Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/VjhlG8a2ZawkNaB1appig3Nz2is.roa
File: VjhlG8a2ZawkNaB1appig3Nz2is.roa (raw, json)
Hash identifier: gke6BC6KbRZ7BZ8YEtQe4nlgcZZfU/kgtOMqrBXfKKI=
Subject key identifier: 56:38:65:1B:C6:B6:65:AC:24:35:A0:75:6A:9A:62:83:73:73:DA:2B
Certificate issuer: /CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Certificate serial: 0199E1AE914953A1EFC8A65D126389D1ABD4
Authority key identifier: 23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/VjhlG8a2ZawkNaB1appig3Nz2is.roa
Signing time: Tue 14 Oct 2025 07:45:37 +0000
ROA not before: Tue 14 Oct 2025 07:45:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41201
IP address blocks: 87.199.0.0/18 maxlen: 32
87.199.0.0/24 maxlen: 24
87.199.1.0/24 maxlen: 24
87.199.2.0/24 maxlen: 24
87.199.3.0/24 maxlen: 24
87.199.4.0/24 maxlen: 24
87.199.5.0/24 maxlen: 24
87.199.6.0/24 maxlen: 24
87.199.7.0/24 maxlen: 24
87.199.8.0/24 maxlen: 24
87.199.9.0/24 maxlen: 24
87.199.10.0/24 maxlen: 24
87.199.11.0/24 maxlen: 24
87.199.12.0/24 maxlen: 24
87.199.13.0/24 maxlen: 24
87.199.14.0/24 maxlen: 24
87.199.15.0/24 maxlen: 24
87.199.16.0/24 maxlen: 24
87.199.17.0/24 maxlen: 24
87.199.18.0/24 maxlen: 24
87.199.19.0/24 maxlen: 24
87.199.20.0/24 maxlen: 24
87.199.21.0/24 maxlen: 24
87.199.22.0/24 maxlen: 24
87.199.23.0/24 maxlen: 24
87.199.24.0/24 maxlen: 24
87.199.25.0/24 maxlen: 24
87.199.26.0/24 maxlen: 24
87.199.27.0/24 maxlen: 24
87.199.28.0/24 maxlen: 24
87.199.29.0/24 maxlen: 24
87.199.30.0/24 maxlen: 24
87.199.31.0/24 maxlen: 24
87.199.32.0/24 maxlen: 24
87.199.33.0/24 maxlen: 24
87.199.34.0/24 maxlen: 24
87.199.35.0/24 maxlen: 24
87.199.36.0/24 maxlen: 24
87.199.37.0/24 maxlen: 24
87.199.38.0/24 maxlen: 24
87.199.39.0/24 maxlen: 24
87.199.40.0/24 maxlen: 24
87.199.41.0/24 maxlen: 24
87.199.42.0/24 maxlen: 24
87.199.43.0/24 maxlen: 24
87.199.44.0/24 maxlen: 24
87.199.45.0/24 maxlen: 24
87.199.46.0/24 maxlen: 24
87.199.47.0/24 maxlen: 24
87.199.48.0/24 maxlen: 24
87.199.49.0/24 maxlen: 24
87.199.50.0/24 maxlen: 24
87.199.51.0/24 maxlen: 24
87.199.52.0/24 maxlen: 24
87.199.53.0/24 maxlen: 24
87.199.54.0/24 maxlen: 24
87.199.55.0/24 maxlen: 24
87.199.56.0/24 maxlen: 24
87.199.57.0/24 maxlen: 24
87.199.58.0/24 maxlen: 24
87.199.59.0/24 maxlen: 24
87.199.60.0/24 maxlen: 24
87.199.61.0/24 maxlen: 24
87.199.62.0/24 maxlen: 24
87.199.63.0/24 maxlen: 24
87.199.64.0/19 maxlen: 32
87.199.64.0/24 maxlen: 24
87.199.65.0/24 maxlen: 24
87.199.66.0/24 maxlen: 24
87.199.67.0/24 maxlen: 24
87.199.68.0/24 maxlen: 24
87.199.69.0/24 maxlen: 24
87.199.70.0/24 maxlen: 24
87.199.71.0/24 maxlen: 24
87.199.72.0/24 maxlen: 24
87.199.73.0/24 maxlen: 24
87.199.74.0/24 maxlen: 24
87.199.75.0/24 maxlen: 24
87.199.76.0/24 maxlen: 24
87.199.77.0/24 maxlen: 24
87.199.78.0/24 maxlen: 24
87.199.79.0/24 maxlen: 24
87.199.80.0/24 maxlen: 24
87.199.81.0/24 maxlen: 24
87.199.82.0/24 maxlen: 24
87.199.83.0/24 maxlen: 24
87.199.84.0/24 maxlen: 24
87.199.85.0/24 maxlen: 24
87.199.86.0/24 maxlen: 24
87.199.87.0/24 maxlen: 24
87.199.88.0/24 maxlen: 24
87.199.89.0/24 maxlen: 24
87.199.90.0/24 maxlen: 24
87.199.96.0/20 maxlen: 32
87.199.112.0/21 maxlen: 32
87.199.120.0/22 maxlen: 32
87.199.126.0/24 maxlen: 24
87.199.128.0/17 maxlen: 32
87.199.214.0/24 maxlen: 24
87.199.215.0/24 maxlen: 24
87.199.216.0/24 maxlen: 24
87.199.217.0/24 maxlen: 24
87.199.218.0/24 maxlen: 24
87.199.219.0/24 maxlen: 24
87.199.220.0/24 maxlen: 24
87.199.221.0/24 maxlen: 24
87.199.222.0/24 maxlen: 24
87.199.223.0/24 maxlen: 24
87.199.224.0/24 maxlen: 24
87.199.225.0/24 maxlen: 24
87.199.226.0/24 maxlen: 24
87.199.227.0/24 maxlen: 24
87.199.228.0/24 maxlen: 24
87.199.229.0/24 maxlen: 24
87.199.230.0/24 maxlen: 24
87.199.231.0/24 maxlen: 24
87.199.232.0/24 maxlen: 24
87.199.233.0/24 maxlen: 24
87.199.234.0/24 maxlen: 24
87.199.235.0/24 maxlen: 24
87.199.236.0/24 maxlen: 24
87.199.237.0/24 maxlen: 24
87.199.238.0/24 maxlen: 24
87.199.239.0/24 maxlen: 24
87.199.240.0/24 maxlen: 24
87.199.241.0/24 maxlen: 24
87.199.242.0/24 maxlen: 24
87.199.243.0/24 maxlen: 24
87.199.244.0/24 maxlen: 24
87.199.245.0/24 maxlen: 24
87.199.246.0/24 maxlen: 24
87.199.247.0/24 maxlen: 24
87.199.248.0/24 maxlen: 24
87.199.249.0/24 maxlen: 24
87.199.250.0/24 maxlen: 24
87.199.251.0/24 maxlen: 24
87.199.252.0/24 maxlen: 24
87.199.253.0/24 maxlen: 24
87.199.254.0/24 maxlen: 24
87.199.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e1:ae:91:49:53:a1:ef:c8:a6:5d:12:63:89:d1:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237084712fdebb1bfc5a8c0262d919a8aa440603
Validity
Not Before: Oct 14 07:45:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5638651bc6b665ac2435a0756a9a62837373da2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ef:f5:38:7a:5b:65:79:af:d4:75:e9:2a:b1:
41:9f:03:76:98:a0:46:8f:fa:78:95:b5:63:e4:e1:
5c:85:35:a9:01:d6:0c:11:af:e1:55:6f:f2:0e:3c:
e0:2d:e4:bc:7a:97:52:91:49:39:00:c1:39:dd:22:
8c:7d:21:d6:57:35:30:91:2c:4a:00:19:38:e0:6c:
e9:c9:8b:09:bd:61:28:6a:40:2a:43:04:cd:a2:9d:
c2:72:e3:e5:9f:51:b7:e6:3a:40:d0:9d:15:05:af:
59:84:8d:08:56:50:d7:64:de:3e:57:1d:20:95:36:
8e:5e:54:fb:77:dc:72:d1:19:74:3d:6e:fc:cb:1b:
0a:c4:7a:e6:c4:8d:cb:7c:77:7b:8f:cd:49:cb:3f:
61:f4:7a:c7:78:a2:fa:36:7d:0f:35:e3:32:e7:20:
b0:fd:50:61:6d:6c:26:16:94:ad:4e:78:0e:f6:c3:
dd:64:07:30:ea:12:3d:e5:0e:27:4c:b6:ca:14:55:
5a:a8:c8:9f:e3:76:a2:16:32:a3:76:75:84:50:0f:
69:b4:83:a6:53:55:45:0c:40:ce:4d:aa:16:81:a4:
cd:cb:00:8e:fe:a4:b3:3c:ee:8c:1f:2a:33:99:51:
ea:66:18:0e:31:7c:8a:fb:cd:34:cd:7e:96:b6:c2:
f9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:65:1B:C6:B6:65:AC:24:35:A0:75:6A:9A:62:83:73:73:DA:2B
X509v3 Authority Key Identifier:
keyid:23:70:84:71:2F:DE:BB:1B:FC:5A:8C:02:62:D9:19:A8:AA:44:06:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3CEcS_euxv8WowCYtkZqKpEBgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/VjhlG8a2ZawkNaB1appig3Nz2is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e7e9ee-17d8-4e7e-bc28-7e1329e05ff4/1/I3CEcS_euxv8WowCYtkZqKpEBgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.199.0.0-87.199.123.255
87.199.126.0/24
87.199.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5c:b5:af:34:09:c8:a9:24:da:1b:6f:41:51:cc:dc:fc:08:8d:
19:1b:03:a9:a5:2b:8f:2d:f9:0c:f0:4c:14:c3:5d:b3:68:23:
cf:95:56:53:30:d7:d5:b5:ce:f2:52:06:58:40:4e:0f:7e:66:
7f:6b:97:72:ca:36:56:93:c5:77:84:40:36:11:c5:2c:34:61:
75:25:91:6b:87:5a:c9:6c:c6:fd:5a:f8:dc:c1:0c:05:fc:99:
48:73:37:e5:0a:5b:d0:ef:a5:10:07:16:3c:5e:c2:dc:97:ea:
dd:f2:07:b4:b7:6a:4b:7c:4a:36:d2:ee:30:14:f5:8f:3f:45:
b0:61:04:1c:b0:a3:25:23:48:4e:c4:8d:ea:1a:34:26:bc:d0:
c0:45:62:31:f8:5b:27:3b:c8:78:cf:52:99:af:f3:f2:3c:07:
58:a6:3c:76:8c:44:cc:2d:29:39:91:63:d2:1a:7a:a4:81:7f:
df:ab:eb:2e:f7:45:3e:32:6e:e3:16:7e:02:ff:16:30:77:b1:
88:fa:eb:2d:e1:0a:ed:91:ec:71:a7:d9:cd:ed:ff:9c:d0:88:
4a:0c:5a:4a:b8:64:25:6f:a6:79:3d:5a:d5:1f:74:66:4b:33:
fc:03:c9:07:f5:9f:16:c5:08:e9:31:a0:96:7b:14:01:0f:81:
98:12:56:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:27 2025 by rpki-client