Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VVoHo4RN3aCEmRETV03wQpSHK64.roa
File: VVoHo4RN3aCEmRETV03wQpSHK64.roa (raw, json)
Hash identifier: G++PcSaRFYIxzyRC5T9LijGsAfY8qM8xyh7CXGMLEVI=
Subject key identifier: 55:5A:07:A3:84:4D:DD:A0:84:99:11:13:57:4D:F0:42:94:87:2B:AE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1A6C2610A5F52FC64B70295DD44C52170
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VVoHo4RN3aCEmRETV03wQpSHK64.roa
Signing time: Wed 04 Nov 2026 13:31:59 +0000
ROA not before: Wed 04 Nov 2026 13:31:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199412
IP address blocks: 9.247.44.0/24 maxlen: 24
9.247.48.0/24 maxlen: 24
9.247.81.0/24 maxlen: 24
9.247.179.0/24 maxlen: 24
78.17.69.0/24 maxlen: 24
78.17.108.0/24 maxlen: 24
89.125.170.0/24 maxlen: 24
206.245.136.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:c2:61:0a:5f:52:fc:64:b7:02:95:dd:44:c5:21:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 4 13:31:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=555a07a3844ddda084991113574df04294872bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:95:1f:9b:94:01:4e:ea:62:18:4f:8f:02:
b1:02:00:ef:ee:ef:f9:e8:d6:ba:dd:b7:70:65:a0:
ac:d8:7d:e3:f5:06:9e:aa:4f:4b:46:87:d7:49:64:
13:03:18:07:7b:55:95:7e:92:f1:3f:89:a7:34:aa:
5b:43:c0:f3:ed:1f:38:ad:7f:30:0c:56:b2:4d:9a:
a6:73:a4:38:df:8f:b7:fa:03:59:99:f3:de:b2:cb:
a8:c2:31:cc:e5:c6:ac:96:37:ff:31:35:b0:fa:2e:
b6:ba:2f:b7:9f:ad:ce:da:ee:a9:6c:83:28:d7:d2:
21:bd:ce:db:6d:28:a3:4f:d8:ec:94:cf:bb:23:42:
f5:8e:8c:de:80:34:8f:de:0d:83:da:f0:61:53:e7:
d1:cd:e2:59:f6:51:7e:4b:f9:5b:da:45:3d:56:6c:
4a:c0:5e:43:16:42:4f:03:81:59:96:51:bf:cd:65:
ae:4c:7a:4c:6e:18:14:d1:b6:c0:88:7e:1a:b0:fb:
f3:a3:11:a8:27:b2:bc:34:fa:d9:46:50:47:23:94:
fc:1b:3e:e1:e6:66:2c:aa:96:d1:55:29:c6:5a:72:
b7:4d:bd:5d:9e:96:bf:53:78:d9:d5:12:ec:b9:3c:
90:02:46:d3:de:1e:fe:b0:f2:23:85:30:7b:a8:9a:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:07:A3:84:4D:DD:A0:84:99:11:13:57:4D:F0:42:94:87:2B:AE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VVoHo4RN3aCEmRETV03wQpSHK64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.44.0/24
9.247.48.0/24
9.247.81.0/24
9.247.179.0/24
78.17.69.0/24
78.17.108.0/24
89.125.170.0/24
206.245.136.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
59:12:1f:b0:f4:f1:d8:82:35:c1:0b:39:83:67:15:f3:9c:48:
e9:33:53:81:9e:7b:c2:c6:a6:f8:77:7a:dd:4a:e1:5d:95:0c:
22:e4:79:cc:42:28:a5:c5:00:3f:cc:be:49:67:63:df:43:26:
80:16:c5:0f:93:73:26:f6:34:6d:99:7e:6b:b3:6e:69:e7:60:
18:18:4b:78:88:19:05:9a:06:4b:44:5f:71:36:e4:64:b4:43:
32:33:1a:93:91:a2:bf:66:0b:dd:c6:c2:f7:5a:bc:02:06:5c:
73:b6:bd:e0:a9:1f:7b:32:a9:7a:97:72:62:28:28:ea:d8:01:
5f:16:2e:db:73:36:25:3f:5b:e2:89:03:e6:a2:08:3c:57:16:
f0:2a:d8:ab:c7:65:8f:51:3d:7f:e2:1a:a2:56:06:09:37:0a:
e1:52:5a:e8:e7:ae:be:1e:7f:87:8d:e2:ba:02:57:1b:24:f7:
fb:0a:17:37:d9:22:7a:f3:48:6f:ae:6a:1d:3c:87:9f:b5:2e:
23:d3:a8:3f:9d:e8:93:67:9c:ca:1c:3c:40:23:f3:f6:75:1a:
10:dc:fe:2a:a2:c9:0e:9a:93:20:d9:3a:33:c8:d3:d1:fd:35:
54:1e:69:2d:8b:20:2d:9b:0a:82:a8:05:a3:b5:b6:34:31:79:
88:3c:17:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:11 2026 by rpki-client