Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vTYc8FJcq5g0YrvydIYvl9xfUak.roa
File: vTYc8FJcq5g0YrvydIYvl9xfUak.roa (raw, json)
Hash identifier: qY4jCT/sv5CXjV7KbsCY+gWvHXz4unW275+LwLU/2wQ=
Subject key identifier: BD:36:1C:F0:52:5C:AB:98:34:62:BB:F2:74:86:2F:97:DC:5F:51:A9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019F94DE472C20AE3A8330E6406165F0D0DE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vTYc8FJcq5g0YrvydIYvl9xfUak.roa
Signing time: Fri 24 Jul 2026 16:03:42 +0000
ROA not before: Fri 24 Jul 2026 16:03:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
146.19.125.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
194.242.96.0/24 maxlen: 24
194.242.98.0/24 maxlen: 24
194.242.99.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
2a01:7120::/32 maxlen: 32
2a01:7120:7::/48 maxlen: 48
2a07:9200::/29 maxlen: 29
2a11:2a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 05:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:de:47:2c:20:ae:3a:83:30:e6:40:61:65:f0:d0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 24 16:03:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd361cf0525cab983462bbf274862f97dc5f51a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1a:9b:56:fd:99:6e:01:47:6a:c4:34:65:0e:
51:1a:1c:5d:a4:20:ad:b3:f4:6b:a6:16:38:e7:3b:
28:57:19:fd:35:7c:1e:07:e8:f6:21:4d:a0:22:14:
42:7d:a7:82:ea:20:63:33:64:29:a4:68:6b:1b:16:
9b:9a:58:9d:ff:5f:b7:a1:64:bd:87:8d:c8:17:26:
4b:0c:39:0d:1d:a4:61:bc:77:fd:44:87:4c:17:e2:
72:b1:ef:31:23:4b:1a:67:fe:f2:f2:d7:78:f3:0e:
49:6b:fe:2c:b5:28:f4:31:69:93:3f:b1:e1:75:a9:
e0:5c:c5:53:38:d5:76:8f:03:e4:bc:57:35:14:99:
d7:ba:91:a3:42:82:b0:3a:d0:5b:f1:4e:9e:40:0c:
91:04:c7:ce:7f:52:cf:b4:33:fb:94:e6:f4:82:9b:
1a:9d:0a:11:2c:dc:16:e2:1e:0d:c1:d5:2e:df:ba:
e0:14:73:b5:6f:52:2c:23:08:a5:aa:d6:97:73:dc:
f1:d4:bb:16:67:c3:cf:fe:25:50:a0:f0:25:e3:48:
b5:bd:4b:8b:3e:54:0e:3b:7c:e9:1a:cf:4d:fa:d1:
a4:65:2d:03:4e:c7:e0:16:ed:ee:62:e6:22:33:e5:
15:3b:65:e4:30:d6:43:10:a6:24:f0:06:ae:f0:b3:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:36:1C:F0:52:5C:AB:98:34:62:BB:F2:74:86:2F:97:DC:5F:51:A9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vTYc8FJcq5g0YrvydIYvl9xfUak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
45.9.29.0/24
45.13.189.0-45.13.190.255
45.94.171.0/24
45.132.182.0/23
146.19.125.0/24
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/24
194.242.98.0/23
195.177.92.0/24
195.177.94.0/23
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a11:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
24:b1:0c:0b:74:6a:ad:aa:3c:39:15:19:5a:f9:30:48:f4:8d:
58:62:7d:96:97:d0:e8:21:79:1e:c1:e9:04:2d:4c:7c:c2:1d:
81:93:6b:11:5c:8f:f9:20:4b:fd:36:fc:5b:9a:61:64:74:ff:
c5:d1:81:df:93:16:a0:de:57:d3:21:14:a3:73:47:b6:82:4d:
27:42:1f:36:76:a6:7d:79:c9:d3:a6:51:61:0a:51:17:50:42:
f3:bb:c4:b3:b6:b9:23:f2:88:4e:44:c9:13:58:81:a7:4f:bf:
ac:1e:10:cc:b1:58:5d:1b:ce:5a:dc:65:37:5b:fb:17:d2:0b:
d0:fa:a9:2a:3a:1a:1a:99:3a:dd:f5:14:76:dc:b4:97:0f:6e:
45:2e:a7:c2:a2:65:47:ce:cd:b6:4d:42:f8:e2:74:45:a3:a3:
e9:bc:42:7c:d2:d1:85:8c:b4:eb:90:f5:2d:73:4c:fa:0c:af:
fa:e4:c6:2e:b5:aa:06:bf:d7:bd:69:b9:af:24:e7:e8:ed:22:
d7:8b:b0:20:b0:70:97:1b:ed:e8:aa:2e:b9:95:fc:fa:73:b0:
b7:d3:a1:ae:d0:7a:b3:6f:e5:e6:f1:a5:b5:f6:f9:34:d7:70:
d5:0f:6a:90:8e:7b:3a:dc:b6:f0:f6:fb:a4:1f:db:61:d5:16:
f0:47:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 14:43:50 2026 by rpki-client