Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VcfWl2ztsgkb86CMozwR5cxDz0Q.roa
File: VcfWl2ztsgkb86CMozwR5cxDz0Q.roa (raw, json)
Hash identifier: c4NObIngtD273itZVlKYNwa6Pzxd8B8HkfWbnD04nfQ=
Subject key identifier: 55:C7:D6:97:6C:ED:B2:09:1B:F3:A0:8C:A3:3C:11:E5:CC:43:CF:44
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0198CE79796D0773178FE971991834B58C0E
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VcfWl2ztsgkb86CMozwR5cxDz0Q.roa
Signing time: Thu 21 Aug 2025 21:12:04 +0000
ROA not before: Thu 21 Aug 2025 21:12:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201684
IP address blocks: 77.83.60.0/24 maxlen: 24
77.83.61.0/24 maxlen: 24
77.83.62.0/24 maxlen: 24
77.83.63.0/24 maxlen: 24
87.121.168.0/24 maxlen: 24
87.121.169.0/24 maxlen: 24
87.121.170.0/24 maxlen: 24
87.121.171.0/24 maxlen: 24
87.121.172.0/24 maxlen: 24
87.121.173.0/24 maxlen: 24
87.121.174.0/24 maxlen: 24
87.121.175.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
193.203.254.0/24 maxlen: 24
2a03:11a0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ce:79:79:6d:07:73:17:8f:e9:71:99:18:34:b5:8c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Aug 21 21:12:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55c7d6976cedb2091bf3a08ca33c11e5cc43cf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:98:38:1b:3b:3a:7d:ac:22:77:ab:11:f8:
dc:1b:8f:c7:c9:50:f3:b2:ef:0d:d5:93:de:47:1d:
06:81:50:cc:02:fd:cd:ac:cb:40:69:f5:ea:25:f3:
13:73:20:fc:7c:1f:c2:73:27:a7:b2:ac:bb:46:c8:
db:a8:16:af:dd:9d:c3:c4:20:ff:85:eb:02:90:a4:
6d:1e:01:43:14:ad:14:c1:3e:e4:4c:81:94:87:f9:
86:9a:1f:6e:0b:ba:0b:e0:57:bf:11:ff:46:71:78:
1d:31:6e:da:cb:b3:46:2f:19:f6:be:73:e6:35:3f:
88:63:f5:1f:66:75:ab:a9:8b:d3:19:e2:32:2a:8f:
da:d2:33:cf:96:df:0d:67:18:f2:88:ea:3c:10:03:
d5:9b:d4:a1:f1:b9:5f:15:ac:cc:83:b2:ec:e1:1a:
d3:58:7d:a6:af:6e:aa:b2:a2:5d:89:32:2b:98:85:
ea:85:5f:99:eb:4b:5d:c6:fa:5f:b8:8b:17:a1:24:
95:21:76:c9:58:ba:ba:69:95:4a:7c:94:1a:84:20:
fe:0d:08:8e:bf:a1:93:2d:93:68:6e:3b:a4:0b:ca:
ea:da:54:d1:5d:93:46:fd:17:70:bc:77:5c:ea:5b:
31:73:61:ec:79:9b:f3:e1:a2:8e:a8:97:97:a6:fe:
1f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C7:D6:97:6C:ED:B2:09:1B:F3:A0:8C:A3:3C:11:E5:CC:43:CF:44
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VcfWl2ztsgkb86CMozwR5cxDz0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.60.0/22
87.121.168.0/21
185.64.24.0/22
193.203.254.0/24
IPv6:
2a03:11a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
99:ab:df:5c:f0:3a:9a:60:99:3a:c4:90:05:be:b4:22:ac:2e:
fd:ff:1e:55:05:6b:67:13:6f:0f:ad:02:f9:e3:6b:c9:bf:b2:
e2:33:c0:99:41:00:52:14:b3:93:2a:db:4f:68:4c:d8:07:7a:
6c:e4:52:02:31:f4:b1:3b:09:ae:ca:77:5d:b6:f1:d5:4d:ac:
0b:3f:45:66:05:08:62:dd:55:dc:f8:f3:8f:b1:a3:1d:c0:d7:
2a:b6:b0:10:0f:21:6f:e4:f2:9b:3a:af:46:eb:d9:ea:5e:ca:
74:be:f4:80:5f:e2:02:1c:1d:00:26:4e:d0:4c:82:fb:21:aa:
7e:e4:5f:07:fb:6f:de:14:bf:4a:db:06:15:ba:f5:ac:a0:fe:
95:c3:7b:c2:69:62:11:58:fb:1f:d9:e0:08:08:3e:8d:8b:6e:
a7:95:32:a0:ab:d9:43:9c:e8:b8:f4:64:31:31:78:e0:f7:27:
29:4f:4b:35:ef:45:94:0a:7e:8c:51:21:81:70:ba:ce:d2:cf:
4d:36:ad:fe:eb:87:b3:2b:1c:c6:1b:a3:99:84:e3:d8:93:29:
e0:94:cf:a7:b6:72:7c:3a:f2:f1:a5:fa:f5:97:48:85:90:f6:
b2:b5:2a:6b:89:11:0c:0b:61:10:72:1f:c4:9f:ef:e1:53:ea:
28:82:82:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:13:08 2025 by rpki-client