Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VLxpNyve1KV_82bh2wa5qKsqPcA.roa
File: VLxpNyve1KV_82bh2wa5qKsqPcA.roa (raw, json)
Hash identifier: Bg/fLSSdMu8W6mpNwimox0aOkRBxl4QMmWFQ0QC3wNI=
Subject key identifier: 54:BC:69:37:2B:DE:D4:A5:7F:F3:66:E1:DB:06:B9:A8:AB:2A:3D:C0
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F55A107192EDC4C7DE013D1297864C576
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VLxpNyve1KV_82bh2wa5qKsqPcA.roa
Signing time: Sun 12 Jul 2026 09:20:44 +0000
ROA not before: Sun 12 Jul 2026 09:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 77.81.88.0/24 maxlen: 24
77.81.100.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
86.107.51.0/24 maxlen: 24
89.37.194.0/24 maxlen: 24
89.43.62.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
93.90.75.0/24 maxlen: 24
93.115.105.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
212.192.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:a1:07:19:2e:dc:4c:7d:e0:13:d1:29:78:64:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 12 09:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54bc69372bded4a57ff366e1db06b9a8ab2a3dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:56:5b:89:b7:21:77:3f:f9:88:ca:ea:e5:43:
a1:38:99:4c:d5:b9:98:8c:0b:98:79:f6:91:e8:82:
0e:af:a9:8e:b9:02:b1:e1:b1:a6:7a:47:2a:aa:28:
d3:be:91:f8:63:bc:b7:6d:ae:0d:20:89:4b:5d:31:
18:d4:bd:f7:63:41:95:79:f5:16:d5:d7:48:92:1e:
df:1e:29:cb:1a:c2:09:a3:40:dc:92:cb:e3:db:3f:
99:47:68:9a:fd:09:ef:a9:d8:f3:14:be:da:b4:8a:
36:6d:22:58:54:46:51:60:6a:c0:e7:e2:22:dc:f1:
38:8c:3c:cd:84:bb:1b:30:df:04:da:9f:38:d4:f5:
02:65:f7:a7:43:1d:47:50:84:54:6c:bd:bc:01:3c:
f9:ae:9f:ba:03:4c:d7:af:41:cf:c7:0c:74:9e:81:
19:36:0b:21:af:5c:df:ed:a8:d6:7e:9e:df:27:1b:
cf:ad:92:bd:1c:85:1b:bf:fc:0e:f3:4f:c9:fe:03:
ef:dd:46:4b:b6:70:fc:89:bb:f8:d2:9e:11:ee:97:
33:9b:96:0e:73:dc:ef:bd:12:d0:5e:6b:c8:29:ef:
b9:bc:6f:cc:20:b5:f7:10:07:06:d8:b1:ea:2d:f4:
c7:13:52:e4:67:43:c4:22:1c:83:40:eb:d8:de:57:
a3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BC:69:37:2B:DE:D4:A5:7F:F3:66:E1:DB:06:B9:A8:AB:2A:3D:C0
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VLxpNyve1KV_82bh2wa5qKsqPcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.88.0/24
77.81.100.0/24
86.105.4.0/24
86.107.51.0/24
89.37.194.0/24
89.43.62.0/24
89.45.162.0/24
93.90.75.0/24
93.115.105.0/24
188.241.137.0/24
194.135.18.0/24
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:97:ed:7a:1a:fc:f7:b4:41:43:c9:46:e0:29:13:58:9c:ea:
8e:06:3e:22:e2:f8:75:36:27:de:c6:21:bd:63:8e:b3:09:85:
2a:91:be:9e:71:4c:c9:ad:d2:b9:f1:36:e0:3a:a6:d2:10:d6:
e1:74:5a:25:2b:2b:44:7f:45:90:c7:41:a8:0a:09:35:28:c1:
cc:95:d8:56:bc:b8:a0:79:fa:9e:67:df:0a:b0:93:c9:cf:18:
10:fe:f3:4f:79:85:1e:82:1d:2d:0c:f5:68:e4:56:4b:44:2d:
f6:3f:43:d8:ad:03:b6:2a:f3:c5:bf:7c:2b:07:20:37:ed:59:
c7:15:64:79:3b:fe:b1:9a:ea:dc:23:a6:25:d3:f8:a0:b3:08:
22:84:39:d3:05:b4:ed:f9:3e:e2:93:d9:83:ce:ab:cf:d5:5e:
42:21:e1:b0:f5:74:da:35:78:33:90:4f:2b:6f:b8:45:d0:26:
95:17:7e:ff:7e:d8:a8:81:d4:84:93:21:93:99:a8:8d:f1:af:
56:43:ae:0c:3f:28:ea:7a:12:c9:68:3b:bb:59:ba:df:0a:41:
93:6d:45:77:c1:d4:32:45:21:f1:c2:58:15:4a:aa:92:75:23:
e6:b7:40:03:8b:86:89:ed:28:e5:6a:5c:e6:c8:bc:98:cf:fb:
24:6f:66:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:31:05 2026 by rpki-client