Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/VyqoHcr9KS4JWHhnv-VcHDSTVnI.roa
File: VyqoHcr9KS4JWHhnv-VcHDSTVnI.roa (raw, json)
Hash identifier: f/9yzBcEtFBgSdEpSUnnTNXHMDiqI8UyOIQTZBjvt7A=
Subject key identifier: 57:2A:A8:1D:CA:FD:29:2E:09:58:78:67:BF:E5:5C:1C:34:93:56:72
Certificate issuer: /CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Certificate serial: 019F17F587184D4B667686D2AE834E05DAEE
Authority key identifier: 87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/VyqoHcr9KS4JWHhnv-VcHDSTVnI.roa
Signing time: Tue 30 Jun 2026 09:56:34 +0000
ROA not before: Tue 30 Jun 2026 09:56:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132839
IP address blocks: 2.59.100.0/22 maxlen: 24
2.59.100.0/24 maxlen: 24
2.59.101.0/24 maxlen: 24
2.59.102.0/24 maxlen: 24
2.59.103.0/24 maxlen: 24
45.8.28.0/22 maxlen: 24
45.9.108.0/22 maxlen: 24
45.10.208.0/22 maxlen: 24
45.13.160.0/22 maxlen: 24
45.66.188.0/22 maxlen: 24
45.80.112.0/22 maxlen: 24
45.87.228.0/22 maxlen: 24
45.93.64.0/22 maxlen: 24
45.93.64.0/24 maxlen: 24
45.93.65.0/24 maxlen: 24
45.93.66.0/24 maxlen: 24
45.93.67.0/24 maxlen: 24
45.131.156.0/22 maxlen: 24
45.131.156.0/24 maxlen: 24
45.131.157.0/24 maxlen: 24
45.131.158.0/24 maxlen: 24
45.131.159.0/24 maxlen: 24
45.142.76.0/22 maxlen: 24
45.142.77.0/24 maxlen: 24
45.142.78.0/24 maxlen: 24
45.142.79.0/24 maxlen: 24
45.147.212.0/22 maxlen: 24
45.147.213.0/24 maxlen: 24
45.147.214.0/24 maxlen: 24
45.147.215.0/24 maxlen: 24
45.149.68.0/22 maxlen: 24
45.156.168.0/22 maxlen: 24
45.156.169.0/24 maxlen: 24
45.156.171.0/24 maxlen: 24
45.156.216.0/22 maxlen: 24
45.158.220.0/22 maxlen: 24
45.158.221.0/24 maxlen: 24
45.158.223.0/24 maxlen: 24
62.192.188.0/22 maxlen: 24
62.192.188.0/24 maxlen: 24
62.192.189.0/24 maxlen: 24
62.192.190.0/24 maxlen: 24
62.192.191.0/24 maxlen: 24
83.150.224.0/22 maxlen: 24
83.150.224.0/24 maxlen: 24
83.150.225.0/24 maxlen: 24
85.208.56.0/22 maxlen: 24
85.208.56.0/24 maxlen: 24
85.208.57.0/24 maxlen: 24
85.208.58.0/24 maxlen: 24
85.208.59.0/24 maxlen: 24
92.118.144.0/22 maxlen: 24
92.118.144.0/24 maxlen: 24
92.118.145.0/24 maxlen: 24
92.118.146.0/24 maxlen: 24
92.118.147.0/24 maxlen: 24
185.51.164.0/22 maxlen: 24
185.51.164.0/24 maxlen: 24
185.51.167.0/24 maxlen: 24
186.240.0.0/17 maxlen: 24
186.240.0.0/19 maxlen: 24
186.240.32.0/19 maxlen: 24
186.240.64.0/19 maxlen: 24
186.240.96.0/19 maxlen: 24
186.241.192.0/18 maxlen: 24
186.241.192.0/19 maxlen: 24
186.241.224.0/19 maxlen: 24
186.243.64.0/18 maxlen: 24
186.243.64.0/19 maxlen: 24
186.243.96.0/19 maxlen: 24
193.42.15.0/24 maxlen: 24
193.42.132.0/24 maxlen: 24
193.42.135.0/24 maxlen: 24
193.42.149.0/24 maxlen: 24
193.108.46.0/23 maxlen: 24
193.108.96.0/23 maxlen: 24
193.168.4.0/23 maxlen: 24
193.168.4.0/24 maxlen: 24
194.146.84.0/22 maxlen: 24
194.146.84.0/24 maxlen: 24
194.146.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f5:87:18:4d:4b:66:76:86:d2:ae:83:4e:05:da:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878abb29977a65b140cacb6e72ab24ceddd4e8c5
Validity
Not Before: Jun 30 09:56:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=572aa81dcafd292e09587867bfe55c1c34935672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:b0:d6:6f:d3:10:4f:f5:56:81:33:65:5f:
78:02:ab:07:e4:81:54:d0:a6:71:a8:0c:eb:01:a3:
17:92:cc:d9:a8:73:cf:1a:75:a4:ea:e9:42:3d:c6:
d1:e6:ca:73:4d:f4:be:59:09:80:ee:e1:c5:af:89:
a9:26:46:77:37:4e:c4:e6:18:7d:b2:1d:b9:e6:7a:
2e:b8:f0:16:85:38:6e:29:d2:cb:21:96:cd:2c:9e:
96:da:1f:24:bb:5d:a7:f2:3f:da:1d:ef:7a:1c:c3:
79:1b:f2:8c:38:4b:a0:c7:39:0f:36:5c:df:30:c1:
75:f8:c4:2b:8d:4d:fc:9c:60:cd:4a:56:97:2d:3f:
f2:ca:5b:04:d8:1a:c0:3f:72:45:ea:75:d3:5c:b5:
dc:5d:7f:1f:d3:df:3e:26:13:05:38:94:57:3b:e6:
3d:3b:49:28:cb:ec:a3:79:9a:50:0d:86:07:4f:bb:
49:d0:99:97:2f:cf:59:77:8d:b0:86:a1:14:c5:ec:
e5:0a:65:f0:54:8a:a3:e1:12:0c:02:52:e6:5b:f6:
c7:91:2b:73:a4:62:de:6b:c7:92:f4:e9:70:c0:20:
3d:bb:5b:d8:cb:20:68:ba:92:65:8e:10:f6:06:f7:
8d:02:23:36:73:79:6f:50:94:4f:33:2b:45:64:4e:
f9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:2A:A8:1D:CA:FD:29:2E:09:58:78:67:BF:E5:5C:1C:34:93:56:72
X509v3 Authority Key Identifier:
keyid:87:8A:BB:29:97:7A:65:B1:40:CA:CB:6E:72:AB:24:CE:DD:D4:E8:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4q7KZd6ZbFAystucqskzt3U6MU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/VyqoHcr9KS4JWHhnv-VcHDSTVnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06b8f5-1a76-45f8-b97a-ac8647d0558a/1/h4q7KZd6ZbFAystucqskzt3U6MU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.100.0/22
45.8.28.0/22
45.9.108.0/22
45.10.208.0/22
45.13.160.0/22
45.66.188.0/22
45.80.112.0/22
45.87.228.0/22
45.93.64.0/22
45.131.156.0/22
45.142.76.0/22
45.147.212.0/22
45.149.68.0/22
45.156.168.0/22
45.156.216.0/22
45.158.220.0/22
62.192.188.0/22
83.150.224.0/22
85.208.56.0/22
92.118.144.0/22
185.51.164.0/22
186.240.0.0/17
186.241.192.0/18
186.243.64.0/18
193.42.15.0/24
193.42.132.0/24
193.42.135.0/24
193.42.149.0/24
193.108.46.0/23
193.108.96.0/23
193.168.4.0/23
194.146.84.0/22
Signature Algorithm: sha256WithRSAEncryption
92:6e:aa:39:4c:83:5a:c5:8c:b1:58:4e:0d:ee:0d:60:f9:65:
1a:7e:7e:2c:72:a2:7a:29:7a:a8:e1:b5:8f:2d:82:b5:59:8e:
c7:6d:e0:72:c3:b5:7e:fd:fe:b2:6a:cb:3d:01:1d:73:41:77:
fb:3f:59:8c:ef:1d:c3:3d:d5:0b:75:1f:76:ac:15:07:38:89:
6d:f4:d5:d6:0e:ae:3c:da:95:b1:68:86:54:f8:f6:c0:60:54:
18:9d:54:e0:96:cb:9d:f8:ed:29:84:ec:72:c9:4d:97:4a:24:
b3:5e:c3:94:98:a2:db:0f:f2:e4:91:12:eb:6d:a9:60:d4:38:
2f:87:ea:96:cf:73:ee:2c:de:a0:41:fe:20:3e:7f:57:b0:1e:
08:03:1d:35:b6:7c:14:1c:1f:11:00:2b:28:86:a7:51:1c:d8:
62:e6:a1:e0:24:98:ba:65:e0:10:48:7b:32:9c:4e:1e:ea:ef:
56:bd:ad:75:e6:1b:9a:be:c8:c5:27:fe:fa:24:53:b5:57:34:
6a:3c:73:04:27:17:a7:df:dd:07:db:d2:12:dc:0a:63:2a:42:
f8:eb:08:6b:8e:a9:50:9a:bf:ac:52:cc:2d:42:73:30:76:00:
76:d8:3b:47:c2:53:9d:63:b4:71:3a:4b:40:24:84:65:60:5e:
b6:aa:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:03:13 2026 by rpki-client