Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VdJOiVYtv00QQraoMmqt8fgHHP8.roa
File: VdJOiVYtv00QQraoMmqt8fgHHP8.roa (raw, json)
Hash identifier: 7YbndvT5Q38bmpJidJpxhnP3BWUe5fLZB/invQCB7u0=
Subject key identifier: 55:D2:4E:89:56:2D:BF:4D:10:42:B6:A8:32:6A:AD:F1:F8:07:1C:FF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F89AFE8C75FFFC8CE85D48017339C6B68
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VdJOiVYtv00QQraoMmqt8fgHHP8.roa
Signing time: Wed 22 Jul 2026 11:57:14 +0000
ROA not before: Wed 22 Jul 2026 11:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.72.10.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
194.58.67.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
194.87.75.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.152.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.183.0/24 maxlen: 24
194.87.185.0/24 maxlen: 24
194.87.211.0/24 maxlen: 24
194.87.212.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.135.24.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.29.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.50.0/23 maxlen: 23
195.133.56.0/24 maxlen: 24
195.133.57.0/24 maxlen: 24
195.133.58.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
195.133.61.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.95.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
212.192.247.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
212.193.10.0/24 maxlen: 24
212.193.15.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
212.193.28.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:af:e8:c7:5f:ff:c8:ce:85:d4:80:17:33:9c:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 22 11:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55d24e89562dbf4d1042b6a8326aadf1f8071cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:07:e9:17:1f:a8:c1:a1:ac:4c:20:7e:be:
b9:06:fa:a7:91:13:a7:fe:63:eb:25:fc:31:8b:51:
b0:e8:6a:73:6d:b6:29:b8:27:60:68:fc:59:e9:e5:
70:7c:aa:c8:c7:21:f7:31:db:3d:3a:d1:b1:b6:a3:
e9:af:52:39:4e:e2:02:d9:97:89:d9:c7:dd:a8:67:
d0:4f:c5:7c:ba:4e:e6:71:f5:47:9b:fa:bb:ac:72:
73:0c:79:52:05:3f:7a:00:50:9e:ea:12:25:f6:d8:
69:76:a5:47:81:8c:96:d9:dd:40:97:40:b7:67:6e:
ce:75:4b:07:1c:e5:94:70:83:84:53:24:0e:78:e4:
0c:2c:ee:e6:16:62:6a:22:8c:fb:38:85:30:48:02:
0e:8f:9c:bc:c7:be:2b:42:12:d7:2d:69:4b:6c:df:
a5:95:52:0a:92:fb:ba:70:78:53:75:99:92:eb:d2:
e9:c4:d4:95:be:a6:39:9c:c4:f0:82:3c:d9:99:58:
61:a7:de:82:74:bb:2b:78:c3:f2:39:4a:72:f4:e3:
67:63:55:60:3e:cc:6c:e9:7d:34:89:c6:f7:8d:4c:
bd:e9:8d:5b:6f:0e:15:77:50:33:b1:27:6d:9f:22:
03:0e:df:e8:c9:d0:43:6c:74:8c:57:d4:3a:8e:11:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D2:4E:89:56:2D:BF:4D:10:42:B6:A8:32:6A:AD:F1:F8:07:1C:FF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VdJOiVYtv00QQraoMmqt8fgHHP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.188.0/24
192.124.190.0/24
193.124.5.0/24
193.124.7.0-193.124.8.255
193.124.94.0/24
193.124.206.0/24
194.58.43.0/24
194.58.58.0/24
194.58.67.0/24
194.58.155.0/24
194.87.3.0/24
194.87.6.0/23
194.87.36.0/24
194.87.53.0/24
194.87.59.0/24
194.87.63.0/24
194.87.75.0/24
194.87.116.0/23
194.87.119.0-194.87.120.255
194.87.122.0/24
194.87.136.0/24
194.87.152.0/24
194.87.160.0/24
194.87.163.0/24
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.179.0-194.87.183.255
194.87.185.0/24
194.87.211.0-194.87.212.255
194.87.229.0/24
194.87.231.0/24
194.135.23.0-194.135.24.255
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.12.0/24
195.133.19.0/24
195.133.24.0/23
195.133.29.0/24
195.133.40.0/23
195.133.50.0/23
195.133.56.0-195.133.58.255
195.133.60.0/23
195.133.72.0/24
195.133.80.0/24
195.133.82.0/24
195.133.92.0/23
195.133.95.0/24
212.192.241.0-212.192.242.255
212.192.247.0/24
212.192.249.0/24
212.192.251.0/24
212.193.0.0/24
212.193.10.0/24
212.193.15.0/24
212.193.26.0-212.193.28.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
38:63:78:2b:30:73:8b:b0:80:73:1a:55:9e:25:0a:92:90:da:
b3:7b:58:15:35:31:30:99:95:61:4e:be:82:74:cf:02:a0:b3:
e1:ce:bf:c5:08:06:88:63:c2:76:92:40:37:dc:89:97:a2:8e:
a3:d1:74:00:78:d3:7e:b8:4e:4d:6d:c3:8e:12:08:d3:ee:45:
4e:5b:56:f3:43:aa:05:fe:eb:4e:5e:89:76:02:0e:c0:4a:93:
7c:8c:f7:d5:0a:5d:f1:c3:a3:99:0c:4a:cf:98:a0:93:22:6b:
1a:86:ae:95:c0:63:17:1f:bc:25:1c:6a:81:a3:2f:e4:63:3b:
50:81:82:d6:5c:95:7d:a5:65:bf:ab:ce:e0:3f:bd:8e:e7:05:
68:bc:34:c4:86:5c:87:1e:c4:9c:0b:2a:9f:aa:e2:9d:a8:62:
04:3e:a3:b0:a4:9a:3c:c4:e4:17:50:fc:03:d5:75:b3:70:90:
4d:63:83:23:ea:b5:b5:62:aa:a4:30:c9:e0:92:2f:bb:80:6a:
ba:41:1a:1b:27:1d:ee:ed:ca:2a:44:83:fc:c5:da:42:a7:dd:
8b:b9:c7:06:58:1a:a5:ab:65:34:3e:8f:b2:3f:9b:17:1a:44:
2b:af:cf:80:e9:d3:aa:82:04:9b:93:1b:df:cd:e9:b2:0d:3b:
93:91:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:09 2026 by rpki-client