Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VsByBD7AU_65zgfin8hKpdebnYA.roa
File: VsByBD7AU_65zgfin8hKpdebnYA.roa (raw, json)
Hash identifier: SQiwA/OknKVduhwWC2byb5BfLghZo6LDgUnIZfJPzmk=
Subject key identifier: 56:C0:72:04:3E:C0:53:FE:B9:CE:07:E2:9F:C8:4A:A5:D7:9B:9D:80
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 01A1738F300E3C64495C5B276B07266FA997
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VsByBD7AU_65zgfin8hKpdebnYA.roa
Signing time: Sun 25 Oct 2026 14:55:26 +0000
ROA not before: Sun 25 Oct 2026 14:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50360
IP address blocks: 78.128.114.0/24 maxlen: 24
78.142.35.0/24 maxlen: 24
78.142.49.0/24 maxlen: 24
79.124.40.0/24 maxlen: 24
79.124.41.0/24 maxlen: 24
79.124.45.0/24 maxlen: 24
79.124.49.0/24 maxlen: 24
79.124.56.0/24 maxlen: 24
79.124.58.0/24 maxlen: 24
79.124.59.0/24 maxlen: 24
79.124.60.0/24 maxlen: 24
79.124.62.0/24 maxlen: 24
83.222.190.0/23 maxlen: 24
91.148.128.0/24 maxlen: 24
91.148.129.0/24 maxlen: 24
91.148.186.0/24 maxlen: 24
91.148.190.0/23 maxlen: 24
91.191.220.0/24 maxlen: 24
91.191.221.0/24 maxlen: 24
91.191.222.0/24 maxlen: 24
91.191.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:8f:30:0e:3c:64:49:5c:5b:27:6b:07:26:6f:a9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Oct 25 14:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c072043ec053feb9ce07e29fc84aa5d79b9d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:e2:a6:7d:fe:05:b9:47:ee:a5:1e:41:45:
ff:b2:fb:5f:23:bb:b9:a5:0c:73:c4:35:cb:8c:29:
9e:7b:95:68:ae:ed:64:d2:05:3f:bf:d7:05:08:d8:
54:63:97:90:46:b1:10:2f:f4:8c:c1:a8:30:a3:3d:
c7:a3:cb:3c:6d:5e:c6:92:fd:bb:71:4b:ba:70:27:
cf:d1:6a:db:97:24:1f:af:f3:8b:ff:92:9b:a0:06:
e3:c5:e9:3f:77:f5:0c:d4:66:35:16:8d:48:0c:9d:
eb:a7:2a:32:d0:53:6d:b7:ea:76:5c:ac:0d:e9:55:
90:6e:35:1c:87:14:b0:0d:23:fb:1b:bb:79:44:54:
f2:7a:1f:64:69:98:5d:d0:d1:4c:ea:d3:37:4d:4b:
ec:e8:dd:d3:7e:a2:dc:b1:56:9a:f2:9a:3c:56:12:
eb:40:6c:58:e3:cd:1a:23:db:5c:b6:43:d9:88:14:
bf:84:d2:21:88:cc:44:ba:d2:e3:f4:57:9f:13:64:
32:5a:78:a9:90:d0:f6:9e:77:b8:7d:bf:d2:b8:89:
c7:94:82:2d:01:e0:f5:5a:38:05:15:d4:7e:e5:c9:
c7:ed:da:45:1b:8f:35:81:93:d1:28:9e:a6:78:2d:
6f:01:ce:45:82:d7:7b:f5:bb:20:95:5d:a1:aa:1a:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:72:04:3E:C0:53:FE:B9:CE:07:E2:9F:C8:4A:A5:D7:9B:9D:80
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/VsByBD7AU_65zgfin8hKpdebnYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.128.114.0/24
78.142.35.0/24
78.142.49.0/24
79.124.40.0/23
79.124.45.0/24
79.124.49.0/24
79.124.56.0/24
79.124.58.0-79.124.60.255
79.124.62.0/24
83.222.190.0/23
91.148.128.0/23
91.148.186.0/24
91.148.190.0/23
91.191.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:78:ac:9e:d8:3d:60:d7:14:fb:88:8e:31:5e:e8:2e:77:03:
44:fb:f4:88:b3:02:c2:b1:ec:c2:af:c7:e7:52:4a:0d:f1:a4:
8a:ea:2b:54:7f:04:70:de:4a:19:1a:1f:9f:b2:8f:99:70:40:
2f:65:51:4d:04:21:e1:c4:f7:67:98:1a:da:5f:0f:5b:53:97:
68:ad:c7:1b:41:f5:37:6d:b8:27:3b:83:54:a3:95:dc:18:e6:
5e:a1:db:0f:79:c0:3b:85:f2:e9:50:9b:f3:8a:4e:13:e4:62:
e4:41:b2:7e:1f:02:34:c7:43:95:d6:4b:42:48:ab:eb:74:8a:
45:09:82:b0:d4:b8:07:38:bd:e7:bb:50:47:3c:71:bb:95:67:
4e:bb:56:4b:93:96:c4:02:8c:16:09:79:12:c7:00:16:d9:c4:
3d:b6:8e:bc:b3:f3:18:18:8b:2e:66:dc:54:72:e2:84:a1:87:
34:b4:ef:ea:40:18:f1:87:01:fb:d1:f0:0a:18:5e:20:f1:7a:
dc:89:85:9b:15:76:e7:00:0a:04:f3:12:73:7f:a0:e6:15:90:
55:9b:ff:18:9f:48:c3:3c:70:d3:b0:83:10:66:e3:11:48:ca:
fa:23:0a:97:9e:5e:d5:2d:5e:aa:52:cd:29:32:44:42:24:86:
9d:f1:1d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:09 2026 by rpki-client