Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vc-6bAAt2tlYcYX-EGi7jX3dfeM.roa
File: Vc-6bAAt2tlYcYX-EGi7jX3dfeM.roa (raw, json)
Hash identifier: 9TaPgg8RVGk1MUlU+Xijustg0oaaDEgAYzgo/p4MFuY=
Subject key identifier: 55:CF:BA:6C:00:2D:DA:D9:58:71:85:FE:10:68:BB:8D:7D:DD:7D:E3
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E27E40BC3CED0548D755DC37B08174A6B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vc-6bAAt2tlYcYX-EGi7jX3dfeM.roa
Signing time: Thu 14 May 2026 19:08:37 +0000
ROA not before: Thu 14 May 2026 19:08:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.100.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:27:e4:0b:c3:ce:d0:54:8d:75:5d:c3:7b:08:17:4a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 14 19:08:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55cfba6c002ddad9587185fe1068bb8d7ddd7de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:b3:c2:40:2f:2f:fd:e5:99:9b:8d:23:ae:
55:33:cd:3d:97:19:a5:f7:1d:d5:e7:cf:26:4f:94:
dc:e1:94:a9:4a:8b:a3:d3:71:f9:d8:7c:d7:17:6e:
a8:f1:cd:2f:7f:64:23:0c:6a:b2:e8:fb:d8:b5:6a:
de:8a:f5:5c:5d:88:08:9a:7e:e9:68:d9:64:29:44:
9c:00:80:56:96:76:fe:82:89:df:08:20:f9:89:27:
34:ad:a1:96:44:ce:58:0c:04:a8:91:ee:f3:f5:a7:
7b:5d:9b:6e:8e:9a:7b:bb:13:9c:4b:2f:bc:86:b4:
b3:24:72:0f:dc:da:d7:e3:a0:5e:7c:cb:6b:ca:fe:
3d:cd:af:8e:13:23:e1:e2:f9:1c:54:5d:99:6b:47:
32:f5:6c:b7:18:7e:25:cb:07:5b:b5:c1:46:76:f9:
49:81:2a:5e:ec:e3:27:43:f3:8b:1e:4f:1b:9f:48:
5e:f7:34:6c:9f:cf:01:81:d5:67:15:89:83:2b:28:
d9:90:e4:8c:90:25:37:91:7d:79:78:51:b2:3e:de:
af:8e:b6:2e:2b:d1:bc:0e:7b:f6:04:60:e2:67:e1:
11:78:85:50:bc:dc:56:0b:66:1e:62:65:8e:d9:07:
16:28:25:fd:ff:2c:1b:6a:d3:a8:71:6f:32:9a:fe:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CF:BA:6C:00:2D:DA:D9:58:71:85:FE:10:68:BB:8D:7D:DD:7D:E3
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Vc-6bAAt2tlYcYX-EGi7jX3dfeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.100.0/24
78.17.150.0/24
78.17.192.0/24
78.17.198.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.122.0/23
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:81:16:11:17:87:88:a2:64:db:c7:c6:c0:c0:13:24:d9:f5:
89:73:5c:8f:7a:22:75:89:05:f8:29:7f:16:f7:cc:9b:d4:69:
ab:91:db:58:84:57:aa:40:99:3f:7a:3e:7a:90:ba:58:ad:98:
b3:f7:24:46:ae:aa:90:17:4b:f5:c3:54:e2:11:53:df:53:2d:
7f:7b:53:17:ef:31:72:1c:0c:39:64:fa:ce:35:b7:a1:81:4e:
7c:a3:22:c3:9b:44:2c:66:d9:ee:dc:03:e8:51:94:f2:c9:9e:
9f:39:7c:71:87:a3:9d:38:4d:bc:e1:00:a6:97:a4:cc:35:c0:
cf:c3:b3:a4:fd:97:6f:bb:28:21:fb:f3:ca:46:d6:9e:54:f1:
ef:b7:a4:00:53:64:dc:a3:d0:fb:ab:b3:7c:e9:66:5b:3b:b9:
58:9a:95:c6:b3:75:a4:c4:75:95:06:38:c7:6b:07:a5:58:55:
d1:a2:97:6b:5d:9f:0c:2a:cc:3b:1d:97:a4:46:c1:02:06:de:
fc:d0:71:ea:e5:e4:68:7d:9c:85:51:51:b2:bd:84:1d:4d:41:
52:4c:27:5e:e5:c7:7e:2b:1f:4c:8e:8b:54:27:73:52:11:7d:
96:3d:8b:38:7b:5b:08:6b:48:e6:3d:af:b4:bb:67:43:44:f6:
4e:c9:ac:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:23:02 2026 by rpki-client