Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/VVq-mRVoIcRkoYA5dVbdWekxbMA.roa
File: VVq-mRVoIcRkoYA5dVbdWekxbMA.roa (raw, json)
Hash identifier: Qwfsg5v8vdbIVLY3OSGQg/SghMAgv1DqrRhE7jEwkx4=
Subject key identifier: 55:5A:BE:99:15:68:21:C4:64:A1:80:39:75:56:DD:59:E9:31:6C:C0
Certificate issuer: /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial: 01A0AE034E39360569ACD8D39C50CC2DE032
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/VVq-mRVoIcRkoYA5dVbdWekxbMA.roa
Signing time: Thu 17 Sep 2026 06:17:27 +0000
ROA not before: Thu 17 Sep 2026 06:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59625
IP address blocks: 185.84.68.0/24 maxlen: 24
185.84.69.0/24 maxlen: 24
185.84.70.0/24 maxlen: 24
185.84.71.0/24 maxlen: 24
185.240.16.0/24 maxlen: 24
185.240.17.0/24 maxlen: 24
185.240.18.0/24 maxlen: 24
185.240.19.0/24 maxlen: 24
185.244.176.0/24 maxlen: 24
185.244.178.0/24 maxlen: 24
185.244.179.0/24 maxlen: 24
204.154.200.0/24 maxlen: 24
204.154.201.0/24 maxlen: 24
204.154.202.0/24 maxlen: 24
204.154.203.0/24 maxlen: 24
204.154.204.0/24 maxlen: 24
204.154.205.0/24 maxlen: 24
204.154.206.0/24 maxlen: 24
204.154.207.0/24 maxlen: 24
2a03:7020::/40 maxlen: 40
2a03:7020::/48 maxlen: 48
2a03:7020:1::/48 maxlen: 48
2a03:7020:8::/48 maxlen: 48
2a03:7020:10::/48 maxlen: 48
2a03:7020:100::/40 maxlen: 40
2a03:7020:200::/48 maxlen: 48
2a03:7020:201::/48 maxlen: 48
2a03:7020:300::/40 maxlen: 40
2a03:7020:800::/40 maxlen: 40
2a03:7020:1200::/40 maxlen: 40
2a03:7020:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:03:4e:39:36:05:69:ac:d8:d3:9c:50:cc:2d:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Validity
Not Before: Sep 17 06:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=555abe99156821c464a180397556dd59e9316cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:e5:2c:e4:8f:5e:1a:ed:f0:3c:2e:90:82:
9c:c8:93:c3:65:2f:69:fd:04:9e:fc:bf:22:06:46:
40:d4:d6:e4:8a:be:75:55:0e:02:eb:7e:78:e5:81:
50:16:2f:59:63:38:86:f9:1f:c4:dc:d0:ea:db:30:
e9:36:fa:64:6f:ce:c8:79:59:22:ee:0d:a9:d0:36:
c4:06:af:f2:73:2d:bf:48:92:2b:39:4f:b5:98:bb:
7b:1a:b8:ba:e5:b0:36:ea:1a:80:b9:2e:63:b5:8c:
4d:24:32:83:e4:1a:88:40:f6:0a:85:09:19:3e:25:
1f:38:7e:27:b4:2d:f7:f6:74:98:ed:05:e4:d2:80:
04:7d:0f:ea:30:f1:2f:94:30:76:92:4e:7d:5f:35:
1f:14:35:54:cc:14:9e:d0:60:8a:52:22:45:fd:7d:
cf:0c:6e:e5:39:23:8f:13:5e:9b:94:12:5d:94:b4:
7a:5a:36:cc:6f:00:13:cc:f3:d8:cc:a7:49:4b:86:
34:ca:70:7b:0a:a1:b3:c5:58:20:de:05:46:fa:42:
fc:cf:9f:7c:bc:ef:d2:9b:0c:09:39:e3:c9:5a:32:
79:6b:b1:f5:18:62:72:3c:85:3f:a0:d7:ea:ec:0c:
f1:b1:d8:ea:eb:f1:a9:79:9c:53:00:f6:c9:f2:cf:
11:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5A:BE:99:15:68:21:C4:64:A1:80:39:75:56:DD:59:E9:31:6C:C0
X509v3 Authority Key Identifier:
keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/VVq-mRVoIcRkoYA5dVbdWekxbMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.68.0/22
185.240.16.0/22
185.244.176.0/24
185.244.178.0/23
204.154.200.0/21
IPv6:
2a03:7020::-2a03:7020:201:ffff:ffff:ffff:ffff:ffff
2a03:7020:300::/40
2a03:7020:800::/40
2a03:7020:1200::/39
Signature Algorithm: sha256WithRSAEncryption
2c:87:f6:37:0a:6a:65:41:15:28:55:b5:28:4d:7a:70:99:3c:
4a:87:b4:04:c8:03:bb:84:ab:5e:77:67:94:3b:9e:c5:3b:af:
41:07:e5:53:85:2d:8d:3c:4e:ff:d4:8d:1a:da:20:32:a1:a2:
2a:4a:17:9c:dc:99:f5:78:3b:aa:de:8b:08:4b:bb:87:ae:88:
85:5e:43:90:6d:e2:3d:b8:fc:17:79:c7:1f:ab:b2:9d:e3:b6:
c6:df:2b:2b:1a:25:ef:45:2c:b8:c4:3a:f0:cb:48:a2:45:32:
48:dd:60:84:d2:58:10:0c:19:c2:c9:d1:1c:3a:d4:17:43:76:
cb:5b:88:b3:7f:46:dc:74:d1:15:32:74:e1:1b:e4:c7:c8:cf:
be:22:21:66:78:2a:d5:3e:fb:1a:21:df:c7:b1:6c:c3:3d:49:
6d:ba:69:5e:a7:cd:9e:c7:a6:b2:d4:03:fd:e4:bb:35:c7:86:
60:8c:bd:80:1a:3d:6e:95:ec:09:cf:4f:2b:3e:bf:ff:04:ed:
b7:3a:67:12:73:aa:df:4b:06:c9:3a:a8:d5:96:d9:f2:cf:b5:
0f:04:4f:d8:12:26:19:b4:a7:c7:ac:18:bc:87:a1:2c:4f:07:
07:d7:ce:05:66:0c:ac:93:72:3b:f1:09:71:31:73:4a:5e:86:
e1:6a:41:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:24:23 2026 by rpki-client