Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vcg6zrFIH82lKzbKRD_WhJf4YJ0.roa
File: vcg6zrFIH82lKzbKRD_WhJf4YJ0.roa (raw, json)
Hash identifier: j8iDh2+ItlkAD8ou6Qa+20T+7H1ThRC+U8UXxqc/OtE=
Subject key identifier: BD:C8:3A:CE:B1:48:1F:CD:A5:2B:36:CA:44:3F:D6:84:97:F8:60:9D
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FA7A54B8E841A490CD9B08B5901FAC725
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vcg6zrFIH82lKzbKRD_WhJf4YJ0.roa
Signing time: Tue 28 Jul 2026 07:34:15 +0000
ROA not before: Tue 28 Jul 2026 07:34:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 82.108.90.0/24 maxlen: 24
82.108.110.0/24 maxlen: 24
82.108.115.0/24 maxlen: 24
82.108.138.0/24 maxlen: 24
82.110.145.0/24 maxlen: 24
82.110.153.0/24 maxlen: 24
82.110.157.0/24 maxlen: 24
82.110.232.0/24 maxlen: 24
85.189.16.0/24 maxlen: 24
85.189.36.0/24 maxlen: 24
87.82.213.0/24 maxlen: 24
87.82.232.0/24 maxlen: 24
87.82.240.0/24 maxlen: 24
87.82.241.0/24 maxlen: 24
87.82.243.0/24 maxlen: 24
87.82.245.0/24 maxlen: 24
87.82.247.0/24 maxlen: 24
87.83.86.0/24 maxlen: 24
87.83.125.0/24 maxlen: 24
87.83.161.0/24 maxlen: 24
87.83.163.0/24 maxlen: 24
87.83.174.0/24 maxlen: 24
87.83.192.0/24 maxlen: 24
87.83.216.0/24 maxlen: 24
87.84.64.0/24 maxlen: 24
87.84.76.0/24 maxlen: 24
87.84.79.0/24 maxlen: 24
87.84.128.0/24 maxlen: 24
87.84.130.0/24 maxlen: 24
87.84.132.0/24 maxlen: 24
87.84.134.0/24 maxlen: 24
87.84.152.0/24 maxlen: 24
87.84.154.0/24 maxlen: 24
87.84.156.0/24 maxlen: 24
87.84.158.0/24 maxlen: 24
87.84.218.0/24 maxlen: 24
87.84.237.0/24 maxlen: 24
87.84.239.0/24 maxlen: 24
87.85.77.0/24 maxlen: 24
87.85.250.0/24 maxlen: 24
87.86.100.0/24 maxlen: 24
87.86.105.0/24 maxlen: 24
87.86.169.0/24 maxlen: 24
87.86.186.0/24 maxlen: 24
87.86.216.0/24 maxlen: 24
212.135.143.0/24 maxlen: 24
217.79.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:a5:4b:8e:84:1a:49:0c:d9:b0:8b:59:01:fa:c7:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 07:34:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc83aceb1481fcda52b36ca443fd68497f8609d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:35:34:36:8b:1f:8b:bf:00:6e:21:0e:6f:9a:
49:92:ca:1b:9d:ab:33:5b:ab:0b:0f:3a:dc:34:10:
15:eb:67:98:3b:a7:8d:25:85:18:16:79:ca:a3:3e:
df:7e:b1:06:93:f9:0f:50:3e:a1:e1:0d:e1:8c:1c:
c1:08:c0:4d:8d:3e:da:31:de:e6:5d:c8:d3:3b:b5:
bf:0d:98:a2:3f:b0:93:46:18:27:3f:af:08:f7:8b:
75:9f:dd:bd:bc:a7:d6:33:0a:d1:c4:e9:a0:bb:75:
64:74:50:97:a3:12:ab:bc:9c:60:d7:a8:5f:e1:26:
63:be:f6:e7:74:74:f0:83:19:95:45:72:26:23:e8:
0d:12:27:6d:a6:9d:69:87:8e:6d:24:df:35:d4:6a:
e9:1f:9a:9f:92:64:72:ff:b2:13:df:d8:cd:ab:88:
9e:dc:d2:79:45:ae:fc:61:45:e4:3f:f6:22:ee:5d:
00:29:9d:e6:f7:89:82:15:83:44:a2:4d:df:63:1a:
69:37:a0:0c:79:41:42:3b:8b:4f:77:21:6d:48:5a:
68:24:33:78:20:80:b1:6a:a8:61:2a:4d:37:d6:bc:
45:1e:6d:7c:b2:1a:6b:04:47:e3:f0:0f:0d:6b:3e:
55:c7:44:00:16:7a:74:7b:f8:66:40:7a:ae:63:9b:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C8:3A:CE:B1:48:1F:CD:A5:2B:36:CA:44:3F:D6:84:97:F8:60:9D
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vcg6zrFIH82lKzbKRD_WhJf4YJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.90.0/24
82.108.110.0/24
82.108.115.0/24
82.108.138.0/24
82.110.145.0/24
82.110.153.0/24
82.110.157.0/24
82.110.232.0/24
85.189.16.0/24
85.189.36.0/24
87.82.213.0/24
87.82.232.0/24
87.82.240.0/23
87.82.243.0/24
87.82.245.0/24
87.82.247.0/24
87.83.86.0/24
87.83.125.0/24
87.83.161.0/24
87.83.163.0/24
87.83.174.0/24
87.83.192.0/24
87.83.216.0/24
87.84.64.0/24
87.84.76.0/24
87.84.79.0/24
87.84.128.0/24
87.84.130.0/24
87.84.132.0/24
87.84.134.0/24
87.84.152.0/24
87.84.154.0/24
87.84.156.0/24
87.84.158.0/24
87.84.218.0/24
87.84.237.0/24
87.84.239.0/24
87.85.77.0/24
87.85.250.0/24
87.86.100.0/24
87.86.105.0/24
87.86.169.0/24
87.86.186.0/24
87.86.216.0/24
212.135.143.0/24
217.79.113.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:4c:23:19:8b:4a:ec:d2:d2:fb:e5:f5:31:dd:49:42:d1:71:
8c:2a:e0:8c:02:08:42:ab:11:ef:ee:9e:8a:4d:49:e5:e8:32:
f5:99:e9:1f:7c:b0:dd:1e:24:25:1b:41:8a:6d:c7:60:63:e7:
f3:3b:72:fb:e6:fe:f2:ba:ff:d8:6a:1e:fb:53:5f:3d:ce:e7:
da:d6:d5:82:89:e4:85:d0:f8:23:5d:30:e0:8b:56:51:96:07:
22:ff:54:17:53:5c:ea:56:fb:d9:c3:55:13:a5:99:36:4d:53:
4a:a6:e4:a9:18:ff:65:f4:10:53:73:b2:ab:67:37:a1:87:ab:
0b:c8:36:9e:4b:b1:c1:3f:45:82:a9:2f:d7:4b:b4:98:67:be:
0f:be:0b:67:c5:90:b2:19:52:b3:e2:8c:02:e1:09:52:8b:46:
74:92:08:02:6e:f3:bc:28:70:a1:70:4d:06:b8:33:8b:ad:74:
fb:84:9a:9b:09:31:a0:33:2b:2b:6b:29:ed:bd:bd:17:f9:24:
d4:12:9d:2b:3e:66:2c:ab:0b:56:21:ac:f8:8e:1a:d4:69:77:
e6:42:35:eb:b1:45:94:7d:04:32:41:2a:0b:59:69:25:39:5f:
37:97:88:5f:cd:51:0e:a2:90:3d:48:93:13:36:a3:66:fd:0c:
59:71:3a:81
-----BEGIN CERTIFICATE-----
MIIGFTCCBP2gAwIBAgISAZ+npUuOhBpJDNmwi1kB+sclMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzI4MDczNDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGM4M2FjZWIxNDgxZmNkYTUyYjM2Y2E0NDNmZDY4NDk3Zjg2MDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jU0Nosfi78AbiEOb5pJksobnasz
W6sLDzrcNBAV62eYO6eNJYUYFnnKoz7ffrEGk/kPUD6h4Q3hjBzBCMBNjT7aMd7m
XcjTO7W/DZiiP7CTRhgnP68I94t1n929vKfWMwrRxOmgu3VkdFCXoxKrvJxg16hf
4SZjvvbndHTwgxmVRXImI+gNEidtpp1ph45tJN811GrpH5qfkmRy/7IT39jNq4ie
3NJ5Ra78YUXkP/Yi7l0AKZ3m94mCFYNEok3fYxppN6AMeUFCO4tPdyFtSFpoJDN4
IICxaqhhKk031rxFHm18shprBEfj8A8Naz5Vx0QAFnp0e/hmQHquY5v4mQIDAQAB
o4IDITCCAx0wHQYDVR0OBBYEFL3IOs6xSB/NpSs2ykQ/1oSX+GCdMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvdmNnNnpyRklIODJsS3piS1JEX1doSmY0WUowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNQYIKwYBBQUHAQcBAf8EggEkMIIBIDCCARwEAgABMIIB
FAMEAFJsWgMEAFJsbgMEAFJscwMEAFJsigMEAFJukQMEAFJumQMEAFJunQMEAFJu
6AMEAFW9EAMEAFW9JAMEAFdS1QMEAFdS6AMEAVdS8AMEAFdS8wMEAFdS9QMEAFdS
9wMEAFdTVgMEAFdTfQMEAFdToQMEAFdTowMEAFdTrgMEAFdTwAMEAFdT2AMEAFdU
QAMEAFdUTAMEAFdUTwMEAFdUgAMEAFdUggMEAFdUhAMEAFdUhgMEAFdUmAMEAFdU
mgMEAFdUnAMEAFdUngMEAFdU2gMEAFdU7QMEAFdU7wMEAFdVTQMEAFdV+gMEAFdW
ZAMEAFdWaQMEAFdWqQMEAFdWugMEAFdW2AMEANSHjwMEANlPcTANBgkqhkiG9w0B
AQsFAAOCAQEAyEwjGYtK7NLS++X1Md1JQtFxjCrgjAIIQqsR7+6eik1J5egy9Znp
H3yw3R4kJRtBim3HYGPn8zty++b+8rr/2Goe+1NfPc7n2tbVgonkhdD4I10w4ItW
UZYHIv9UF1Nc6lb72cNVE6WZNk1TSqbkqRj/ZfQQU3Oyq2c3oYerC8g2nkuxwT9F
gqkv10u0mGe+D74LZ8WQshlSs+KMAuEJUotGdJIIAm7zvChwoXBNBrgzi610+4Sa
mwkxoDMrK2sp7b29F/kk1BKdKz5mLKsLViGs+I4a1Gl35kI167FFlH0EMkEqC1lp
JTlfN5eIX81RDqKQPUiTEzajZv0MWXE6gQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:44:37 2026 by rpki-client