Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/VfwbSpRC8dNKpWiDZg8hxvtewBw.roa
File: VfwbSpRC8dNKpWiDZg8hxvtewBw.roa (raw, json)
Hash identifier: vDuZGm7+4eIX8NaKSeVIn0MtJeBkNNV+BeLlugAVQXU=
Subject key identifier: 55:FC:1B:4A:94:42:F1:D3:4A:A5:68:83:66:0F:21:C6:FB:5E:C0:1C
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 019EB5CADE38088B2426589E5109C6527514
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/VfwbSpRC8dNKpWiDZg8hxvtewBw.roa
Signing time: Thu 11 Jun 2026 08:27:11 +0000
ROA not before: Thu 11 Jun 2026 08:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 2.59.219.0/24 maxlen: 24
45.93.8.0/24 maxlen: 24
45.93.9.0/24 maxlen: 24
45.148.244.0/24 maxlen: 24
46.16.34.0/24 maxlen: 24
78.40.116.0/24 maxlen: 24
78.40.117.0/24 maxlen: 24
81.177.212.0/24 maxlen: 24
81.177.213.0/24 maxlen: 24
93.157.106.0/24 maxlen: 24
93.185.166.0/24 maxlen: 24
93.185.167.0/24 maxlen: 24
94.103.188.0/24 maxlen: 24
94.231.223.0/24 maxlen: 24
171.22.181.0/24 maxlen: 24
176.116.0.0/24 maxlen: 24
176.125.240.0/24 maxlen: 24
176.125.241.0/24 maxlen: 24
176.125.242.0/24 maxlen: 24
176.125.243.0/24 maxlen: 24
185.103.164.0/24 maxlen: 24
185.103.166.0/24 maxlen: 24
185.103.167.0/24 maxlen: 24
185.139.214.0/24 maxlen: 24
185.139.215.0/24 maxlen: 24
185.212.117.0/24 maxlen: 24
185.234.9.0/24 maxlen: 24
193.27.90.0/24 maxlen: 24
213.232.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:ca:de:38:08:8b:24:26:58:9e:51:09:c6:52:75:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jun 11 08:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55fc1b4a9442f1d34aa56883660f21c6fb5ec01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:9b:fc:9c:11:1f:33:ea:32:3c:bd:91:b7:
5b:25:b1:43:4c:1a:17:87:b6:bf:62:18:17:9e:77:
09:4c:f1:7c:d1:d5:e3:e8:c7:60:a1:d5:ec:46:2e:
9c:c5:ac:29:aa:5b:90:d6:cd:0d:c4:57:27:c5:9b:
a7:1c:86:25:23:d8:39:f0:24:57:1d:ad:a1:e8:6f:
1f:0f:a1:5d:7e:cd:0e:f2:a1:1c:37:d4:7e:54:b1:
e0:81:68:b2:02:fb:67:af:d2:c5:67:ab:30:92:64:
5b:cc:99:fb:45:73:64:cb:4b:f3:16:bc:32:d0:05:
10:f3:62:f7:da:93:fb:72:0b:9e:f8:dc:a8:5d:be:
e2:c3:a3:6f:af:dd:85:ec:88:8a:fb:72:92:7a:a8:
3a:a4:e9:23:f7:6f:30:e0:8c:ea:d6:af:52:6e:3a:
3a:64:a4:1b:74:cb:4b:56:4f:62:eb:5f:e5:90:51:
33:6c:01:e2:ca:65:b6:dd:61:e5:e4:a2:31:67:17:
15:37:ed:99:a7:f3:6d:97:44:e7:24:a1:76:bf:79:
9f:26:cb:e4:d4:c4:91:93:ec:c4:05:56:91:9d:bd:
bb:33:f5:09:b7:f4:75:3f:36:2a:16:dd:f4:79:fa:
7b:1e:cb:a4:00:ee:30:4c:86:71:45:24:d5:d6:9b:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:1B:4A:94:42:F1:D3:4A:A5:68:83:66:0F:21:C6:FB:5E:C0:1C
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/VfwbSpRC8dNKpWiDZg8hxvtewBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.219.0/24
45.93.8.0/23
45.148.244.0/24
46.16.34.0/24
78.40.116.0/23
81.177.212.0/23
93.157.106.0/24
93.185.166.0/23
94.103.188.0/24
94.231.223.0/24
171.22.181.0/24
176.116.0.0/24
176.125.240.0/22
185.103.164.0/24
185.103.166.0/23
185.139.214.0/23
185.212.117.0/24
185.234.9.0/24
193.27.90.0/24
213.232.235.0/24
Signature Algorithm: sha256WithRSAEncryption
68:8e:9d:f9:48:0d:75:ea:a1:f5:47:5d:e3:83:65:7e:6e:5b:
32:8f:22:71:4a:5b:ad:73:36:4a:98:d7:d4:83:95:bf:16:d0:
7b:65:00:a7:c3:c0:34:75:d9:0a:14:da:bd:76:4a:27:ba:c5:
67:40:c0:b3:b3:a9:ea:99:cc:c4:b6:46:69:c4:2e:f0:1f:8f:
1e:cb:cb:1b:21:3e:df:7e:c2:97:01:d6:35:9a:f7:68:70:64:
c9:c0:4e:27:d4:20:ce:14:8e:21:10:21:ea:9d:80:b9:ed:80:
3a:6a:a9:4c:7e:a8:b4:02:01:31:45:b3:12:c8:0f:a9:e4:4c:
5d:e9:69:a3:8a:98:b8:f3:0b:2f:24:8d:7c:80:73:de:ad:3b:
6d:7a:be:9e:26:e4:7e:4d:8a:aa:70:98:52:f3:41:f5:6b:e6:
a4:9a:65:6d:38:93:f6:d7:4b:a8:99:38:70:9a:2d:5d:7a:5c:
b5:3c:79:01:94:a7:f1:47:59:1d:8b:fa:f9:67:b6:80:cd:4d:
91:7c:05:81:f7:56:92:bc:47:79:55:eb:87:14:c2:36:f9:8b:
f9:7c:b9:fd:ef:cd:2c:76:d0:60:cf:40:ab:65:8e:92:38:d4:
ba:70:81:fb:4b:73:5f:7d:71:0a:33:ef:73:7f:a9:0a:04:60:
81:77:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:40 2026 by rpki-client