Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VM0plN2wzGzOchts3Vwq8jnEDBQ.roa
File: VM0plN2wzGzOchts3Vwq8jnEDBQ.roa (raw, json)
Hash identifier: 88EDuSMGl9AEHTW1gEUJLe21f1hyJ2dcSfabyKdpRuU=
Subject key identifier: 54:CD:29:94:DD:B0:CC:6C:CE:72:1B:6C:DD:5C:2A:F2:39:C4:0C:14
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0198615C3467593F3F8A3A2246F5FAF159D7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VM0plN2wzGzOchts3Vwq8jnEDBQ.roa
Signing time: Thu 31 Jul 2025 16:41:29 +0000
ROA not before: Thu 31 Jul 2025 16:41:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 62.76.233.0/24 maxlen: 24
193.108.115.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.43.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.135.36.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.50.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.220.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/24 maxlen: 24
212.193.27.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:61:5c:34:67:59:3f:3f:8a:3a:22:46:f5:fa:f1:59:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 31 16:41:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54cd2994ddb0cc6cce721b6cdd5c2af239c40c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b7:6e:92:f0:25:84:8d:6d:1e:dd:4e:da:4b:
c4:cc:d6:b5:21:45:1b:46:df:bb:6c:e5:5f:11:4c:
aa:4e:8c:3d:11:ea:41:2b:1a:2f:ef:05:43:49:16:
e6:11:e1:88:26:ff:13:49:20:d8:7b:01:c4:90:fb:
c9:1b:e6:17:cb:7c:50:03:e9:4b:1a:73:5a:05:c1:
88:1a:8e:c5:05:07:2e:5a:bc:20:47:21:29:e4:38:
1b:0b:54:a6:9d:07:2e:c0:f3:65:ea:c3:61:d0:62:
f2:67:81:e2:af:7f:90:59:cc:15:9a:22:8d:58:d9:
a9:40:f2:ff:fb:45:df:1b:a4:ff:22:a8:d9:7a:2e:
f0:73:0c:df:24:96:e3:55:f3:fa:9a:e2:74:09:20:
19:23:66:b2:64:72:1d:55:11:a2:1a:79:41:79:e0:
02:ec:0b:e4:47:19:d8:09:af:20:03:fd:fd:ed:b6:
a0:36:97:da:a1:b1:f3:64:e8:e9:11:84:ab:2d:29:
d2:f4:49:22:4b:72:1c:7f:8c:df:ae:80:3a:65:0c:
37:3c:4e:dd:c7:c7:23:40:47:32:ea:93:7d:3f:e7:
ec:a7:fe:42:33:f3:d1:3f:c7:72:7a:e5:b4:a1:5f:
8e:5d:c1:17:70:7a:e8:39:f5:10:58:ed:d2:40:a1:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:29:94:DD:B0:CC:6C:CE:72:1B:6C:DD:5C:2A:F2:39:C4:0C:14
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VM0plN2wzGzOchts3Vwq8jnEDBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.233.0/24
193.108.115.0/24
193.124.47.0/24
194.87.43.0/24
194.87.56.0/24
194.87.76.0/24
194.87.84.0/24
194.87.86.0/24
194.87.118.0/24
194.87.131.0/24
194.87.133.0/24
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.187.0/24
194.87.190.0/24
194.87.201.0/24
194.87.215.0/24
194.87.226.0/24
194.135.36.0/24
195.58.34.0/24
195.58.36.0/23
195.58.61.0/24
195.133.25.0/24
195.133.27.0/24
195.133.30.0/24
195.133.50.0/24
195.133.73.0/24
195.133.194.0/24
212.192.220.0/24
212.193.24.0/24
212.193.26.0/23
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
52:69:c8:e2:00:66:ea:40:f4:0f:5c:38:e9:44:84:56:a1:ad:
af:17:75:51:69:23:46:10:06:e4:ee:ee:42:21:a1:ee:40:81:
95:e2:72:8f:5d:4a:05:fa:68:e2:65:2d:3f:21:6e:41:af:fa:
6d:be:b9:3f:fa:75:45:c9:25:2e:10:a4:de:de:c3:b1:42:6e:
b4:e8:02:2d:a2:1d:c4:5b:33:5d:7b:eb:b4:bb:8f:81:5f:f1:
0d:25:0d:28:0c:c7:f5:00:9f:6a:1a:25:80:35:9a:83:3f:0c:
d9:45:4e:fe:8b:68:01:19:aa:78:df:e2:d9:fb:2a:3e:b3:b3:
99:49:80:29:a9:0c:7b:56:e6:3f:36:a0:9c:47:c1:8f:44:24:
aa:ab:b2:08:db:6a:55:4a:07:a7:d4:d3:68:55:5d:18:64:1f:
62:1e:f4:5d:c2:b7:f0:fc:c3:e5:c1:da:32:18:18:94:c6:be:
cf:9d:51:f8:4f:f8:09:60:1c:5e:a8:85:b3:35:24:65:5b:8c:
63:7e:ec:90:9d:15:67:34:d9:48:70:a9:59:f5:ec:ab:53:1b:
18:89:27:45:b9:d6:26:c6:49:a2:cc:06:8e:55:83:54:88:45:
27:59:bf:1a:69:1d:45:c0:16:0e:ae:22:85:99:b2:44:b8:8f:
b7:ae:29:e7
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgISAZhhXDRnWT8/ijoiRvX68VnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjUwNzMxMTY0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGNkMjk5NGRkYjBjYzZjY2U3MjFiNmNkZDVjMmFmMjM5YzQwYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rdukvAlhI1tHt1O2kvEzNa1IUUb
Rt+7bOVfEUyqTow9EepBKxov7wVDSRbmEeGIJv8TSSDYewHEkPvJG+YXy3xQA+lL
GnNaBcGIGo7FBQcuWrwgRyEp5DgbC1SmnQcuwPNl6sNh0GLyZ4Hir3+QWcwVmiKN
WNmpQPL/+0XfG6T/IqjZei7wcwzfJJbjVfP6muJ0CSAZI2ayZHIdVRGiGnlBeeAC
7AvkRxnYCa8gA/397bagNpfaobHzZOjpEYSrLSnS9EkiS3Icf4zfroA6ZQw3PE7d
x8cjQEcy6pN9P+fsp/5CM/PRP8dyeuW0oV+OXcEXcHroOfUQWO3SQKFBeQIDAQAB
o4IC2jCCAtYwHQYDVR0OBBYEFFTNKZTdsMxsznIbbN1cKvI5xAwUMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVk0wcGxOMnd6R3pPY2h0czNWd3E4am5FREJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHvBggrBgEFBQcBBwEB/wSB3zCB3DCB2QQCAAEwgdIDBAA+
TOkDBADBbHMDBADBfC8DBADCVysDBADCVzgDBADCV0wDBADCV1QDBADCV1YDBADC
V3YDBADCV4MDBADCV4UDBADCV4oDBADCV4wDBADCV48DBADCV5cDBADCV6EDBADC
V7sDBADCV74DBADCV8kDBADCV9cDBADCV+IDBADChyQDBADDOiIDBAHDOiQDBADD
Oj0DBADDhRkDBADDhRsDBADDhR4DBADDhTIDBADDhUkDBADDhcIDBADUwNwDBADU
wRgDBAHUwRoDBADUwR4wDQYJKoZIhvcNAQELBQADggEBAFJpyOIAZupA9A9cOOlE
hFahra8XdVFpI0YQBuTu7kIhoe5AgZXico9dSgX6aOJlLT8hbkGv+m2+uT/6dUXJ
JS4QpN7ew7FCbrToAi2iHcRbM11767S7j4Ff8Q0lDSgMx/UAn2oaJYA1moM/DNlF
Tv6LaAEZqnjf4tn7Kj6zs5lJgCmpDHtW5j82oJxHwY9EJKqrsgjbalVKB6fU02hV
XRhkH2Ie9F3Ct/D8w+XB2jIYGJTGvs+dUfhP+AlgHF6ohbM1JGVbjGN+7JCdFWc0
2UhwqVn17KtTGxiJJ0W51ibGSaLMBo5Vg1SIRSdZvxppHUXAFg6uIoWZskS4j7eu
Kec=
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:47 2025 by rpki-client