Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/VJzavZ_Z7--mgTcREVjVIAX6Nvs.roa
File: VJzavZ_Z7--mgTcREVjVIAX6Nvs.roa (raw, json)
Hash identifier: LQAHkCMjU4wRtrZzd1Ey5tnv8CysV/CKeEDhwslpiH8=
Subject key identifier: 54:9C:DA:BD:9F:D9:EF:EF:A6:81:37:11:11:58:D5:20:05:FA:36:FB
Certificate issuer: /CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Certificate serial: 019EA8F33637A3AABA43A709458912EAA72A
Authority key identifier: E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/VJzavZ_Z7--mgTcREVjVIAX6Nvs.roa
Signing time: Mon 08 Jun 2026 20:36:11 +0000
ROA not before: Mon 08 Jun 2026 20:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205275
IP address blocks: 31.14.49.0/24 maxlen: 24
85.204.19.0/24 maxlen: 24
86.104.13.0/24 maxlen: 24
86.104.221.0/24 maxlen: 24
86.105.214.0/24 maxlen: 24
86.106.30.0/24 maxlen: 24
86.107.23.0/24 maxlen: 24
86.107.169.0/24 maxlen: 24
89.33.24.0/24 maxlen: 24
89.33.25.0/24 maxlen: 24
89.33.26.0/24 maxlen: 24
89.33.27.0/24 maxlen: 24
89.33.44.0/24 maxlen: 24
89.34.92.0/24 maxlen: 24
89.36.248.0/24 maxlen: 24
89.36.249.0/24 maxlen: 24
89.36.250.0/24 maxlen: 24
89.36.251.0/24 maxlen: 24
89.37.57.0/24 maxlen: 24
89.37.212.0/24 maxlen: 24
89.37.213.0/24 maxlen: 24
89.37.214.0/24 maxlen: 24
89.37.215.0/24 maxlen: 24
89.39.83.0/24 maxlen: 24
89.39.246.0/24 maxlen: 24
89.40.72.0/24 maxlen: 24
89.41.36.0/24 maxlen: 24
89.41.37.0/24 maxlen: 24
89.41.38.0/24 maxlen: 24
89.41.39.0/24 maxlen: 24
89.42.26.0/24 maxlen: 24
89.42.216.0/24 maxlen: 24
89.42.217.0/24 maxlen: 24
89.42.218.0/24 maxlen: 24
89.42.219.0/24 maxlen: 24
89.42.220.0/24 maxlen: 24
89.42.221.0/24 maxlen: 24
89.42.222.0/24 maxlen: 24
89.42.223.0/24 maxlen: 24
89.44.124.0/24 maxlen: 24
89.44.137.0/24 maxlen: 24
89.45.15.0/24 maxlen: 24
89.45.83.0/24 maxlen: 24
89.47.53.0/24 maxlen: 24
89.47.240.0/24 maxlen: 24
89.47.241.0/24 maxlen: 24
89.47.242.0/24 maxlen: 24
89.47.243.0/24 maxlen: 24
91.212.74.0/24 maxlen: 24
93.113.152.0/24 maxlen: 24
93.113.153.0/24 maxlen: 24
93.115.53.0/24 maxlen: 24
94.177.66.0/24 maxlen: 24
185.162.64.0/24 maxlen: 24
185.162.65.0/24 maxlen: 24
185.162.66.0/24 maxlen: 24
185.162.67.0/24 maxlen: 24
188.209.214.0/24 maxlen: 24
188.213.205.0/24 maxlen: 24
188.214.210.0/24 maxlen: 24
188.214.211.0/24 maxlen: 24
188.214.215.0/24 maxlen: 24
188.215.2.0/24 maxlen: 24
188.215.232.0/24 maxlen: 24
188.240.20.0/24 maxlen: 24
188.240.21.0/24 maxlen: 24
188.240.22.0/24 maxlen: 24
188.240.23.0/24 maxlen: 24
188.241.142.0/24 maxlen: 24
188.241.152.0/24 maxlen: 24
188.241.155.0/24 maxlen: 24
193.111.68.0/24 maxlen: 24
193.111.69.0/24 maxlen: 24
195.88.38.0/24 maxlen: 24
195.88.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a8:f3:36:37:a3:aa:ba:43:a7:09:45:89:12:ea:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e833461e9d2bdafcc29ad9189fb0acf1f33960a9
Validity
Not Before: Jun 8 20:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=549cdabd9fd9efefa68137111158d52005fa36fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:5a:2d:69:7d:b2:83:f2:f9:13:c5:6b:53:
cd:38:dd:9e:25:1f:b1:1d:8d:41:0a:79:ad:71:c4:
37:43:58:d4:39:e6:c8:24:e6:53:3c:ae:9d:ff:87:
67:bd:e7:fb:97:ad:12:62:58:b9:37:ed:47:d2:0f:
1e:ae:5e:58:74:6a:87:b0:dc:ec:78:99:cc:9f:be:
72:ef:de:01:16:2e:95:62:82:56:39:9d:40:99:fb:
9a:71:8a:bd:c3:a1:5d:a0:db:ad:6b:90:d7:4d:23:
c7:05:c1:9b:19:fd:b2:70:d4:6a:6a:9b:4d:42:d0:
70:b5:71:39:45:57:d7:ca:93:8e:4e:50:4f:85:0d:
a4:e7:65:1b:10:47:d5:62:8f:65:92:4e:99:25:f3:
02:a7:f5:9f:db:f8:8c:43:0c:ce:8f:43:d1:23:6c:
03:29:c5:3b:e4:8a:c0:c7:7a:26:88:38:73:75:de:
aa:17:fc:65:df:36:f0:cb:9d:35:86:e4:3e:1c:0d:
1e:37:f4:23:8a:6f:2a:33:b0:00:62:79:08:ff:07:
97:38:8b:12:3f:04:6d:07:e0:5d:45:37:bf:88:1b:
02:a5:9e:47:3e:c4:b5:4a:cc:86:68:79:d8:70:3e:
de:e7:9e:e7:19:41:40:8e:96:b5:ed:c7:d1:0e:f5:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9C:DA:BD:9F:D9:EF:EF:A6:81:37:11:11:58:D5:20:05:FA:36:FB
X509v3 Authority Key Identifier:
keyid:E8:33:46:1E:9D:2B:DA:FC:C2:9A:D9:18:9F:B0:AC:F1:F3:39:60:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/VJzavZ_Z7--mgTcREVjVIAX6Nvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/671194-51c8-4bcf-bd83-aefe8d178e6a/1/6DNGHp0r2vzCmtkYn7Cs8fM5YKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.49.0/24
85.204.19.0/24
86.104.13.0/24
86.104.221.0/24
86.105.214.0/24
86.106.30.0/24
86.107.23.0/24
86.107.169.0/24
89.33.24.0/22
89.33.44.0/24
89.34.92.0/24
89.36.248.0/22
89.37.57.0/24
89.37.212.0/22
89.39.83.0/24
89.39.246.0/24
89.40.72.0/24
89.41.36.0/22
89.42.26.0/24
89.42.216.0/21
89.44.124.0/24
89.44.137.0/24
89.45.15.0/24
89.45.83.0/24
89.47.53.0/24
89.47.240.0/22
91.212.74.0/24
93.113.152.0/23
93.115.53.0/24
94.177.66.0/24
185.162.64.0/22
188.209.214.0/24
188.213.205.0/24
188.214.210.0/23
188.214.215.0/24
188.215.2.0/24
188.215.232.0/24
188.240.20.0/22
188.241.142.0/24
188.241.152.0/24
188.241.155.0/24
193.111.68.0/23
195.88.38.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:2c:9d:99:8f:97:58:ae:c3:7e:d4:7a:4b:fd:f2:08:30:dc:
00:6c:a4:68:1c:4f:3f:89:47:51:14:4d:95:69:1c:9e:8a:07:
20:47:af:23:c2:dd:40:46:ca:e6:72:08:20:0a:89:14:75:b6:
36:9f:57:54:89:8a:f6:22:fb:d0:3c:8c:0d:36:6d:57:51:6e:
d6:33:91:29:75:41:5a:5d:5a:7f:7d:56:a6:1e:bf:2d:52:30:
a8:52:34:b2:7c:58:ca:a7:c7:9a:04:fd:03:51:b9:c2:a3:0d:
6f:f6:27:25:48:f6:ea:5c:8a:08:b1:6a:95:58:f6:09:3f:8c:
68:79:ab:c9:a6:48:9a:83:05:39:10:e4:b9:ad:17:9b:fe:0a:
44:af:4f:d1:71:42:7a:18:04:b2:2b:ad:b6:4b:6a:84:92:cd:
11:1f:59:8a:0d:86:fd:42:e0:e5:1e:f7:fb:53:e8:b7:b4:ee:
42:4b:0f:cc:d0:18:19:99:79:ad:0f:5d:c5:ec:e4:81:2d:5a:
a6:7e:97:b3:62:7f:b0:97:4b:f8:51:12:62:95:ee:02:5d:44:
de:5b:c3:9f:02:3d:c5:71:96:a3:8c:ae:64:9c:99:9f:15:39:
48:a7:a9:c6:f8:2d:92:1a:a8:78:3d:02:e9:9a:21:5d:20:7a:
18:ec:6f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:02 2026 by rpki-client