Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VZV85J3O-HHHsBcSslAjQVj3NtA.roa
File: VZV85J3O-HHHsBcSslAjQVj3NtA.roa (raw, json)
Hash identifier: UtdztelNTGNUgbcZJmU9Al0h7wkWdaiDGwavCpxBc5g=
Subject key identifier: 55:95:7C:E4:9D:CE:F8:71:C7:B0:17:12:B2:50:23:41:58:F7:36:D0
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019D72929854FC1A7346BC1F2C519D0E7736
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VZV85J3O-HHHsBcSslAjQVj3NtA.roa
Signing time: Thu 09 Apr 2026 14:08:22 +0000
ROA not before: Thu 09 Apr 2026 14:08:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36621
IP address blocks: 81.19.194.0/24 maxlen: 24
81.19.194.30/32 maxlen: 32
81.19.195.0/24 maxlen: 24
81.19.195.30/32 maxlen: 32
81.19.195.31/32 maxlen: 32
185.100.0.0/24 maxlen: 24
185.100.0.53/32 maxlen: 32
2a10:eec0:abcd::/48 maxlen: 48
2a10:eec0:abcd::30/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:92:98:54:fc:1a:73:46:bc:1f:2c:51:9d:0e:77:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Apr 9 14:08:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55957ce49dcef871c7b01712b250234158f736d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3e:aa:95:b3:99:75:cc:d1:6f:6e:27:01:96:
07:b2:76:f1:fd:43:14:ee:3d:e2:ae:67:dd:40:8a:
8c:d1:88:0e:31:a4:8a:fd:da:91:6f:5a:7a:3b:1a:
8b:2c:e1:c7:eb:0c:80:4b:68:07:fc:87:3e:3f:95:
ad:a9:8d:97:2a:6b:12:da:b9:85:ce:d9:ff:57:47:
ec:25:32:87:d1:73:23:29:77:b3:14:78:7d:97:29:
07:2a:c9:4f:15:46:12:52:3e:8c:ec:63:4f:f5:22:
46:92:c5:c7:43:84:6c:ad:f0:dd:ad:22:18:b0:65:
30:0d:c1:3d:89:3b:82:02:31:6e:4e:a6:a4:a7:05:
54:67:85:9a:90:1b:a0:6a:d6:96:d1:f6:53:65:8c:
18:83:d0:7f:5f:04:05:74:78:11:a2:33:71:49:03:
24:3e:bd:25:0b:63:42:af:a2:00:2c:c0:f2:60:87:
a3:29:29:f7:bc:a0:08:7a:6f:f6:79:59:fa:c0:09:
46:59:0b:15:f6:f5:09:8a:d6:44:27:c8:a4:a1:0c:
c7:0e:cf:9b:5c:4c:d8:3a:92:72:0b:70:d6:1f:90:
49:14:be:73:63:44:54:e8:c1:a5:ed:25:9e:f1:a0:
2e:e5:f2:af:ad:ce:aa:d9:d8:92:77:6e:a0:57:33:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:95:7C:E4:9D:CE:F8:71:C7:B0:17:12:B2:50:23:41:58:F7:36:D0
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/VZV85J3O-HHHsBcSslAjQVj3NtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.194.0/23
185.100.0.0/24
IPv6:
2a10:eec0:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
83:d9:8f:37:0d:62:a6:fa:47:0a:96:24:33:35:97:6c:ba:9a:
af:92:1c:da:be:dd:fa:5f:85:5a:86:a1:04:48:a6:d5:93:90:
73:07:6f:54:c2:1f:5e:54:d9:cb:d3:7d:bb:f3:1c:4d:c5:13:
87:a6:ac:a4:95:d7:1f:65:b6:33:b6:32:52:ba:0c:dd:0d:63:
06:1c:59:3e:97:fd:bb:9c:9e:a8:66:55:1a:82:81:b7:2d:a1:
e3:44:2d:de:25:59:a5:0e:8f:9b:7f:f2:b3:b5:0f:4b:39:e5:
03:ef:01:66:9a:9f:d5:6a:87:58:0e:36:96:0f:ca:b7:76:76:
da:b3:d4:a0:88:98:87:20:11:d7:91:46:e4:60:50:1d:e8:dd:
81:8d:2b:8b:cf:cc:26:50:2e:7b:48:ab:e0:7e:b4:50:34:b8:
53:8b:f6:21:70:10:01:d8:f4:eb:98:c1:db:7e:4f:33:74:46:
e3:8e:68:6c:93:7f:b9:f9:e7:84:ad:43:cb:e1:a5:62:38:ce:
d4:c0:ce:55:ce:a1:7d:51:bf:c2:f7:aa:a8:e4:b5:89:f2:7d:
7e:53:a3:6d:d1:97:5d:6e:46:70:b6:f5:35:66:4b:9f:8c:42:
41:1f:19:60:f0:37:25:39:81:93:b9:c2:2b:aa:9e:0b:da:54:
30:90:1a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:59 2026 by rpki-client