Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/VSaFSFw5E3wkEom0AVXbAvKTH_8.roa
File: VSaFSFw5E3wkEom0AVXbAvKTH_8.roa (raw, json)
Hash identifier: QBsvkPe1dCEiBM6zrbzNalckdfYtFXnav5uxGiX9Z5o=
Subject key identifier: 55:26:85:48:5C:39:13:7C:24:12:89:B4:01:55:DB:02:F2:93:1F:FF
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019F73AA16153D5D10C255C831FABCD1701B
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/VSaFSFw5E3wkEom0AVXbAvKTH_8.roa
Signing time: Sat 18 Jul 2026 05:19:14 +0000
ROA not before: Sat 18 Jul 2026 05:19:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48314
IP address blocks: 5.180.64.0/24 maxlen: 24
5.180.65.0/24 maxlen: 24
5.180.66.0/24 maxlen: 24
5.180.67.0/24 maxlen: 24
27.123.244.0/22 maxlen: 24
27.123.244.0/24 maxlen: 24
27.123.245.0/24 maxlen: 24
27.123.247.0/24 maxlen: 24
31.214.144.0/24 maxlen: 24
45.10.25.0/24 maxlen: 24
45.10.26.0/24 maxlen: 24
45.10.27.0/24 maxlen: 24
45.91.100.0/24 maxlen: 24
45.91.101.0/24 maxlen: 24
45.91.102.0/24 maxlen: 24
45.91.103.0/24 maxlen: 24
45.133.8.0/24 maxlen: 24
45.133.10.0/23 maxlen: 24
45.133.11.0/24 maxlen: 24
46.251.251.0/24 maxlen: 24
88.218.224.0/24 maxlen: 24
88.218.225.0/24 maxlen: 24
88.218.226.0/24 maxlen: 24
91.210.225.0/24 maxlen: 24
91.210.226.0/24 maxlen: 24
91.210.227.0/24 maxlen: 24
91.216.245.0/24 maxlen: 24
94.199.212.0/24 maxlen: 24
94.199.213.0/24 maxlen: 24
94.199.214.0/24 maxlen: 24
94.199.215.0/24 maxlen: 24
103.241.48.0/22 maxlen: 24
103.241.48.0/24 maxlen: 24
103.241.50.0/24 maxlen: 24
103.241.51.0/24 maxlen: 24
109.230.219.0/24 maxlen: 24
134.255.244.0/24 maxlen: 24
134.255.247.0/24 maxlen: 24
152.89.236.0/24 maxlen: 24
152.89.237.0/24 maxlen: 24
152.89.238.0/24 maxlen: 24
185.194.236.0/24 maxlen: 24
185.194.237.0/24 maxlen: 24
185.194.238.0/24 maxlen: 24
185.194.239.0/24 maxlen: 24
185.242.112.0/24 maxlen: 24
185.242.113.0/24 maxlen: 24
185.242.114.0/24 maxlen: 24
185.242.115.0/24 maxlen: 24
185.245.97.0/24 maxlen: 24
185.245.98.0/24 maxlen: 24
185.245.99.0/24 maxlen: 24
185.248.141.0/24 maxlen: 24
185.248.142.0/24 maxlen: 24
185.248.143.0/24 maxlen: 24
185.250.248.0/24 maxlen: 24
185.250.249.0/24 maxlen: 24
185.250.250.0/24 maxlen: 24
185.250.251.0/24 maxlen: 24
193.32.220.0/24 maxlen: 24
193.32.221.0/24 maxlen: 24
193.32.222.0/24 maxlen: 24
193.32.223.0/24 maxlen: 24
193.135.8.0/24 maxlen: 24
193.135.9.0/24 maxlen: 24
193.135.11.0/24 maxlen: 24
193.142.40.0/24 maxlen: 24
193.142.41.0/24 maxlen: 24
193.142.42.0/24 maxlen: 24
193.142.43.0/24 maxlen: 24
194.26.180.0/24 maxlen: 24
194.26.181.0/24 maxlen: 24
194.26.182.0/24 maxlen: 24
194.45.36.0/24 maxlen: 24
194.45.37.0/24 maxlen: 24
194.45.196.0/23 maxlen: 24
194.45.196.0/24 maxlen: 24
194.45.197.0/24 maxlen: 24
194.48.168.0/24 maxlen: 24
194.48.169.0/24 maxlen: 24
194.48.170.0/24 maxlen: 24
194.48.171.0/24 maxlen: 24
213.190.28.0/24 maxlen: 24
213.190.29.0/24 maxlen: 24
213.190.30.0/24 maxlen: 24
213.190.31.0/24 maxlen: 24
2a0a:51c0::/32 maxlen: 32
2a0a:51c1::/32 maxlen: 48
2a0a:51c1:7::/48 maxlen: 48
2a0a:51c2::/32 maxlen: 32
2a0a:51c3::/32 maxlen: 32
2a0a:51c4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:73:aa:16:15:3d:5d:10:c2:55:c8:31:fa:bc:d1:70:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Jul 18 05:19:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=552685485c39137c241289b40155db02f2931fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:43:31:5a:45:c9:48:62:6d:02:38:00:1d:
03:59:5e:85:27:0c:ef:90:45:8e:f3:2f:d9:a6:80:
09:27:21:eb:db:e9:aa:55:e1:46:22:6a:45:b6:f0:
43:3c:3d:09:fa:93:4b:c8:8f:74:01:b3:15:ff:40:
23:a0:8c:79:90:db:ca:82:d1:5f:6a:a0:b7:92:09:
03:1a:46:90:2e:86:9b:6b:f0:76:9f:76:15:63:77:
58:28:9a:a9:9f:7f:7b:26:8c:b8:83:5b:73:7e:43:
ba:d2:ff:d2:32:27:ce:c2:2e:75:69:dc:59:13:33:
48:20:69:2b:fa:15:a1:a3:39:79:36:30:0f:b6:78:
7d:ab:db:9a:41:4d:ea:67:ec:c7:90:6a:98:1f:b8:
a2:f9:71:6e:b1:12:d8:b5:86:bc:93:ff:17:58:c7:
39:eb:d1:28:f5:54:a5:2c:48:bd:21:1d:c2:8f:54:
e1:5c:bb:ca:6e:71:ff:be:b4:d0:c2:16:9c:25:77:
b6:7d:3e:c4:7b:d5:cd:39:60:8f:d5:54:40:a6:f0:
67:2e:ac:5e:59:36:9e:7f:a1:43:74:dc:97:6e:1c:
c3:56:b5:82:5c:67:54:40:44:2e:48:a8:e0:8a:26:
10:47:cb:43:5b:d5:ed:32:d0:e3:8b:77:3c:47:a8:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:26:85:48:5C:39:13:7C:24:12:89:B4:01:55:DB:02:F2:93:1F:FF
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/VSaFSFw5E3wkEom0AVXbAvKTH_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.64.0/22
27.123.244.0/22
31.214.144.0/24
45.10.25.0-45.10.27.255
45.91.100.0/22
45.133.8.0/24
45.133.10.0/23
46.251.251.0/24
88.218.224.0-88.218.226.255
91.210.225.0-91.210.227.255
91.216.245.0/24
94.199.212.0/22
103.241.48.0/22
109.230.219.0/24
134.255.244.0/24
134.255.247.0/24
152.89.236.0-152.89.238.255
185.194.236.0/22
185.242.112.0/22
185.245.97.0-185.245.99.255
185.248.141.0-185.248.143.255
185.250.248.0/22
193.32.220.0/22
193.135.8.0/23
193.135.11.0/24
193.142.40.0/22
194.26.180.0-194.26.182.255
194.45.36.0/23
194.45.196.0/23
194.48.168.0/22
213.190.28.0/22
IPv6:
2a0a:51c0::-2a0a:51c4:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9a:f7:03:df:aa:b2:b8:df:71:fe:c8:d9:25:12:64:50:46:6b:
90:44:bb:7d:93:65:16:19:50:04:6c:bd:aa:a4:35:cf:58:4e:
68:00:aa:44:82:30:a3:55:4c:6f:95:3f:4a:de:9e:6f:76:fa:
94:0d:b9:02:40:f1:ab:47:60:5f:b9:14:25:e2:d4:9c:c1:84:
55:05:47:0d:f2:c7:cb:1e:26:18:6e:c8:d1:58:e7:1b:4b:26:
91:37:93:f3:ca:15:88:6a:fe:37:8f:c4:f7:79:80:64:fa:74:
1a:7f:cd:54:75:62:6b:ee:c4:d2:73:d2:a9:1c:b8:e7:b1:01:
d0:4f:93:92:df:04:2d:da:d2:c1:12:d1:a6:76:c2:82:d7:8e:
ac:14:1e:aa:30:4d:c4:01:b4:c7:97:d0:4d:06:63:b3:8c:25:
ef:f7:ac:0a:51:de:d9:4d:d0:85:f2:b7:b6:81:d5:f0:5d:4f:
8c:7d:8e:7d:18:d3:a8:f2:a7:01:04:c8:12:dd:f3:e4:cf:ce:
da:39:4d:43:23:17:48:f6:5b:81:3e:30:7f:db:43:82:5a:d6:
d1:8c:bd:44:1a:a9:0e:18:3f:70:2e:40:22:b8:a1:33:3e:22:
47:86:d0:97:c5:77:5a:95:73:54:2a:10:dc:d5:a0:51:94:3c:
6a:e6:35:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:45 2026 by rpki-client