Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VZTtzp8MzBN2cnVz_QB2SP5XcNY.roa
File: VZTtzp8MzBN2cnVz_QB2SP5XcNY.roa (raw, json)
Hash identifier: pgcsheYqU1BB+AJCacf7Cnep7L6v9pOtPevW4PXajh0=
Subject key identifier: 55:94:ED:CE:9F:0C:CC:13:76:72:75:73:FD:00:76:48:FE:57:70:D6
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F8A06E3FC1FAE56D4D5C91C919D11916C
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VZTtzp8MzBN2cnVz_QB2SP5XcNY.roa
Signing time: Wed 22 Jul 2026 13:32:15 +0000
ROA not before: Wed 22 Jul 2026 13:32:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 62.41.26.0/24 maxlen: 24
62.105.200.0/22 maxlen: 22
62.192.102.0/23 maxlen: 23
62.192.113.0/24 maxlen: 24
62.192.114.0/23 maxlen: 23
62.192.126.0/23 maxlen: 23
77.67.9.0/24 maxlen: 24
92.71.2.0/23 maxlen: 24
92.71.4.0/23 maxlen: 24
92.71.26.0/23 maxlen: 24
92.71.28.0/22 maxlen: 24
92.71.36.0/23 maxlen: 24
92.71.48.0/21 maxlen: 24
92.71.56.0/22 maxlen: 24
92.71.62.0/23 maxlen: 24
135.196.4.0/24 maxlen: 24
135.196.24.0/23 maxlen: 24
135.196.28.0/23 maxlen: 24
135.196.88.0/23 maxlen: 24
135.196.102.0/23 maxlen: 24
135.196.108.0/22 maxlen: 24
135.196.132.0/23 maxlen: 24
135.196.144.0/22 maxlen: 24
135.196.156.0/23 maxlen: 24
135.196.164.0/23 maxlen: 24
135.196.172.0/23 maxlen: 24
135.196.176.0/23 maxlen: 24
135.196.202.0/24 maxlen: 24
135.196.204.0/24 maxlen: 24
195.86.223.0/24 maxlen: 24
212.189.118.0/24 maxlen: 24
213.169.204.0/23 maxlen: 23
213.169.240.0/23 maxlen: 23
213.201.140.0/24 maxlen: 24
213.201.148.0/24 maxlen: 24
213.201.154.0/23 maxlen: 24
213.201.158.0/24 maxlen: 24
213.201.163.0/24 maxlen: 24
213.201.166.0/23 maxlen: 24
213.201.171.0/24 maxlen: 24
213.201.174.0/23 maxlen: 24
213.201.179.0/24 maxlen: 24
213.201.182.0/23 maxlen: 24
213.201.186.0/23 maxlen: 24
213.201.190.0/23 maxlen: 24
213.201.194.0/23 maxlen: 24
213.201.196.0/23 maxlen: 24
213.201.198.0/24 maxlen: 24
213.201.200.0/24 maxlen: 24
213.201.202.0/24 maxlen: 24
213.201.204.0/24 maxlen: 24
213.201.208.0/23 maxlen: 24
213.201.214.0/23 maxlen: 24
213.201.218.0/23 maxlen: 24
213.201.222.0/23 maxlen: 24
213.201.226.0/23 maxlen: 24
213.201.228.0/23 maxlen: 24
213.201.234.0/23 maxlen: 24
213.201.238.0/23 maxlen: 24
217.8.198.0/24 maxlen: 24
217.8.202.0/24 maxlen: 24
217.8.218.0/24 maxlen: 24
217.8.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:06:e3:fc:1f:ae:56:d4:d5:c9:1c:91:9d:11:91:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 22 13:32:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5594edce9f0ccc1376727573fd007648fe5770d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d6:c8:a9:c7:ff:4a:3c:7e:ae:f2:47:18:ac:
1a:64:ff:a4:c1:5f:79:4c:9b:8d:1f:64:5e:79:4a:
7b:b3:dd:99:1e:28:28:ed:23:89:6a:9a:fa:2c:9e:
5c:ef:bc:26:8b:73:5f:6c:25:85:3d:8a:aa:ba:11:
96:f9:70:7d:2d:f7:84:c9:3c:81:bb:d9:63:85:08:
d1:f9:2a:ea:18:6c:0a:f3:ea:7f:1d:36:a3:93:c5:
fe:21:8a:c8:85:1f:9f:b3:ee:2d:ec:0d:f5:3a:3e:
73:40:37:cc:07:b9:40:e2:ff:32:70:02:8a:e7:2a:
29:b3:a5:33:65:c2:3a:e3:9c:93:ef:9e:6a:60:7f:
f6:20:5f:40:ec:68:72:09:f2:ab:9d:ba:64:de:61:
e2:7e:dc:55:f7:29:0c:26:4c:18:3c:e4:fd:7f:cb:
b5:d3:fb:77:27:be:a1:ac:f4:77:18:11:13:a7:cd:
c7:14:ae:de:a3:36:f4:a7:0f:ae:03:ee:70:a7:b5:
71:90:9d:13:b1:12:52:e1:cb:15:68:99:c2:59:72:
26:62:d3:86:0b:95:b5:4f:96:4f:44:57:6f:6a:06:
89:b8:25:f5:44:ad:e4:e2:c0:d6:05:af:9b:fd:1a:
9c:60:bf:fb:ee:09:c7:f3:4b:46:1c:ad:8d:e9:00:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:94:ED:CE:9F:0C:CC:13:76:72:75:73:FD:00:76:48:FE:57:70:D6
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VZTtzp8MzBN2cnVz_QB2SP5XcNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.26.0/24
62.105.200.0/22
62.192.102.0/23
62.192.113.0-62.192.115.255
62.192.126.0/23
77.67.9.0/24
92.71.2.0-92.71.5.255
92.71.26.0-92.71.31.255
92.71.36.0/23
92.71.48.0-92.71.59.255
92.71.62.0/23
135.196.4.0/24
135.196.24.0/23
135.196.28.0/23
135.196.88.0/23
135.196.102.0/23
135.196.108.0/22
135.196.132.0/23
135.196.144.0/22
135.196.156.0/23
135.196.164.0/23
135.196.172.0/23
135.196.176.0/23
135.196.202.0/24
135.196.204.0/24
195.86.223.0/24
212.189.118.0/24
213.169.204.0/23
213.169.240.0/23
213.201.140.0/24
213.201.148.0/24
213.201.154.0/23
213.201.158.0/24
213.201.163.0/24
213.201.166.0/23
213.201.171.0/24
213.201.174.0/23
213.201.179.0/24
213.201.182.0/23
213.201.186.0/23
213.201.190.0/23
213.201.194.0-213.201.198.255
213.201.200.0/24
213.201.202.0/24
213.201.204.0/24
213.201.208.0/23
213.201.214.0/23
213.201.218.0/23
213.201.222.0/23
213.201.226.0-213.201.229.255
213.201.234.0/23
213.201.238.0/23
217.8.198.0/24
217.8.202.0/24
217.8.218.0/24
217.8.222.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:1b:ce:de:f6:dc:bb:02:06:f1:ed:0d:65:4b:7a:8b:7c:29:
55:f6:d6:97:db:1e:28:d5:4d:fb:a5:ee:05:f3:1c:66:4c:f5:
c4:99:3c:48:f5:0d:d0:8f:f7:9c:9d:1f:8d:7d:d9:1d:3d:a4:
94:b6:65:a8:e4:14:dd:22:7c:bf:8b:5f:7a:7c:cb:60:fb:c9:
a1:f3:43:9e:fc:af:6d:88:e0:66:fc:c0:17:10:68:40:57:e2:
a6:c9:71:5a:8a:dd:43:6a:39:39:c8:77:83:ec:3a:b1:1d:3c:
4e:a9:18:61:1f:4b:78:12:d6:0d:c8:40:79:a1:85:b2:ba:46:
da:82:a8:8d:56:78:64:f4:28:34:89:79:e2:2f:41:74:fa:22:
56:57:cf:79:7f:74:f1:70:00:e1:19:e0:5b:02:ec:67:f3:83:
f6:c2:03:5e:55:49:af:73:85:49:7d:58:74:08:8c:e7:4b:d7:
99:6c:2c:1b:65:bf:d9:dd:5a:30:2d:86:15:9f:f6:2d:d3:73:
0a:5e:c8:9d:1a:be:cc:3d:3d:20:18:aa:7a:2d:1d:3c:80:1e:
ec:1d:91:0f:4b:f1:c8:bd:41:79:b6:ea:15:14:b8:01:5e:35:
d1:b2:51:f1:7b:6d:0d:d2:d6:b5:fc:ea:6c:32:20:7e:d9:a5:
2e:87:38:91
-----BEGIN CERTIFICATE-----
MIIGgTCCBWmgAwIBAgISAZ+KBuP8H65W1NXJHJGdEZFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzIyMTMzMjE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTk0ZWRjZTlmMGNjYzEzNzY3Mjc1NzNmZDAwNzY0OGZlNTc3MGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotbIqcf/Sjx+rvJHGKwaZP+kwV95
TJuNH2ReeUp7s92ZHigo7SOJapr6LJ5c77wmi3NfbCWFPYqquhGW+XB9LfeEyTyB
u9ljhQjR+SrqGGwK8+p/HTajk8X+IYrIhR+fs+4t7A31Oj5zQDfMB7lA4v8ycAKK
5yops6UzZcI645yT755qYH/2IF9A7GhyCfKrnbpk3mHiftxV9ykMJkwYPOT9f8u1
0/t3J76hrPR3GBETp83HFK7eozb0pw+uA+5wp7VxkJ0TsRJS4csVaJnCWXImYtOG
C5W1T5ZPRFdvagaJuCX1RK3k4sDWBa+b/RqcYL/77gnH80tGHK2N6QBBJwIDAQAB
o4IDjTCCA4kwHQYDVR0OBBYEFFWU7c6fDMwTdnJ1c/0Adkj+V3DWMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVlpUdHpwOE16Qk4yY25Wel9RQjJTUDVYY05ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBoQYIKwYBBQUHAQcBAf8EggGQMIIBjDCCAYgEAgABMIIB
gAMEAD4pGgMEAj5pyAMEAT7AZjAMAwQAPsBxAwQCPsBwAwQBPsB+AwQATUMJMAwD
BAFcRwIDBAFcRwQwDAMEAVxHGgMEBVxHAAMEAVxHJDAMAwQEXEcwAwQCXEc4AwQB
XEc+AwQAh8QEAwQBh8QYAwQBh8QcAwQBh8RYAwQBh8RmAwQCh8RsAwQBh8SEAwQC
h8SQAwQBh8ScAwQBh8SkAwQBh8SsAwQBh8SwAwQAh8TKAwQAh8TMAwQAw1bfAwQA
1L12AwQB1anMAwQB1anwAwQA1cmMAwQA1cmUAwQB1cmaAwQA1cmeAwQA1cmjAwQB
1cmmAwQA1cmrAwQB1cmuAwQA1cmzAwQB1cm2AwQB1cm6AwQB1cm+MAwDBAHVycID
BADVycYDBADVycgDBADVycoDBADVycwDBAHVydADBAHVydYDBAHVydoDBAHVyd4w
DAMEAdXJ4gMEAdXJ5AMEAdXJ6gMEAdXJ7gMEANkIxgMEANkIygMEANkI2gMEAdkI
3jANBgkqhkiG9w0BAQsFAAOCAQEAXhvO3vbcuwIG8e0NZUt6i3wpVfbWl9seKNVN
+6XuBfMcZkz1xJk8SPUN0I/3nJ0fjX3ZHT2klLZlqOQU3SJ8v4tfenzLYPvJofND
nvyvbYjgZvzAFxBoQFfipslxWordQ2o5Och3g+w6sR08TqkYYR9LeBLWDchAeaGF
srpG2oKojVZ4ZPQoNIl54i9BdPoiVlfPeX908XAA4RngWwLsZ/OD9sIDXlVJr3OF
SX1YdAiM50vXmWwsG2W/2d1aMC2GFZ/2LdNzCl7InRq+zD09IBiqei0dPIAe7B2R
D0vxyL1BebbqFRS4AV410bJR8XttDdLWtfzqbDIgftmlLoc4kQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:59 2026 by rpki-client