Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/VacFSWg_f3-rXmH4UCeoVfxh0ME.roa
File: VacFSWg_f3-rXmH4UCeoVfxh0ME.roa (raw, json)
Hash identifier: zFaQS9Ep4aEmfuttInghGwAVW6Y9xBDu5Cr1ZSTqZ2A=
Subject key identifier: 55:A7:05:49:68:3F:7F:7F:AB:5E:61:F8:50:27:A8:55:FC:61:D0:C1
Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Certificate serial: 01A0673D60A0030D170AED70BD05D6C7DCEC
Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/VacFSWg_f3-rXmH4UCeoVfxh0ME.roa
Signing time: Thu 03 Sep 2026 12:27:50 +0000
ROA not before: Thu 03 Sep 2026 12:27:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43937
IP address blocks: 78.24.48.0/24 maxlen: 24
78.24.49.0/24 maxlen: 24
78.24.50.0/24 maxlen: 24
78.24.51.0/24 maxlen: 24
78.24.52.0/24 maxlen: 24
78.24.53.0/24 maxlen: 24
78.24.54.0/24 maxlen: 24
78.24.55.0/24 maxlen: 24
82.116.128.0/24 maxlen: 24
82.116.129.0/24 maxlen: 24
82.116.130.0/24 maxlen: 24
82.116.131.0/24 maxlen: 24
82.116.132.0/24 maxlen: 24
82.116.133.0/24 maxlen: 24
82.116.134.0/24 maxlen: 24
82.116.135.0/24 maxlen: 24
82.116.136.0/24 maxlen: 24
82.116.137.0/24 maxlen: 24
82.116.138.0/24 maxlen: 24
82.116.139.0/24 maxlen: 24
82.116.140.0/24 maxlen: 24
82.116.141.0/24 maxlen: 24
82.116.142.0/24 maxlen: 24
82.116.143.0/24 maxlen: 24
82.116.144.0/24 maxlen: 24
82.116.145.0/24 maxlen: 24
82.116.146.0/24 maxlen: 24
82.116.147.0/24 maxlen: 24
82.116.148.0/24 maxlen: 24
82.116.149.0/24 maxlen: 24
82.116.150.0/24 maxlen: 24
82.116.151.0/24 maxlen: 24
82.116.152.0/24 maxlen: 24
82.116.153.0/24 maxlen: 24
82.116.154.0/24 maxlen: 24
82.116.155.0/24 maxlen: 24
82.116.156.0/24 maxlen: 24
82.116.157.0/24 maxlen: 24
82.116.158.0/24 maxlen: 24
82.116.159.0/24 maxlen: 24
94.190.144.0/24 maxlen: 24
94.190.145.0/24 maxlen: 24
94.190.146.0/24 maxlen: 24
94.190.147.0/24 maxlen: 24
94.190.148.0/24 maxlen: 24
94.190.149.0/24 maxlen: 24
94.190.150.0/24 maxlen: 24
94.190.151.0/24 maxlen: 24
94.190.152.0/24 maxlen: 24
94.190.153.0/24 maxlen: 24
94.190.154.0/24 maxlen: 24
94.190.155.0/24 maxlen: 24
94.190.156.0/24 maxlen: 24
94.190.157.0/24 maxlen: 24
94.190.158.0/24 maxlen: 24
94.190.159.0/24 maxlen: 24
178.255.8.0/24 maxlen: 24
178.255.9.0/24 maxlen: 24
178.255.10.0/24 maxlen: 24
178.255.11.0/24 maxlen: 24
178.255.12.0/24 maxlen: 24
178.255.13.0/24 maxlen: 24
178.255.14.0/24 maxlen: 24
178.255.15.0/24 maxlen: 24
213.187.224.0/24 maxlen: 24
213.187.225.0/24 maxlen: 24
213.187.226.0/24 maxlen: 24
213.187.227.0/24 maxlen: 24
213.187.228.0/22 maxlen: 24
213.187.228.0/24 maxlen: 24
213.187.229.0/24 maxlen: 24
213.187.230.0/24 maxlen: 24
213.187.231.0/24 maxlen: 24
213.187.232.0/24 maxlen: 24
213.187.233.0/24 maxlen: 24
213.187.235.0/24 maxlen: 24
213.187.236.0/24 maxlen: 24
213.187.237.0/24 maxlen: 24
213.187.238.0/24 maxlen: 24
213.187.239.0/24 maxlen: 24
213.187.248.0/21 maxlen: 21
213.187.248.0/24 maxlen: 24
213.187.249.0/24 maxlen: 24
213.187.250.0/24 maxlen: 24
213.187.251.0/24 maxlen: 24
213.187.252.0/24 maxlen: 24
213.187.253.0/24 maxlen: 24
213.187.254.0/24 maxlen: 24
213.187.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:3d:60:a0:03:0d:17:0a:ed:70:bd:05:d6:c7:dc:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c
Validity
Not Before: Sep 3 12:27:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55a70549683f7f7fab5e61f85027a855fc61d0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:0f:aa:64:a1:2a:bb:b3:f7:5c:bb:69:07:
60:de:83:09:3d:e8:d4:7e:c9:db:c9:e3:46:9a:2a:
46:87:a1:86:12:b9:af:8e:c9:20:f6:65:57:2c:ec:
a5:ac:44:d0:bb:a9:82:67:a7:b4:8b:8e:c4:48:eb:
c3:64:85:9d:7a:3a:45:25:14:70:8a:b9:7e:14:74:
2f:16:58:60:fb:83:24:f8:6c:f9:a2:e7:1a:2d:0b:
84:ba:43:cc:db:88:c0:2a:e9:10:f5:e8:5b:d6:0f:
bc:4b:f7:58:ef:47:84:f0:52:f5:7a:60:44:c4:be:
a8:73:7c:01:bb:44:70:04:4c:14:1a:60:51:5e:1e:
f8:54:47:9f:96:e6:dd:f2:a6:98:66:e5:a6:2f:7f:
30:cb:f5:9e:27:38:fe:e7:2c:39:d7:35:a3:09:ce:
be:46:c7:77:17:37:fc:c0:99:bc:c7:a1:c0:19:a4:
da:ee:2b:73:98:5a:24:4c:b8:c4:ea:73:b1:82:f3:
b9:22:e4:f2:8f:c4:45:52:26:7f:88:87:0a:65:c9:
7e:8c:17:3c:53:ad:6e:e6:75:fa:0b:df:bb:6c:34:
9a:f6:06:27:3b:cc:ae:fd:e8:6d:ef:59:09:fa:62:
11:9a:78:02:c6:d9:e3:b0:10:b1:85:29:b2:f0:cb:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A7:05:49:68:3F:7F:7F:AB:5E:61:F8:50:27:A8:55:FC:61:D0:C1
X509v3 Authority Key Identifier:
keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/VacFSWg_f3-rXmH4UCeoVfxh0ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.48.0/21
82.116.128.0/19
94.190.144.0/20
178.255.8.0/21
213.187.224.0-213.187.233.255
213.187.235.0-213.187.239.255
213.187.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:d5:53:f7:68:c8:f9:ba:cf:0a:eb:32:32:85:46:16:3c:00:
e6:40:bd:fe:4c:fd:37:89:54:ae:40:28:45:b4:90:c1:b5:d1:
88:43:55:eb:45:b8:0b:2a:50:da:92:b9:be:f6:dc:33:0d:8d:
db:f5:fa:b4:d2:5d:25:b6:da:ef:2a:b2:89:bf:fb:f9:e8:3f:
56:06:43:61:a6:df:7f:6c:95:eb:62:81:43:c1:1e:03:a1:e7:
29:7d:e2:4f:69:c0:3d:5c:11:45:24:87:b2:06:04:b2:45:77:
dc:ce:3e:53:6f:27:74:fd:48:3d:fb:a0:1f:90:1d:28:90:03:
7f:b3:5e:c8:cf:8b:dd:47:90:d9:06:c7:d7:d7:77:7a:e1:a3:
80:b8:af:0f:81:3a:f5:f7:45:cc:e9:21:99:0c:8e:88:d2:4b:
0e:27:3f:87:1e:06:a1:0a:3e:21:3f:ce:a1:5e:2d:54:73:ff:
50:cb:dc:49:92:4d:d1:1c:7b:f2:3b:94:a7:1b:2a:a4:d1:9a:
4d:4e:e7:60:44:6e:b5:57:01:b8:c3:05:a2:2b:9c:02:5b:38:
46:48:6b:b9:f2:a9:10:a8:7a:5b:da:f8:89:77:66:9c:e6:91:
4b:41:2e:f0:24:ac:4f:28:f5:b9:35:f6:db:ae:bc:5e:25:ef:
03:ca:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:55:05 2026 by rpki-client