Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/vCZg6yHD3XsRPwy9TgcJflXSBXo.roa
File: vCZg6yHD3XsRPwy9TgcJflXSBXo.roa (raw, json)
Hash identifier: vYBjx1Yzv0s/R05C9GEaDFepYhC35vrqYzu3ZIjIJXI=
Subject key identifier: BC:26:60:EB:21:C3:DD:7B:11:3F:0C:BD:4E:07:09:7E:55:D2:05:7A
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 019D012C3DACC29CD5FEA33A06AA5C96F708
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/vCZg6yHD3XsRPwy9TgcJflXSBXo.roa
Signing time: Wed 18 Mar 2026 13:39:29 +0000
ROA not before: Wed 18 Mar 2026 13:39:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203061
IP address blocks: 72.63.4.0/23 maxlen: 23
72.63.16.0/23 maxlen: 23
72.63.36.0/23 maxlen: 23
72.63.52.0/23 maxlen: 23
72.63.76.0/23 maxlen: 23
72.63.84.0/23 maxlen: 23
72.63.96.0/23 maxlen: 23
72.63.108.0/23 maxlen: 23
72.63.128.0/23 maxlen: 23
72.63.212.0/23 maxlen: 23
72.63.244.0/23 maxlen: 23
72.63.252.0/23 maxlen: 23
193.84.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:01:2c:3d:ac:c2:9c:d5:fe:a3:3a:06:aa:5c:96:f7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Mar 18 13:39:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc2660eb21c3dd7b113f0cbd4e07097e55d2057a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:54:23:0f:aa:0f:80:ad:2a:1e:95:31:62:40:
a5:fe:4a:05:fb:78:a6:70:a9:49:e5:7b:7c:c3:50:
83:82:65:f1:ab:23:14:00:01:75:41:08:1a:fd:6f:
80:bc:69:86:ba:3b:29:b3:ee:fd:e5:35:9c:2f:2c:
fc:04:34:07:09:4d:be:d3:6e:20:f4:06:b8:47:da:
38:f9:a2:c6:c3:18:98:0b:35:42:cc:5a:94:4e:38:
f6:0c:22:75:23:36:76:af:32:25:55:a0:56:b1:d6:
b9:42:78:b1:e6:87:57:c2:1c:98:01:72:d9:0a:db:
dc:76:25:96:56:bc:73:90:80:b5:39:c1:c5:78:78:
97:c7:0b:5a:da:e3:44:2f:00:82:3b:b4:2f:39:1f:
0f:93:e1:bc:84:36:8a:91:5d:df:92:b5:b5:5f:ff:
c3:8a:bf:5b:40:f8:9d:92:d7:8c:10:fd:5d:b4:c3:
48:0d:ee:97:d4:85:fe:30:fd:da:a6:f1:b6:94:03:
26:97:f6:89:63:4f:94:e3:e4:14:92:0d:b6:5d:ba:
73:5d:af:4b:85:93:3b:63:13:5c:7c:49:9e:bd:27:
73:27:fa:69:4d:b1:8e:82:6c:68:68:75:0d:ec:7b:
ae:60:2e:74:32:46:1a:f8:62:6e:c0:f3:6f:18:97:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:26:60:EB:21:C3:DD:7B:11:3F:0C:BD:4E:07:09:7E:55:D2:05:7A
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/vCZg6yHD3XsRPwy9TgcJflXSBXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.63.4.0/23
72.63.16.0/23
72.63.36.0/23
72.63.52.0/23
72.63.76.0/23
72.63.84.0/23
72.63.96.0/23
72.63.108.0/23
72.63.128.0/23
72.63.212.0/23
72.63.244.0/23
72.63.252.0/23
193.84.183.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:af:2a:9a:95:6b:fc:d2:a5:b5:1c:69:05:45:04:5e:b0:61:
d9:74:5f:81:7e:16:fe:ad:21:e5:ad:0f:b0:39:f7:ea:a1:1d:
a5:0d:78:60:6c:1e:59:2b:aa:1c:62:ca:6c:cb:2a:69:89:3f:
38:2b:d1:55:df:cc:cb:56:ae:ee:8c:b7:44:31:3d:45:04:dc:
5e:43:28:c9:e8:59:fb:6c:13:5d:9d:f4:20:3f:33:c0:99:d5:
f4:4f:6d:9b:c5:a6:d9:fb:da:3d:7c:26:05:45:86:3d:ef:59:
f7:93:33:99:66:d4:98:07:e3:72:c5:5c:f1:89:28:db:94:8d:
c5:6f:49:7a:eb:f3:0a:23:53:18:3d:4a:90:8f:ca:45:4b:50:
e5:46:4c:08:98:41:86:fb:60:bf:d3:56:6d:68:43:e4:af:41:
27:22:b5:f9:31:0b:3e:c0:5f:48:a6:1d:27:d1:49:11:6d:2d:
ef:5c:c9:ed:aa:f9:37:6c:f8:06:7e:c2:19:6b:44:ea:63:4d:
11:64:c9:af:11:2e:f2:8d:f5:58:65:a9:68:f5:2b:47:6d:a8:
cc:1c:b0:f0:b3:65:4e:b7:de:92:3f:32:2b:87:f3:a3:7f:e9:
95:e4:43:93:a7:44:f3:80:a5:ad:06:eb:11:b1:32:f6:b4:58:
67:4c:59:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:40:15 2026 by rpki-client