Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa
File: VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa (raw, json)
Hash identifier: kyHIvFWkdubKP45nhTZVtmGDoRj39kZ1HhwdWsoGzIQ=
Subject key identifier: 55:13:3A:F3:EB:74:77:60:7F:B0:38:F8:6D:97:B7:23:E6:12:1A:24
Certificate issuer: /CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Certificate serial: 019F5AADBEE7FE5F31C8F6F57F7410B0470C
Authority key identifier: DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa
Signing time: Mon 13 Jul 2026 08:52:43 +0000
ROA not before: Mon 13 Jul 2026 08:52:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33874
IP address blocks: 37.75.32.0/19 maxlen: 19
37.75.32.0/20 maxlen: 20
37.75.48.0/20 maxlen: 20
77.25.128.0/17 maxlen: 17
77.25.128.0/19 maxlen: 19
77.25.128.0/22 maxlen: 22
77.25.132.0/22 maxlen: 22
77.25.136.0/22 maxlen: 22
77.25.140.0/22 maxlen: 22
77.25.144.0/22 maxlen: 22
77.25.148.0/22 maxlen: 22
77.25.152.0/22 maxlen: 22
77.25.156.0/22 maxlen: 22
77.25.192.0/22 maxlen: 22
77.25.196.0/22 maxlen: 22
77.25.200.0/22 maxlen: 22
77.25.204.0/22 maxlen: 22
77.25.220.0/22 maxlen: 22
77.25.244.0/22 maxlen: 22
77.25.248.0/22 maxlen: 22
77.243.64.0/22 maxlen: 22
77.243.68.0/23 maxlen: 23
77.243.70.0/23 maxlen: 23
77.243.72.0/22 maxlen: 22
77.243.76.0/23 maxlen: 23
77.243.78.0/23 maxlen: 23
80.85.96.0/20 maxlen: 20
80.85.96.0/23 maxlen: 23
80.85.98.0/24 maxlen: 24
80.85.99.0/24 maxlen: 24
80.85.100.0/24 maxlen: 24
80.85.101.0/24 maxlen: 24
80.85.102.0/24 maxlen: 24
80.85.103.0/24 maxlen: 24
80.85.104.0/24 maxlen: 24
80.85.105.0/24 maxlen: 24
80.85.106.0/24 maxlen: 24
80.85.107.0/24 maxlen: 24
80.85.108.0/24 maxlen: 24
80.85.109.0/24 maxlen: 24
80.85.110.0/24 maxlen: 24
80.85.111.0/24 maxlen: 24
109.200.32.0/19 maxlen: 19
109.200.32.0/20 maxlen: 20
109.200.48.0/21 maxlen: 21
109.200.56.0/22 maxlen: 22
159.20.24.0/21 maxlen: 21
159.20.24.0/24 maxlen: 24
159.20.25.0/24 maxlen: 24
159.20.26.0/24 maxlen: 24
159.20.27.0/24 maxlen: 24
159.20.28.0/24 maxlen: 24
159.20.29.0/24 maxlen: 24
159.20.30.0/24 maxlen: 24
159.20.31.0/24 maxlen: 24
185.5.48.0/24 maxlen: 24
188.172.0.0/19 maxlen: 19
188.172.0.0/20 maxlen: 20
188.172.16.0/21 maxlen: 21
188.172.24.0/22 maxlen: 22
188.172.32.0/19 maxlen: 19
188.172.32.0/20 maxlen: 20
188.172.48.0/21 maxlen: 21
188.172.56.0/22 maxlen: 22
188.172.64.0/19 maxlen: 19
188.172.64.0/21 maxlen: 21
188.172.72.0/22 maxlen: 22
188.172.80.0/21 maxlen: 21
188.172.88.0/22 maxlen: 22
2a10:5500::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:ad:be:e7:fe:5f:31:c8:f6:f5:7f:74:10:b0:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dab53f9b21d13e078e3e844d645eea8580f1cce1
Validity
Not Before: Jul 13 08:52:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55133af3eb7477607fb038f86d97b723e6121a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:fe:ff:d0:ff:af:ac:97:a1:d3:0d:71:e7:
97:53:8d:22:21:d9:4b:e2:40:a3:a9:e0:b8:92:7e:
b8:c1:8e:70:ea:e4:6b:8e:8c:51:e1:e4:42:bc:e6:
0d:8b:40:f0:9a:df:51:be:5b:be:bf:0c:e8:d1:4e:
c1:57:44:e2:40:ad:8e:b2:50:46:06:76:2b:d7:81:
c3:02:f9:a7:83:65:2b:55:13:94:4b:b5:1c:38:d1:
b8:42:47:b5:9a:4a:e1:57:a3:9a:df:b8:6a:3d:cd:
d7:f1:45:35:dc:04:6c:0b:86:5f:70:19:16:c1:ab:
dc:92:61:8d:ea:65:d0:b1:f6:ee:d4:73:e6:1a:a9:
2b:e4:e5:e2:b1:af:d0:96:1f:78:81:53:73:69:0d:
3e:22:ac:e3:90:54:ea:4e:09:1a:e2:eb:c0:29:2d:
83:06:78:b0:05:f3:7f:26:b1:dd:75:15:56:ab:b8:
5d:e2:6b:e0:4d:ea:33:1f:19:97:91:b0:04:16:dc:
d2:10:27:6c:b4:dd:3e:ce:52:aa:37:fd:c8:ed:ff:
cd:9e:07:12:d1:ef:3c:ee:ec:23:f0:2c:ad:a9:f6:
e4:d0:17:cb:52:df:1a:a4:d2:e6:2f:85:19:35:fa:
0d:68:fc:d0:27:5d:81:53:3e:81:d6:8d:62:63:67:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:3A:F3:EB:74:77:60:7F:B0:38:F8:6D:97:B7:23:E6:12:1A:24
X509v3 Authority Key Identifier:
keyid:DA:B5:3F:9B:21:D1:3E:07:8E:3E:84:4D:64:5E:EA:85:80:F1:CC:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rU_myHRPgeOPoRNZF7qhYDxzOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/VRM68-t0d2B_sDj4bZe3I-YSGiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7f9ab1-bc7c-4d0d-a970-5b8bc590b197/1/2rU_myHRPgeOPoRNZF7qhYDxzOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.75.32.0/19
77.25.128.0/17
77.243.64.0/20
80.85.96.0/20
109.200.32.0/19
159.20.24.0/21
185.5.48.0/24
188.172.0.0-188.172.95.255
IPv6:
2a10:5500::/32
Signature Algorithm: sha256WithRSAEncryption
05:22:71:7f:2e:2a:00:8d:f9:d0:d0:c5:cf:94:dc:98:97:82:
ee:bf:43:30:9e:ca:a0:1a:c2:8f:86:1f:a9:e0:bf:94:17:de:
a9:99:29:31:4b:34:19:ee:28:be:a8:d6:41:37:79:52:aa:e2:
1a:c6:36:46:a3:97:22:6a:8d:42:fc:01:8e:9f:2b:e4:45:c6:
bd:86:cc:fa:b9:87:07:d5:14:86:f1:d4:b3:02:4e:64:20:e1:
c0:1a:d5:55:1d:56:5e:03:c0:2e:a5:e9:3b:a1:a0:22:6b:46:
d4:56:42:7d:83:27:15:83:93:7f:99:69:71:db:dd:65:eb:07:
3c:df:9d:06:51:4c:aa:7c:c0:7e:12:60:f4:6a:77:d6:fc:fa:
ce:6a:1e:e5:19:ad:61:37:8d:d2:b9:3c:d3:2e:c7:b8:b0:91:
bb:cb:58:90:16:80:78:c9:64:08:9c:d2:da:97:4d:3e:a5:e3:
11:c3:5b:fd:91:fa:2e:42:cc:c4:73:6d:8b:2b:2a:ea:4b:e3:
35:94:d1:c1:ea:3e:d9:18:30:9d:32:b6:86:2a:b4:21:35:d8:
db:cb:52:09:60:69:ab:77:00:c9:3f:ac:c1:15:a4:d1:22:d4:
13:dd:82:bf:88:33:d9:d5:7c:d8:75:de:c6:dc:87:7c:1c:37:
39:98:0c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:50 2026 by rpki-client