Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VTWCbgJxgMBQnc0IICJV5h8P0_E.roa
File: VTWCbgJxgMBQnc0IICJV5h8P0_E.roa (raw, json)
Hash identifier: sa3zBtobdY5QDCgQYZYZn9IkOUO4cvf/PxSGAbmmRik=
Subject key identifier: 55:35:82:6E:02:71:80:C0:50:9D:CD:08:20:22:55:E6:1F:0F:D3:F1
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A06C1B4439B937A7AF698E036A5F962B23
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VTWCbgJxgMBQnc0IICJV5h8P0_E.roa
Signing time: Fri 04 Sep 2026 11:08:41 +0000
ROA not before: Fri 04 Sep 2026 11:08:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 82.108.10.0/23 maxlen: 23
82.108.48.0/23 maxlen: 23
82.108.62.0/23 maxlen: 23
82.108.64.0/22 maxlen: 22
82.108.96.0/23 maxlen: 23
82.108.136.0/23 maxlen: 23
82.108.192.0/23 maxlen: 23
85.189.17.0/24 maxlen: 24
86.53.5.0/24 maxlen: 24
86.53.22.0/24 maxlen: 24
86.53.25.0/24 maxlen: 24
86.53.26.0/24 maxlen: 24
86.53.166.0/24 maxlen: 24
87.82.200.0/22 maxlen: 22
87.82.204.0/23 maxlen: 23
87.82.208.0/23 maxlen: 23
87.82.211.0/24 maxlen: 24
87.83.37.0/24 maxlen: 24
87.83.38.0/24 maxlen: 24
87.83.40.0/24 maxlen: 24
87.83.42.0/23 maxlen: 23
87.83.76.0/22 maxlen: 22
87.84.50.0/23 maxlen: 23
87.84.72.0/24 maxlen: 24
87.84.74.0/23 maxlen: 23
87.84.136.0/24 maxlen: 24
87.84.138.0/24 maxlen: 24
87.84.148.0/23 maxlen: 23
87.84.155.0/24 maxlen: 24
87.84.181.0/24 maxlen: 24
87.84.184.0/23 maxlen: 23
87.85.254.0/24 maxlen: 24
87.86.6.0/23 maxlen: 23
87.86.15.0/24 maxlen: 24
87.86.26.0/24 maxlen: 24
195.40.3.0/24 maxlen: 24
195.40.14.0/23 maxlen: 23
195.40.64.0/23 maxlen: 23
195.40.66.0/23 maxlen: 23
195.40.68.0/23 maxlen: 23
195.40.79.0/24 maxlen: 24
195.40.81.0/24 maxlen: 24
195.40.84.0/24 maxlen: 24
195.40.90.0/24 maxlen: 24
195.40.93.0/24 maxlen: 24
195.40.98.0/23 maxlen: 23
195.40.102.0/23 maxlen: 23
195.40.124.0/23 maxlen: 23
195.40.126.0/23 maxlen: 23
195.40.164.0/23 maxlen: 23
195.40.168.0/23 maxlen: 23
195.40.170.0/23 maxlen: 23
195.40.172.0/23 maxlen: 23
195.40.174.0/23 maxlen: 23
195.40.190.0/23 maxlen: 23
195.172.126.0/23 maxlen: 23
195.172.132.0/23 maxlen: 23
195.172.146.0/23 maxlen: 23
195.172.148.0/23 maxlen: 23
195.172.208.0/23 maxlen: 23
212.134.206.0/24 maxlen: 24
212.135.14.0/23 maxlen: 23
212.135.176.0/23 maxlen: 24
212.135.182.0/23 maxlen: 23
212.135.184.0/23 maxlen: 23
212.135.186.0/23 maxlen: 23
212.135.188.0/24 maxlen: 24
212.135.216.0/23 maxlen: 23
212.135.224.0/23 maxlen: 23
212.135.226.0/23 maxlen: 23
212.135.229.0/24 maxlen: 24
212.135.230.0/23 maxlen: 23
212.135.232.0/23 maxlen: 23
212.135.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:1b:44:39:b9:37:a7:af:69:8e:03:6a:5f:96:2b:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 4 11:08:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5535826e027180c0509dcd08202255e61f0fd3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ae:19:96:23:c5:b2:fb:b3:02:1a:ae:93:31:
08:7e:e9:57:a5:72:8d:50:6b:5f:5a:2b:cd:78:a7:
ff:e1:b9:bb:40:fc:77:fd:df:bc:73:97:fa:25:58:
da:2b:de:ed:59:a7:ae:5b:6b:f9:25:61:6d:1c:3a:
0a:d1:95:78:b0:b1:29:51:83:16:4d:a2:80:d2:ad:
d1:a5:55:a7:da:34:37:f7:00:89:40:fb:1f:8f:58:
55:56:1c:5a:76:d7:8e:6b:20:da:c5:9e:58:8b:7b:
6f:8c:15:3f:b6:f9:72:34:81:80:1a:80:af:b7:1d:
01:a9:72:1f:f5:2c:33:9a:16:80:8f:7e:eb:a1:b2:
a0:cb:83:4d:0c:cc:4d:70:58:7a:06:98:e6:45:dc:
e7:e3:03:14:6e:e6:61:8e:82:04:85:43:16:0f:97:
b8:68:05:9d:a4:5a:9a:45:5d:bf:2a:a8:49:7c:56:
81:ec:23:6f:8c:03:0c:8b:23:62:96:02:fa:ce:14:
52:34:6e:e8:07:d8:c1:3c:39:67:00:b6:c7:fb:38:
a8:1a:5a:ef:10:9d:42:2f:ec:4e:db:14:93:8e:25:
61:82:83:49:28:7a:b7:57:fb:43:8d:71:36:6f:3d:
0d:44:69:70:97:3e:c9:36:fc:5a:e6:b8:8e:ed:03:
7d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:82:6E:02:71:80:C0:50:9D:CD:08:20:22:55:E6:1F:0F:D3:F1
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VTWCbgJxgMBQnc0IICJV5h8P0_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.10.0/23
82.108.48.0/23
82.108.62.0-82.108.67.255
82.108.96.0/23
82.108.136.0/23
82.108.192.0/23
85.189.17.0/24
86.53.5.0/24
86.53.22.0/24
86.53.25.0-86.53.26.255
86.53.166.0/24
87.82.200.0-87.82.205.255
87.82.208.0/23
87.82.211.0/24
87.83.37.0-87.83.38.255
87.83.40.0/24
87.83.42.0/23
87.83.76.0/22
87.84.50.0/23
87.84.72.0/24
87.84.74.0/23
87.84.136.0/24
87.84.138.0/24
87.84.148.0/23
87.84.155.0/24
87.84.181.0/24
87.84.184.0/23
87.85.254.0/24
87.86.6.0/23
87.86.15.0/24
87.86.26.0/24
195.40.3.0/24
195.40.14.0/23
195.40.64.0-195.40.69.255
195.40.79.0/24
195.40.81.0/24
195.40.84.0/24
195.40.90.0/24
195.40.93.0/24
195.40.98.0/23
195.40.102.0/23
195.40.124.0/22
195.40.164.0/23
195.40.168.0/21
195.40.190.0/23
195.172.126.0/23
195.172.132.0/23
195.172.146.0-195.172.149.255
195.172.208.0/23
212.134.206.0/24
212.135.14.0/23
212.135.176.0/23
212.135.182.0-212.135.188.255
212.135.216.0/23
212.135.224.0/22
212.135.229.0-212.135.233.255
212.135.238.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:28:20:85:f3:0d:24:bf:50:f7:d0:76:47:1e:b0:21:db:c9:
0c:5c:52:75:98:71:4a:e0:6d:6c:e0:5d:09:43:52:ab:dd:cb:
12:9f:c3:21:ef:54:30:65:c8:a5:cd:49:64:c6:1d:b5:67:b7:
0e:e0:3c:cf:d1:65:50:48:09:06:d8:b7:15:57:0e:64:36:0c:
78:62:11:d0:3e:db:cb:1a:ee:4e:68:32:e6:ac:d7:e1:e4:1b:
00:ff:c1:72:83:54:68:86:9f:49:26:03:f5:f4:6a:f9:75:9d:
4b:b5:5d:d3:57:3e:64:73:1f:3b:85:60:82:7f:45:22:eb:47:
d6:5f:18:07:2a:35:fd:45:be:71:27:1f:93:5c:fd:32:c7:61:
79:11:01:0b:d2:f7:33:1c:d7:d6:8d:b6:af:37:8b:56:d5:16:
fb:ad:d4:ef:23:b4:6a:ce:c5:8b:64:f4:33:c4:3b:3e:18:4f:
93:63:4a:84:39:36:12:f8:53:93:b4:44:48:9c:5f:b5:61:bc:
4b:3d:70:f4:d0:2f:5e:d6:67:3c:0a:60:c7:b1:62:b5:ba:e4:
41:ff:46:ef:66:6c:59:a6:54:ee:6e:8e:30:6d:ab:0b:18:ea:
5b:ce:0c:8a:e3:14:bc:c6:ee:65:c5:be:07:af:06:5d:8b:e8:
07:f3:0c:e6
-----BEGIN CERTIFICATE-----
MIIGlzCCBX+gAwIBAgISAaBsG0Q5uTenr2mOA2pflisjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTA0MTEwODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTM1ODI2ZTAyNzE4MGMwNTA5ZGNkMDgyMDIyNTVlNjFmMGZkM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq4ZliPFsvuzAhqukzEIfulXpXKN
UGtfWivNeKf/4bm7QPx3/d+8c5f6JVjaK97tWaeuW2v5JWFtHDoK0ZV4sLEpUYMW
TaKA0q3RpVWn2jQ39wCJQPsfj1hVVhxadteOayDaxZ5Yi3tvjBU/tvlyNIGAGoCv
tx0BqXIf9SwzmhaAj37robKgy4NNDMxNcFh6BpjmRdzn4wMUbuZhjoIEhUMWD5e4
aAWdpFqaRV2/KqhJfFaB7CNvjAMMiyNilgL6zhRSNG7oB9jBPDlnALbH+zioGlrv
EJ1CL+xO2xSTjiVhgoNJKHq3V/tDjXE2bz0NRGlwlz7JNvxa5riO7QN9pQIDAQAB
o4IDozCCA58wHQYDVR0OBBYEFFU1gm4CcYDAUJ3NCCAiVeYfD9PxMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvVlRXQ2JnSnhnTUJRbmMwSUlDSlY1aDhQMF9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBtwYIKwYBBQUHAQcBAf8EggGmMIIBojCCAZ4EAgABMIIB
lgMEAVJsCgMEAVJsMDAMAwQBUmw+AwQCUmxAAwQBUmxgAwQBUmyIAwQBUmzAAwQA
Vb0RAwQAVjUFAwQAVjUWMAwDBABWNRkDBABWNRoDBABWNaYwDAMEA1dSyAMEAVdS
zAMEAVdS0AMEAFdS0zAMAwQAV1MlAwQAV1MmAwQAV1MoAwQBV1MqAwQCV1NMAwQB
V1QyAwQAV1RIAwQBV1RKAwQAV1SIAwQAV1SKAwQBV1SUAwQAV1SbAwQAV1S1AwQB
V1S4AwQAV1X+AwQBV1YGAwQAV1YPAwQAV1YaAwQAwygDAwQBwygOMAwDBAbDKEAD
BAHDKEQDBADDKE8DBADDKFEDBADDKFQDBADDKFoDBADDKF0DBAHDKGIDBAHDKGYD
BALDKHwDBAHDKKQDBAPDKKgDBAHDKL4DBAHDrH4DBAHDrIQwDAMEAcOskgMEAcOs
lAMEAcOs0AMEANSGzgMEAdSHDgMEAdSHsDAMAwQB1Ie2AwQA1Ie8AwQB1IfYAwQC
1IfgMAwDBADUh+UDBAHUh+gDBAHUh+4wDQYJKoZIhvcNAQELBQADggEBAJsoIIXz
DSS/UPfQdkcesCHbyQxcUnWYcUrgbWzgXQlDUqvdyxKfwyHvVDBlyKXNSWTGHbVn
tw7gPM/RZVBICQbYtxVXDmQ2DHhiEdA+28sa7k5oMuas1+HkGwD/wXKDVGiGn0km
A/X0avl1nUu1XdNXPmRzHzuFYIJ/RSLrR9ZfGAcqNf1FvnEnH5Nc/TLHYXkRAQvS
9zMc19aNtq83i1bVFvut1O8jtGrOxYtk9DPEOz4YT5NjSoQ5NhL4U5O0REicX7Vh
vEs9cPTQL17WZzwKYMexYrW65EH/Ru9mbFmmVO5ujjBtqwsY6lvODIrjFLzG7mXF
vgevBl2L6AfzDOY=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:18 2026 by rpki-client