Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/VbwtiBX2ms4ySWY9SuuxQ_e54iU.roa
File: VbwtiBX2ms4ySWY9SuuxQ_e54iU.roa (raw, json)
Hash identifier: k9pKrx75Mce4A5zPehz4672JfRhT62oujRsmOrrbRnk=
Subject key identifier: 55:BC:2D:88:15:F6:9A:CE:32:49:66:3D:4A:EB:B1:43:F7:B9:E2:25
Certificate issuer: /CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Certificate serial: 01999AC40A06495C335742E2DCBC061887B4
Authority key identifier: 7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/VbwtiBX2ms4ySWY9SuuxQ_e54iU.roa
Signing time: Tue 30 Sep 2025 13:16:02 +0000
ROA not before: Tue 30 Sep 2025 13:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210756
IP address blocks: 5.8.42.0/24 maxlen: 24
5.8.43.0/24 maxlen: 24
5.8.69.0/24 maxlen: 24
5.101.68.0/24 maxlen: 24
5.101.69.0/24 maxlen: 24
5.101.70.0/24 maxlen: 24
5.101.218.0/24 maxlen: 24
5.188.2.0/24 maxlen: 24
5.188.3.0/24 maxlen: 24
5.188.7.0/24 maxlen: 24
5.188.35.0/24 maxlen: 24
5.188.37.0/24 maxlen: 24
5.188.38.0/24 maxlen: 24
5.188.39.0/24 maxlen: 24
5.188.121.0/24 maxlen: 24
5.188.149.0/24 maxlen: 24
5.188.150.0/24 maxlen: 24
5.188.170.0/24 maxlen: 24
5.188.171.0/24 maxlen: 24
5.188.176.0/24 maxlen: 24
5.188.177.0/24 maxlen: 24
5.188.178.0/24 maxlen: 24
5.188.179.0/24 maxlen: 24
5.188.212.0/24 maxlen: 24
5.188.224.0/24 maxlen: 24
5.188.229.0/24 maxlen: 24
5.189.201.0/24 maxlen: 24
5.189.205.0/24 maxlen: 24
5.189.223.0/24 maxlen: 24
31.184.204.0/24 maxlen: 24
31.184.205.0/24 maxlen: 24
37.9.36.0/24 maxlen: 24
37.9.37.0/24 maxlen: 24
37.9.38.0/24 maxlen: 24
37.9.39.0/24 maxlen: 24
37.9.52.0/24 maxlen: 24
37.9.53.0/24 maxlen: 24
37.9.54.0/24 maxlen: 24
37.9.55.0/24 maxlen: 24
37.128.164.0/24 maxlen: 24
37.128.165.0/24 maxlen: 24
37.128.166.0/24 maxlen: 24
37.128.167.0/24 maxlen: 24
45.147.162.0/24 maxlen: 24
45.147.163.0/24 maxlen: 24
79.133.127.0/24 maxlen: 24
82.97.207.0/24 maxlen: 24
83.229.14.0/24 maxlen: 24
83.229.25.0/24 maxlen: 24
91.243.80.0/24 maxlen: 24
91.243.82.0/24 maxlen: 24
91.243.83.0/24 maxlen: 24
91.243.84.0/24 maxlen: 24
91.243.86.0/24 maxlen: 24
92.38.128.0/24 maxlen: 24
92.38.129.0/24 maxlen: 24
92.38.130.0/24 maxlen: 24
92.38.131.0/24 maxlen: 24
92.38.136.0/24 maxlen: 24
92.38.137.0/24 maxlen: 24
92.38.138.0/24 maxlen: 24
92.38.139.0/24 maxlen: 24
92.38.152.0/24 maxlen: 24
92.38.153.0/24 maxlen: 24
92.38.156.0/24 maxlen: 24
92.38.188.0/24 maxlen: 24
92.38.189.0/24 maxlen: 24
92.38.190.0/24 maxlen: 24
92.38.191.0/24 maxlen: 24
92.223.4.0/24 maxlen: 24
92.223.5.0/24 maxlen: 24
92.223.6.0/24 maxlen: 24
92.223.8.0/24 maxlen: 24
92.223.9.0/24 maxlen: 24
92.223.14.0/24 maxlen: 24
92.223.32.0/24 maxlen: 24
92.223.33.0/24 maxlen: 24
92.223.34.0/24 maxlen: 24
92.223.35.0/24 maxlen: 24
92.223.36.0/24 maxlen: 24
92.223.38.0/24 maxlen: 24
92.223.41.0/24 maxlen: 24
92.223.43.0/24 maxlen: 24
92.223.49.0/24 maxlen: 24
92.223.60.0/24 maxlen: 24
92.223.64.0/24 maxlen: 24
92.223.65.0/24 maxlen: 24
92.223.67.0/24 maxlen: 24
92.223.72.0/24 maxlen: 24
92.223.80.0/24 maxlen: 24
92.223.87.0/24 maxlen: 24
92.223.91.0/24 maxlen: 24
92.223.103.0/24 maxlen: 24
92.223.106.0/24 maxlen: 24
92.223.108.0/24 maxlen: 24
92.223.109.0/24 maxlen: 24
92.223.110.0/24 maxlen: 24
92.223.111.0/24 maxlen: 24
92.223.114.0/24 maxlen: 24
92.223.115.0/24 maxlen: 24
92.223.122.0/24 maxlen: 24
92.223.123.0/24 maxlen: 24
95.85.88.0/24 maxlen: 24
95.181.176.0/24 maxlen: 24
95.181.177.0/24 maxlen: 24
95.181.178.0/24 maxlen: 24
95.181.179.0/24 maxlen: 24
95.181.180.0/24 maxlen: 24
95.181.181.0/24 maxlen: 24
95.181.182.0/24 maxlen: 24
95.181.183.0/24 maxlen: 24
146.185.196.0/24 maxlen: 24
146.185.197.0/24 maxlen: 24
146.185.198.0/24 maxlen: 24
146.185.199.0/24 maxlen: 24
146.185.215.0/24 maxlen: 24
146.185.218.0/24 maxlen: 24
185.14.46.0/24 maxlen: 24
185.101.137.0/24 maxlen: 24
193.17.93.0/24 maxlen: 24
2a11:27c0::/44 maxlen: 44
2a11:27c0:10::/44 maxlen: 44
2a11:27c0:20::/44 maxlen: 44
2a11:27c0:100::/44 maxlen: 44
2a11:27c0:110::/44 maxlen: 44
2a11:27c0:120::/44 maxlen: 44
2a11:27c0:130::/44 maxlen: 44
2a11:27c0:140::/44 maxlen: 44
2a11:27c0:150::/44 maxlen: 44
2a11:27c0:160::/44 maxlen: 44
2a11:27c0:170::/44 maxlen: 44
2a11:27c0:180::/44 maxlen: 44
2a11:27c0:190::/44 maxlen: 44
2a11:27c0:1a0::/44 maxlen: 44
2a11:27c0:1b0::/44 maxlen: 44
2a11:27c0:1c0::/44 maxlen: 44
2a11:27c0:1d0::/44 maxlen: 44
2a11:27c0:1e0::/44 maxlen: 44
2a11:27c0:1f0::/44 maxlen: 44
2a11:27c0:200::/44 maxlen: 44
2a11:27c0:210::/44 maxlen: 44
2a11:27c0:1000::/44 maxlen: 44
2a11:27c0:1010::/44 maxlen: 44
2a11:27c0:1020::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:9a:c4:0a:06:49:5c:33:57:42:e2:dc:bc:06:18:87:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3e585a59b523bb86d660a7168e1c1eba094da0
Validity
Not Before: Sep 30 13:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55bc2d8815f69ace3249663d4aebb143f7b9e225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fb:43:7a:92:fd:d7:74:d8:27:47:65:6a:3a:
79:72:07:2e:a9:27:a7:94:8a:69:f1:2e:44:9e:dd:
cf:ce:8b:a5:07:b0:61:20:28:39:46:ab:3e:ad:e6:
b1:de:6e:e5:6a:e8:88:ba:0c:df:86:57:99:34:4c:
81:72:b7:8a:f6:ef:66:7f:27:54:fa:42:a8:ab:ed:
93:6c:26:e1:8b:54:93:62:45:81:50:d9:80:a8:19:
b8:57:ed:f8:5d:cf:c3:16:ac:e6:18:ae:ea:d3:85:
43:5b:50:60:8e:79:4f:84:bd:03:43:e0:cf:b6:b3:
93:09:8f:63:04:f9:77:71:7b:7f:33:9a:6e:5c:57:
74:38:b9:5c:60:98:ed:09:2c:56:b7:93:7f:c3:73:
5b:78:85:39:a2:9f:41:a1:ad:d0:22:67:0e:e4:af:
b4:af:18:7d:ea:8b:b5:15:36:75:6b:7f:fc:c4:0b:
d7:2f:bc:20:77:72:8d:61:e7:dd:88:cc:f2:b6:71:
4f:20:f9:45:3d:67:31:23:37:f0:e0:63:7d:fa:2f:
e5:fb:50:f1:10:83:52:86:91:27:74:32:b3:f9:9f:
d7:79:ca:8d:cd:e9:a6:c1:5c:d8:2e:71:f3:fc:43:
a1:13:8a:4e:b3:4b:cc:9d:24:e3:1f:d7:b2:48:1a:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BC:2D:88:15:F6:9A:CE:32:49:66:3D:4A:EB:B1:43:F7:B9:E2:25
X509v3 Authority Key Identifier:
keyid:7C:3E:58:5A:59:B5:23:BB:86:D6:60:A7:16:8E:1C:1E:BA:09:4D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD5YWlm1I7uG1mCnFo4cHroJTaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/VbwtiBX2ms4ySWY9SuuxQ_e54iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/26e32a-35ba-443f-bc1e-6dc1f56031eb/1/fD5YWlm1I7uG1mCnFo4cHroJTaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.42.0/23
5.8.69.0/24
5.101.68.0-5.101.70.255
5.101.218.0/24
5.188.2.0/23
5.188.7.0/24
5.188.35.0/24
5.188.37.0-5.188.39.255
5.188.121.0/24
5.188.149.0-5.188.150.255
5.188.170.0/23
5.188.176.0/22
5.188.212.0/24
5.188.224.0/24
5.188.229.0/24
5.189.201.0/24
5.189.205.0/24
5.189.223.0/24
31.184.204.0/23
37.9.36.0/22
37.9.52.0/22
37.128.164.0/22
45.147.162.0/23
79.133.127.0/24
82.97.207.0/24
83.229.14.0/24
83.229.25.0/24
91.243.80.0/24
91.243.82.0-91.243.84.255
91.243.86.0/24
92.38.128.0/22
92.38.136.0/22
92.38.152.0/23
92.38.156.0/24
92.38.188.0/22
92.223.4.0-92.223.6.255
92.223.8.0/23
92.223.14.0/24
92.223.32.0-92.223.36.255
92.223.38.0/24
92.223.41.0/24
92.223.43.0/24
92.223.49.0/24
92.223.60.0/24
92.223.64.0/23
92.223.67.0/24
92.223.72.0/24
92.223.80.0/24
92.223.87.0/24
92.223.91.0/24
92.223.103.0/24
92.223.106.0/24
92.223.108.0/22
92.223.114.0/23
92.223.122.0/23
95.85.88.0/24
95.181.176.0/21
146.185.196.0/22
146.185.215.0/24
146.185.218.0/24
185.14.46.0/24
185.101.137.0/24
193.17.93.0/24
IPv6:
2a11:27c0::-2a11:27c0:2f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:100::-2a11:27c0:21f:ffff:ffff:ffff:ffff:ffff
2a11:27c0:1000::-2a11:27c0:102f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1e:c2:2e:85:e9:1f:9b:00:9e:80:98:02:a8:7b:12:b5:bd:ed:
70:e4:2f:b4:86:46:0e:da:c3:78:7a:2d:76:c4:a8:b9:51:5e:
45:24:0b:88:b0:c2:76:e8:c1:48:71:81:c3:f1:ce:28:b5:a0:
67:28:7c:a6:44:ec:dc:2a:05:14:b0:27:c3:09:f1:13:ad:ca:
96:c6:f9:6e:07:cf:4b:c2:47:65:f9:16:a4:da:c4:ce:da:e9:
b2:28:0d:87:bc:da:63:95:2a:4c:ac:31:6b:46:69:63:39:46:
eb:bc:1a:8d:90:d4:1f:41:41:e3:39:f0:b7:f3:d9:7a:15:bb:
8e:cc:f8:d0:c2:a7:6b:06:91:5d:28:fd:fc:3a:fe:61:80:ff:
c5:bf:2f:6f:e8:e6:f6:31:37:f3:15:8a:b1:7e:f1:a6:a4:64:
13:40:b5:e6:c0:8d:aa:14:4b:8e:01:f7:60:e0:ae:a1:1f:0d:
f6:d9:dd:99:7a:34:48:a6:c7:92:98:af:15:93:9a:d2:e0:8b:
19:d3:c5:7c:b4:d1:65:68:5c:49:44:27:8a:56:68:51:09:d9:
21:43:6d:ca:c7:a7:ce:ff:07:5d:b8:54:3d:77:b1:ff:ae:4e:
39:0b:7a:2e:13:2b:10:9b:4d:8b:8c:c4:18:8a:33:a4:71:a3:
60:28:60:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:08:46 2025 by rpki-client