Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vcdGGup8yHEyfnVETng7DwopM4k.roa
File: vcdGGup8yHEyfnVETng7DwopM4k.roa (raw, json)
Hash identifier: /LfP0i9ia1dfr7Ul8PDtqwCBT2xE7C8B1GZ+VMHVMsw=
Subject key identifier: BD:C7:46:1A:EA:7C:C8:71:32:7E:75:44:4E:78:3B:0F:0A:29:33:89
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01A1789B980B27F91634EF03881CE584A4EF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vcdGGup8yHEyfnVETng7DwopM4k.roa
Signing time: Mon 26 Oct 2026 14:27:05 +0000
ROA not before: Mon 26 Oct 2026 14:27:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.176.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.244.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
77.83.203.0/24 maxlen: 24
109.236.49.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
185.254.31.0/24 maxlen: 24
193.35.155.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb00::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440::/48 maxlen: 48
2a13:a440:3::/48 maxlen: 48
2a13:a440:4::/48 maxlen: 48
2a13:a440:5::/48 maxlen: 48
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:9b:98:0b:27:f9:16:34:ef:03:88:1c:e5:84:a4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 26 14:27:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc7461aea7cc871327e75444e783b0f0a293389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:6b:b7:92:14:f3:00:0f:2e:fa:0c:3e:72:
b4:6b:12:cc:2a:ba:d4:5c:cb:1b:da:db:be:fb:a0:
55:41:dc:d0:1f:96:fb:f4:e4:50:de:35:be:eb:bb:
ce:cf:a8:02:4f:7d:ee:cc:cd:a3:77:4d:2a:c0:41:
a8:a6:70:60:a4:c8:53:d4:77:7b:1f:1a:3b:ca:c6:
6a:ad:37:8c:99:5f:9c:c4:1c:50:06:60:a4:72:1e:
67:11:38:57:0b:64:d4:61:5c:fd:a2:7f:76:17:92:
08:eb:b3:0d:bf:91:38:d1:6b:99:57:fe:70:a8:db:
e3:6c:11:27:c0:48:cb:36:18:ac:72:77:c5:d3:f2:
89:38:fb:d4:68:f4:d7:f9:b9:a5:32:5c:3b:8f:4c:
b1:78:57:5b:a6:93:60:d4:35:6f:2b:5c:92:a7:51:
13:84:06:6e:dc:c0:78:f4:09:53:c5:80:94:2b:67:
39:cf:8d:bc:0d:78:21:eb:0a:a3:50:db:50:7d:99:
8b:4e:11:b6:a4:8c:69:12:0f:72:e3:c4:d6:35:72:
34:7d:94:39:a2:07:e3:f6:40:cd:39:d6:21:20:5e:
02:76:cc:65:d3:0c:ee:bc:c7:ee:74:83:b2:18:be:
36:46:63:54:a5:95:8a:99:94:6c:92:4a:c5:5e:39:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C7:46:1A:EA:7C:C8:71:32:7E:75:44:4E:78:3B:0F:0A:29:33:89
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/vcdGGup8yHEyfnVETng7DwopM4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.176.0/24
45.74.242.0/24
45.74.244.0/24
45.136.4.0/24
77.83.200.0/22
109.236.49.0/24
185.254.28.0/24
185.254.31.0/24
193.35.155.0/24
193.111.79.0/24
194.116.237.0/24
217.18.208.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440::/48
2a13:a440:3::-2a13:a440:5:ffff:ffff:ffff:ffff:ffff
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:6f:52:34:14:e2:89:9a:24:b5:9a:c8:cc:64:54:d1:bc:07:
25:24:16:f6:9e:42:00:ad:0b:90:06:39:07:60:60:29:23:1b:
7a:f3:08:d5:ed:16:fe:f1:09:d1:46:40:07:a4:ca:30:f6:6c:
62:75:b1:82:93:e6:3d:41:a1:3a:fc:54:ff:f4:b3:f0:39:e3:
da:bc:3b:da:f2:4d:c3:e7:29:c7:49:0c:3d:a2:ce:35:50:0c:
76:87:66:61:2e:f9:8b:be:e0:b5:e2:51:d9:b3:5f:c8:d4:21:
f4:f4:fd:4e:c4:d1:55:65:c5:51:59:1e:39:e8:e0:91:5c:2e:
ff:25:76:82:f2:10:e3:5f:a5:cd:53:85:80:6b:5e:66:aa:08:
ef:11:db:14:9a:8c:c9:fe:0c:62:58:8a:80:96:ba:d6:ae:19:
5f:aa:c6:db:80:21:a3:5c:e3:e2:ad:c1:cc:23:1b:85:f6:0f:
27:0d:54:0c:de:a5:6e:03:d6:04:63:87:6f:cc:bf:6a:56:db:
4e:fa:1a:ce:17:d9:2a:d9:31:3c:47:4f:69:d6:d6:35:43:7f:
cf:25:df:a2:42:b8:04:d6:d9:0d:2f:b1:05:7d:b9:7b:fa:6e:
4b:6c:68:2d:69:dd:e6:4a:70:16:32:f9:19:9b:46:de:c3:3d:
75:17:da:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:58 2026 by rpki-client