TEMF747w.roa (raw, json)
Hash identifier: F5uTTVHy8rE8NLX3W81LLNFl51OsEFvrkrC45V6z1JI=
Subject key identifier: BE:97:17:7E:F3:95:51:8B:E0:76:C0:F7:F5:0D:D3:10:C1:7B:E3:BC
Certificate issuer: /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial: 01981303CB2E2659DB489F29421BBDA7D476
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/vpcXfvOVUYvgdsD39Q3TEMF747w.roa
Signing time: Wed 16 Jul 2025 11:34:32 +0000
ROA not before: Wed 16 Jul 2025 11:34:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39501
IP address blocks: 45.140.28.0/22 maxlen: 22
85.204.30.0/23 maxlen: 23
85.204.76.0/23 maxlen: 23
85.204.104.0/23 maxlen: 23
86.104.232.0/21 maxlen: 21
89.32.196.0/23 maxlen: 23
89.33.18.0/23 maxlen: 23
89.33.204.0/23 maxlen: 23
89.33.234.0/23 maxlen: 23
89.33.240.0/23 maxlen: 23
89.34.20.0/23 maxlen: 23
89.34.88.0/23 maxlen: 23
89.34.94.0/23 maxlen: 23
89.34.168.0/23 maxlen: 23
89.34.176.0/23 maxlen: 23
89.34.200.0/23 maxlen: 23
89.35.58.0/23 maxlen: 23
89.35.132.0/23 maxlen: 23
89.35.156.0/23 maxlen: 23
89.35.176.0/23 maxlen: 23
89.35.194.0/23 maxlen: 23
89.36.16.0/23 maxlen: 23
89.36.194.0/23 maxlen: 23
89.36.226.0/23 maxlen: 23
89.36.252.0/23 maxlen: 23
89.37.30.0/23 maxlen: 23
89.37.42.0/23 maxlen: 23
89.37.102.0/23 maxlen: 23
89.37.198.0/23 maxlen: 23
89.37.218.0/23 maxlen: 23
89.38.24.0/23 maxlen: 23
89.38.102.0/23 maxlen: 23
89.38.242.0/23 maxlen: 23
89.39.186.0/23 maxlen: 23
89.40.38.0/23 maxlen: 23
89.40.78.0/23 maxlen: 23
89.40.90.0/23 maxlen: 23
89.40.106.0/23 maxlen: 23
89.40.110.0/23 maxlen: 23
89.40.128.0/23 maxlen: 23
89.41.8.0/21 maxlen: 21
89.41.16.0/21 maxlen: 22
89.41.16.0/22 maxlen: 23
89.41.20.0/22 maxlen: 23
89.41.32.0/23 maxlen: 23
89.41.58.0/23 maxlen: 23
89.41.240.0/21 maxlen: 21
89.42.32.0/23 maxlen: 23
89.42.56.0/23 maxlen: 23
89.42.68.0/23 maxlen: 23
89.42.150.0/23 maxlen: 23
89.42.228.0/23 maxlen: 23
89.43.36.0/23 maxlen: 23
89.43.70.0/23 maxlen: 23
89.43.88.0/21 maxlen: 21
89.43.96.0/21 maxlen: 21
89.43.182.0/23 maxlen: 23
89.43.188.0/23 maxlen: 23
89.43.204.0/23 maxlen: 23
89.44.146.0/23 maxlen: 23
89.44.190.0/23 maxlen: 23
89.44.202.0/23 maxlen: 23
89.45.80.0/23 maxlen: 23
89.45.230.0/23 maxlen: 23
89.46.44.0/23 maxlen: 23
89.46.60.0/23 maxlen: 23
89.46.94.0/23 maxlen: 23
89.165.0.0/17 maxlen: 17
89.165.0.0/18 maxlen: 18
89.165.8.0/21 maxlen: 21
89.165.16.0/21 maxlen: 21
89.165.56.0/21 maxlen: 21
89.165.64.0/18 maxlen: 18
89.165.80.0/21 maxlen: 21
89.165.105.0/24 maxlen: 24
94.176.32.0/21 maxlen: 21
94.177.72.0/21 maxlen: 21
185.46.0.0/22 maxlen: 22
188.158.0.0/16 maxlen: 16
188.158.0.0/18 maxlen: 18
188.158.0.0/19 maxlen: 19
188.158.16.0/20 maxlen: 20
188.158.32.0/19 maxlen: 19
188.158.32.0/20 maxlen: 20
188.158.64.0/19 maxlen: 19
188.158.96.0/19 maxlen: 19
188.158.96.0/20 maxlen: 20
188.158.96.0/21 maxlen: 21
188.158.128.0/18 maxlen: 18
188.158.128.0/19 maxlen: 19
188.158.160.0/19 maxlen: 19
188.158.160.0/20 maxlen: 20
188.158.160.0/21 maxlen: 21
188.158.192.0/19 maxlen: 19
188.158.224.0/19 maxlen: 19
188.159.0.0/18 maxlen: 18
188.159.0.0/19 maxlen: 19
188.159.32.0/19 maxlen: 19
188.159.64.0/19 maxlen: 19
188.159.96.0/19 maxlen: 19
188.159.128.0/18 maxlen: 18
188.159.128.0/19 maxlen: 19
188.159.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:03:cb:2e:26:59:db:48:9f:29:42:1b:bd:a7:d4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Validity
Not Before: Jul 16 11:34:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be97177ef395518be076c0f7f50dd310c17be3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:7d:5f:89:86:c3:27:44:ae:f2:3c:f4:65:
a9:f8:55:15:20:5f:65:3e:ab:c1:5a:83:4e:76:ba:
3d:d8:b2:fc:ee:99:6f:33:f1:d5:80:4f:d0:1b:65:
0c:69:22:bb:f2:19:5e:c2:42:49:15:ff:ad:b2:70:
cb:79:1d:f4:36:18:82:ee:f3:38:90:57:02:dd:f7:
90:99:fb:cf:c3:11:07:d3:de:bd:f7:d6:be:37:52:
f5:b4:57:56:b9:08:18:06:24:a1:d5:05:af:af:49:
40:84:d6:ec:91:0a:5a:f5:6e:0f:2c:59:e9:60:e5:
fa:c3:33:d8:75:ba:af:6b:1c:23:8c:ba:84:c9:a0:
c5:20:15:30:1c:70:35:72:95:f6:30:a5:51:5b:a0:
a0:d8:32:37:6d:8d:2e:bb:5c:68:30:8e:79:43:64:
dc:0e:8a:89:fa:a6:0f:c1:a2:44:64:4a:69:cb:9f:
65:8f:c1:90:3f:6f:7e:b1:47:7f:20:c9:53:1c:90:
03:0a:2c:91:22:d6:f2:2a:36:53:a3:44:03:fa:21:
88:5e:18:1f:29:46:0d:bb:cf:5b:a3:5c:83:d6:96:
bd:cc:92:04:86:ca:39:81:ae:9a:71:21:57:2a:8f:
c5:92:7c:22:aa:01:24:87:eb:38:7a:00:3c:ac:ec:
02:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:17:7E:F3:95:51:8B:E0:76:C0:F7:F5:0D:D3:10:C1:7B:E3:BC
X509v3 Authority Key Identifier:
keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/vpcXfvOVUYvgdsD39Q3TEMF747w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.28.0/22
85.204.30.0/23
85.204.76.0/23
85.204.104.0/23
86.104.232.0/21
89.32.196.0/23
89.33.18.0/23
89.33.204.0/23
89.33.234.0/23
89.33.240.0/23
89.34.20.0/23
89.34.88.0/23
89.34.94.0/23
89.34.168.0/23
89.34.176.0/23
89.34.200.0/23
89.35.58.0/23
89.35.132.0/23
89.35.156.0/23
89.35.176.0/23
89.35.194.0/23
89.36.16.0/23
89.36.194.0/23
89.36.226.0/23
89.36.252.0/23
89.37.30.0/23
89.37.42.0/23
89.37.102.0/23
89.37.198.0/23
89.37.218.0/23
89.38.24.0/23
89.38.102.0/23
89.38.242.0/23
89.39.186.0/23
89.40.38.0/23
89.40.78.0/23
89.40.90.0/23
89.40.106.0/23
89.40.110.0/23
89.40.128.0/23
89.41.8.0-89.41.23.255
89.41.32.0/23
89.41.58.0/23
89.41.240.0/21
89.42.32.0/23
89.42.56.0/23
89.42.68.0/23
89.42.150.0/23
89.42.228.0/23
89.43.36.0/23
89.43.70.0/23
89.43.88.0-89.43.103.255
89.43.182.0/23
89.43.188.0/23
89.43.204.0/23
89.44.146.0/23
89.44.190.0/23
89.44.202.0/23
89.45.80.0/23
89.45.230.0/23
89.46.44.0/23
89.46.60.0/23
89.46.94.0/23
89.165.0.0/17
94.176.32.0/21
94.177.72.0/21
185.46.0.0/22
188.158.0.0-188.159.223.255
Signature Algorithm: sha256WithRSAEncryption
2c:c5:c1:a3:85:cc:63:41:bf:aa:17:2f:ec:82:40:86:f2:61:
88:64:a4:60:13:60:22:d2:48:eb:6e:d4:d8:ed:5e:29:24:9f:
a7:44:01:6d:05:a7:6b:14:ec:d8:a7:58:24:88:68:44:25:04:
db:0f:91:78:db:31:c1:60:91:90:07:13:7b:4a:31:ec:92:cf:
62:d1:f0:5c:59:5e:e3:19:19:cb:4f:ac:fc:e7:fb:15:d1:ab:
e2:fd:91:cb:b9:41:60:69:71:68:e2:d7:f6:25:3a:e5:27:51:
f0:a3:d0:19:b8:97:25:3f:5e:ef:cc:e9:d4:ca:c9:1d:d0:02:
8f:91:45:2a:fb:4d:f0:33:b9:cb:f6:3e:94:e6:ab:8a:c9:da:
37:fc:51:94:4f:07:f4:d4:f1:2a:5f:92:66:19:fa:f5:3d:a8:
29:2c:a8:7c:bf:fc:a0:35:69:fa:5e:4e:08:3e:87:46:2e:3e:
a5:62:01:ef:c4:8e:18:3c:62:eb:68:c7:2f:5b:78:4a:8d:d9:
0a:82:08:35:9b:88:de:5a:31:49:f7:90:b7:44:b2:f5:2a:3c:
2c:7b:17:e2:c0:4f:c6:9d:2e:61:1b:32:5e:db:af:b1:c7:4d:
81:03:49:ca:9f:e4:48:67:bb:93:96:4c:bf:5e:82:ed:d9:50:
d4:6e:57:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:59:52 2025 by rpki-client