Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VMsVjBDR28exU68zl13nGLuzqFY.roa
File: VMsVjBDR28exU68zl13nGLuzqFY.roa (raw, json)
Hash identifier: btFCBG5i0I0XkijiJ+Tx1ygl57Ko2CfpdoRcMn580BQ=
Subject key identifier: 54:CB:15:8C:10:D1:DB:C7:B1:53:AF:33:97:5D:E7:18:BB:B3:A8:56
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 019F3725E2FA24FCA5C15199AAA264DD7920
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VMsVjBDR28exU68zl13nGLuzqFY.roa
Signing time: Mon 06 Jul 2026 11:17:37 +0000
ROA not before: Mon 06 Jul 2026 11:17:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33947
IP address blocks: 79.172.232.0/22 maxlen: 22
84.21.0.0/22 maxlen: 22
84.21.9.0/24 maxlen: 24
84.21.14.0/24 maxlen: 24
84.21.17.0/24 maxlen: 24
84.21.20.0/24 maxlen: 24
84.21.21.0/24 maxlen: 24
84.21.22.0/24 maxlen: 24
84.21.23.0/24 maxlen: 24
84.21.24.0/24 maxlen: 24
84.21.25.0/24 maxlen: 24
84.21.26.0/24 maxlen: 24
84.21.27.0/24 maxlen: 24
84.21.28.0/24 maxlen: 24
84.21.29.0/24 maxlen: 24
84.21.30.0/24 maxlen: 24
87.229.1.0/24 maxlen: 24
87.229.2.0/24 maxlen: 24
87.229.3.0/24 maxlen: 24
87.229.4.0/24 maxlen: 24
87.229.5.0/24 maxlen: 24
87.229.27.0/24 maxlen: 24
87.229.28.0/24 maxlen: 24
87.229.29.0/24 maxlen: 24
87.229.30.0/24 maxlen: 24
87.229.46.0/23 maxlen: 23
87.229.49.0/24 maxlen: 24
178.238.214.0/24 maxlen: 24
178.238.219.0/24 maxlen: 24
2a02:730:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:25:e2:fa:24:fc:a5:c1:51:99:aa:a2:64:dd:79:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jul 6 11:17:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54cb158c10d1dbc7b153af33975de718bbb3a856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:78:46:1f:5a:7c:e7:99:63:78:7f:fa:b6:a1:
08:e6:31:31:4c:eb:80:a0:fb:cb:f9:a1:a6:05:ab:
7c:df:66:ed:7f:c6:1e:81:36:d2:98:35:f9:b9:e2:
bf:74:92:7c:2a:0e:6c:b2:3b:53:77:28:ba:c6:99:
73:c3:1c:2c:d3:e8:c2:0d:7f:63:31:37:0d:a0:07:
8b:1e:ab:d2:b7:f6:19:52:e9:a6:45:11:71:db:fa:
ae:b5:57:30:52:7f:1d:19:27:20:89:51:11:ab:c3:
35:8f:29:e6:32:4d:e4:dc:26:14:c4:0c:f0:48:a7:
dc:76:c0:70:7d:d8:7b:a6:f1:0c:b3:2b:df:88:f4:
a0:6e:69:1e:3c:55:0d:17:dc:fb:fd:f8:bf:3d:f7:
21:dd:4e:07:1d:de:61:91:94:38:53:d6:80:45:c2:
17:00:9f:0d:69:04:32:03:91:5a:ab:f0:64:f8:11:
32:98:89:2d:61:4b:84:30:41:51:67:03:e2:35:6c:
3d:d8:6c:3c:48:53:fd:bb:29:53:d9:5f:d7:e7:32:
48:be:5e:3e:e4:66:f1:fa:84:c1:c2:29:4c:05:db:
d3:fe:79:e1:c2:6e:d0:af:d5:b4:f7:9a:b5:9c:ac:
ac:8a:25:3b:e6:88:aa:73:a3:82:70:ed:10:c6:54:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CB:15:8C:10:D1:DB:C7:B1:53:AF:33:97:5D:E7:18:BB:B3:A8:56
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VMsVjBDR28exU68zl13nGLuzqFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.232.0/22
84.21.0.0/22
84.21.9.0/24
84.21.14.0/24
84.21.17.0/24
84.21.20.0-84.21.30.255
87.229.1.0-87.229.5.255
87.229.27.0-87.229.30.255
87.229.46.0/23
87.229.49.0/24
178.238.214.0/24
178.238.219.0/24
IPv6:
2a02:730:2000::/48
Signature Algorithm: sha256WithRSAEncryption
32:e6:d0:12:fb:86:c0:93:27:3e:fa:60:fa:e8:46:55:53:3a:
e5:27:85:af:99:60:6b:a9:49:95:f0:9a:95:e7:82:40:7e:fa:
7d:6a:ba:8a:07:1a:d1:38:51:4f:5f:d7:a3:f0:1c:87:db:0a:
54:3c:82:6b:eb:b7:21:28:9b:b7:52:b7:f8:38:80:64:b2:3d:
e3:68:59:40:a5:61:01:f0:57:14:b5:f9:9e:b8:dd:f6:10:8c:
ba:d3:b3:c9:6a:bb:bf:00:71:a4:40:59:f8:8d:c8:e5:92:1e:
c1:f8:10:67:40:cb:e5:66:2f:7a:7c:e3:5f:44:d9:33:c9:75:
84:b0:fd:a6:9e:4c:3f:36:ed:43:d1:5c:26:67:93:3c:43:3c:
bf:92:4f:09:89:62:3c:60:e8:8c:3a:d2:a1:d9:d4:f1:97:c5:
a6:e4:32:2e:61:86:49:b7:0d:8e:0a:9a:d8:7e:97:62:5a:a7:
82:d3:9b:4b:ae:36:fc:be:59:8e:38:5e:af:73:11:ce:5c:72:
c8:be:81:ca:d6:1e:c7:ff:0b:ea:a5:55:db:4c:9a:fc:e4:80:
7b:80:a8:13:19:fe:ec:97:d9:2e:d0:a2:e5:d5:76:12:9e:41:
7c:af:c4:c7:c5:3b:af:fa:5d:39:a2:5a:69:64:2d:af:21:90:
cb:ed:8a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:40 2026 by rpki-client