Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa
File: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (raw, json)
Hash identifier: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=
Subject key identifier: BD:CC:BB:58:2F:09:13:3F:46:1F:6C:2B:23:6C:52:44:61:4E:43:C3
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 0197C0037A6B2B0C203AE1F10909BFE3FE2E
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa
Signing time: Mon 30 Jun 2025 08:45:42 +0000
ROA not before: Mon 30 Jun 2025 08:45:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202755
IP address blocks: 185.155.172.0/24 maxlen: 24
185.155.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:03:7a:6b:2b:0c:20:3a:e1:f1:09:09:bf:e3:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jun 30 08:45:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bdccbb582f09133f461f6c2b236c5244614e43c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:31:23:72:bf:9f:05:6e:83:d5:01:ee:e5:df:
1f:44:0c:a9:23:4c:9e:7a:84:d3:fb:fa:d2:18:e1:
0f:cc:20:9f:8c:71:e2:77:20:d2:65:e9:3a:3e:0f:
92:60:fa:4e:f9:e3:ed:ce:ef:bd:27:f9:56:74:ed:
1b:e4:72:80:ee:d8:95:9a:c7:98:80:e8:d8:9f:c8:
3d:9b:48:1e:4a:b9:cb:27:70:24:18:5b:6f:36:c2:
73:dc:9e:70:6e:e7:be:a2:fa:21:1c:63:cb:d3:d9:
ea:ee:e7:92:06:96:28:3a:15:09:a2:48:4a:a2:bd:
3f:a8:a2:a7:8d:d2:ad:90:99:18:5b:b8:86:5c:eb:
bd:ac:c5:15:8f:5e:bc:86:30:83:69:61:a0:4f:a3:
cd:64:5e:e9:dd:f6:8c:aa:d7:fb:16:af:62:13:88:
90:da:b8:4f:04:8e:77:cc:23:ae:e8:06:0b:22:62:
42:01:be:90:24:4b:8a:8b:f8:5f:08:86:f4:57:33:
a8:5f:82:4a:e5:29:54:3c:6f:c6:50:8d:6f:73:f4:
08:36:ae:b7:f3:c9:25:13:a0:85:4d:a1:51:c9:11:
79:ac:87:60:33:05:a6:1f:fb:bd:a5:a5:e5:cb:da:
e2:5f:5b:51:bc:66:4c:d0:5b:5d:e3:fb:4b:ac:bb:
4b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CC:BB:58:2F:09:13:3F:46:1F:6C:2B:23:6C:52:44:61:4E:43:C3
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.172.0/24
185.155.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:db:c1:d0:51:9b:84:45:32:d3:37:66:07:86:e4:2d:1b:00:
2c:6b:12:d8:aa:98:eb:20:e8:e8:8c:b8:1b:47:78:78:b6:07:
a7:b0:22:db:9b:3b:15:47:c3:8e:54:ea:98:d1:64:05:8d:b2:
c4:9c:22:62:a8:ba:6a:34:ae:27:a9:3c:5e:a9:7a:3a:f1:3b:
ea:97:5e:51:89:0e:c3:26:1b:59:ca:52:bd:39:90:da:d7:30:
26:fe:08:58:a5:ba:47:d1:07:96:ab:ae:47:bf:30:f3:1a:fb:
9f:c0:92:73:20:a8:dc:2b:8f:ac:93:d1:47:f1:51:35:89:a9:
0b:09:e5:b9:93:da:d7:98:d9:74:a2:5f:37:e2:a7:48:22:7d:
05:89:c3:46:96:2b:1f:52:97:e5:b3:fa:4a:38:ed:50:99:ae:
85:eb:ed:9b:d3:9d:4f:2a:f3:c2:75:ee:0c:80:8f:6d:0c:94:
d7:01:18:bb:a9:54:a7:e3:cd:90:d8:01:b7:63:8e:f5:01:c7:
4f:1a:53:e9:0a:84:d0:24:07:33:3b:9b:16:b5:10:43:d5:b6:
c3:b9:3b:c8:06:3f:e4:05:28:b3:63:ef:d4:60:6f:78:29:92:
71:ae:72:16:87:21:bf:b9:a3:fe:7b:06:49:ba:92:81:ac:99:
e4:26:41:0e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZfAA3prKwwgOuHxCQm/4/4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2
ZjcxNWEwHhcNMjUwNjMwMDg0NTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGNjYmI1ODJmMDkxMzNmNDYxZjZjMmIyMzZjNTI0NDYxNGU0M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzEjcr+fBW6D1QHu5d8fRAypI0ye
eoTT+/rSGOEPzCCfjHHidyDSZek6Pg+SYPpO+ePtzu+9J/lWdO0b5HKA7tiVmseY
gOjYn8g9m0geSrnLJ3AkGFtvNsJz3J5wbue+ovohHGPL09nq7ueSBpYoOhUJokhK
or0/qKKnjdKtkJkYW7iGXOu9rMUVj168hjCDaWGgT6PNZF7p3faMqtf7Fq9iE4iQ
2rhPBI53zCOu6AYLImJCAb6QJEuKi/hfCIb0VzOoX4JK5SlUPG/GUI1vc/QINq63
88klE6CFTaFRyRF5rIdgMwWmH/u9paXly9riX1tRvGZM0Ftd4/tLrLtLIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL3Mu1gvCRM/Rh9sKyNsUkRhTkPDMB8GA1UdIwQY
MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt
NmMzMDVhNmRiYWI5LzEvdmN5N1dDOEpFejlHSDJ3ckkyeFNSR0ZPUThNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5
LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuZusAwQA
uZuuMA0GCSqGSIb3DQEBCwUAA4IBAQDC28HQUZuERTLTN2YHhuQtGwAsaxLYqpjr
IOjojLgbR3h4tgensCLbmzsVR8OOVOqY0WQFjbLEnCJiqLpqNK4nqTxeqXo68Tvq
l15RiQ7DJhtZylK9OZDa1zAm/ghYpbpH0QeWq65HvzDzGvufwJJzIKjcK4+sk9FH
8VE1iakLCeW5k9rXmNl0ol834qdIIn0FicNGlisfUpfls/pKOO1Qma6F6+2b051P
KvPCde4MgI9tDJTXARi7qVSn482Q2AG3Y471AcdPGlPpCoTQJAczO5sWtRBD1bbD
uTvIBj/kBSizY+/UYG94KZJxrnIWhyG/uaP+ewZJupKBrJnkJkEO
-----END CERTIFICATE-----
Generated at Mon Jul 7 04:24:19 2025 by rpki-client