Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vMqDF6gjcK8zFvw0OGFxUhR4aFs.roa
File: vMqDF6gjcK8zFvw0OGFxUhR4aFs.roa (raw, json)
Hash identifier: O1UaeAxvBKxAX/Cona/josLLFEdiQCFsI/70gWWiGpg=
Subject key identifier: BC:CA:83:17:A8:23:70:AF:33:16:FC:34:38:61:71:52:14:78:68:5B
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A19F108BBEA423556A6C74CEA62D2A7E80
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vMqDF6gjcK8zFvw0OGFxUhR4aFs.roa
Signing time: Tue 03 Nov 2026 01:40:23 +0000
ROA not before: Tue 03 Nov 2026 01:40:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 5.182.185.0/24 maxlen: 24
36.255.212.0/24 maxlen: 24
45.67.140.0/24 maxlen: 24
45.248.55.0/24 maxlen: 24
92.249.29.0/24 maxlen: 24
94.154.177.0/24 maxlen: 24
94.154.180.0/23 maxlen: 23
94.154.183.0/24 maxlen: 24
103.105.165.0/24 maxlen: 24
103.216.199.0/24 maxlen: 24
162.218.88.0/24 maxlen: 24
162.218.91.0/24 maxlen: 24
185.52.136.0/24 maxlen: 24
185.171.126.0/24 maxlen: 24
185.230.122.0/24 maxlen: 24
185.253.122.0/24 maxlen: 24
192.145.71.0/24 maxlen: 24
193.160.80.0/22 maxlen: 22
212.60.14.0/24 maxlen: 24
217.197.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9f:10:8b:be:a4:23:55:6a:6c:74:ce:a6:2d:2a:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Nov 3 01:40:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcca8317a82370af3316fc34386171521478685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f5:a2:d3:38:d6:17:72:1d:f5:4f:77:95:88:
ec:cc:e4:e0:40:d1:0f:27:bc:72:4b:23:67:21:09:
a1:48:29:89:64:87:83:41:ab:d5:31:f9:24:0a:3e:
3a:49:52:7b:b8:09:3b:6d:05:9f:2b:1b:89:eb:20:
93:2c:45:3f:31:02:73:e7:e1:8f:94:e3:d5:df:f8:
49:43:cf:86:7f:ae:52:4f:b5:87:8a:4a:8a:63:f3:
3f:65:d5:a4:0a:95:4c:f8:3e:81:c8:9a:bc:de:f4:
0f:38:cb:90:a3:49:a4:44:e6:f0:05:c1:62:bd:0c:
f8:6d:c0:cc:8a:15:18:5f:11:3b:0a:e5:68:c9:08:
99:6d:0a:f3:aa:02:bd:b3:92:ba:7e:84:03:85:d1:
69:12:d4:80:a2:b7:1a:45:73:f1:78:5b:38:21:72:
3e:ce:0a:8a:58:ed:c8:2a:2c:37:87:21:74:ac:b2:
c9:3b:dc:16:51:7c:84:ec:5b:4a:d2:1d:94:2b:54:
cf:ca:1f:62:66:56:13:8c:c2:c4:88:be:f0:47:f9:
c4:e6:f3:ae:7d:9a:ad:c1:7b:1f:26:8c:50:8b:2f:
02:5d:5f:91:2e:20:ee:8d:65:15:c3:48:88:f3:24:
8b:00:36:a8:63:0d:9f:65:50:ba:36:43:e3:54:71:
a0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:83:17:A8:23:70:AF:33:16:FC:34:38:61:71:52:14:78:68:5B
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/vMqDF6gjcK8zFvw0OGFxUhR4aFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.185.0/24
36.255.212.0/24
45.67.140.0/24
45.248.55.0/24
92.249.29.0/24
94.154.177.0/24
94.154.180.0/23
94.154.183.0/24
103.105.165.0/24
103.216.199.0/24
162.218.88.0/24
162.218.91.0/24
185.52.136.0/24
185.171.126.0/24
185.230.122.0/24
185.253.122.0/24
192.145.71.0/24
193.160.80.0/22
212.60.14.0/24
217.197.170.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8b:ee:27:e7:01:17:b6:a2:76:9f:d9:e6:a9:ab:73:14:59:
75:41:b1:7f:6a:d9:48:96:dd:f9:98:05:90:a7:e6:06:13:fa:
84:d7:bb:0a:ae:e5:1b:2e:e2:da:03:a2:63:44:1c:ca:8a:68:
36:a3:4e:20:10:ab:8e:00:b0:17:e1:7e:39:92:06:11:9c:6f:
31:43:73:d5:d2:31:97:bd:82:72:64:a4:ab:bf:e9:c1:a9:a7:
ed:ae:b9:50:d7:5f:a2:d6:97:55:96:52:2f:3f:6f:bc:4c:ed:
ab:29:8e:74:e5:0e:7f:2e:a2:56:d1:46:5b:37:9b:21:6b:1a:
41:a0:dc:ed:c3:5e:78:30:88:b5:68:8d:e4:f7:91:b7:47:4a:
b7:05:2a:3b:37:d6:74:b6:ff:41:88:ef:a3:27:17:ec:c7:c4:
61:95:3b:dc:80:d9:db:e8:7b:10:87:ed:e2:58:61:00:da:0d:
69:b0:ec:a3:6a:b8:04:4d:79:27:4b:1a:8e:33:26:fd:cf:bd:
8c:23:7c:70:7d:a7:b2:cd:f6:b6:e0:e1:92:d6:01:2d:d8:40:
61:ef:e0:b7:6c:c9:a7:a7:06:23:aa:9f:4d:4a:7b:1b:08:90:
90:17:2b:ff:69:ac:76:22:82:5f:45:e8:e3:5b:de:4e:f9:a7:
87:65:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:52:09 2026 by rpki-client