Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/vOGLIMF8fuo6_RactD07x4zO_f8.roa
File: vOGLIMF8fuo6_RactD07x4zO_f8.roa (raw, json)
Hash identifier: rm+qdPGhF0Bw4n41HktEXFXHuWpgRkirT2iEtMYSi54=
Subject key identifier: BC:E1:8B:20:C1:7C:7E:EA:3A:FD:16:9C:B4:3D:3B:C7:8C:CE:FD:FF
Certificate issuer: /CN=d5620cec70974d037d7769758c74668305b32cf2
Certificate serial: 019F7F8E3798E090E064B7785168A380196F
Authority key identifier: D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/vOGLIMF8fuo6_RactD07x4zO_f8.roa
Signing time: Mon 20 Jul 2026 12:44:14 +0000
ROA not before: Mon 20 Jul 2026 12:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62212
IP address blocks: 85.137.164.0/22 maxlen: 24
87.236.146.0/24 maxlen: 24
91.184.248.0/22 maxlen: 24
91.199.137.0/24 maxlen: 24
91.199.147.0/24 maxlen: 24
91.199.154.0/24 maxlen: 24
91.199.160.0/24 maxlen: 24
92.61.70.0/23 maxlen: 24
109.172.8.0/23 maxlen: 24
109.238.94.0/23 maxlen: 24
141.133.172.0/22 maxlen: 24
159.200.240.0/23 maxlen: 24
188.127.246.0/23 maxlen: 24
193.124.56.0/22 maxlen: 24
2a11:3b80::/29 maxlen: 48
2a11:3b80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:8e:37:98:e0:90:e0:64:b7:78:51:68:a3:80:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5620cec70974d037d7769758c74668305b32cf2
Validity
Not Before: Jul 20 12:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bce18b20c17c7eea3afd169cb43d3bc78ccefdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:a7:6e:a4:c6:9c:89:b2:0f:0a:a0:b6:2a:
e7:d4:85:c7:55:8d:8a:e7:20:09:ec:3c:be:1f:fe:
78:b1:c8:38:96:4f:68:98:65:dc:0d:59:db:d9:86:
06:28:b6:40:dd:70:10:59:34:30:b5:58:06:fd:66:
1a:40:bb:91:4f:c1:62:1c:09:cc:e6:4e:64:f3:a8:
15:d6:6e:b5:3c:01:ef:a8:60:ad:a3:d1:3c:94:6f:
15:a4:5f:27:8f:bb:dd:92:a8:4f:8a:9d:5a:79:72:
5e:6d:db:d8:b3:c8:f3:12:e6:f2:f8:01:ea:27:17:
20:ec:57:2d:ff:4f:9f:ca:af:30:8f:ad:11:6c:51:
8e:e0:dc:83:48:2f:e4:83:7b:54:c3:f7:c3:a1:b5:
7a:29:7a:9f:97:92:04:ea:20:d0:53:4c:34:0e:c2:
bd:ee:e5:e6:cd:ea:79:ac:4a:dd:67:1e:d2:99:8e:
4c:84:cb:00:a3:50:c4:fa:ed:e0:64:9a:1c:ac:7d:
65:84:a1:1a:81:1c:2a:02:c9:d9:4f:51:d2:bb:a3:
ab:39:9f:1f:74:9c:9e:b1:e9:7b:ff:57:25:ad:54:
a5:7e:dd:39:61:82:c4:05:34:d0:8e:9d:3c:50:ec:
dd:88:c9:37:4b:3f:cd:bc:cc:65:72:8b:b5:d9:51:
72:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E1:8B:20:C1:7C:7E:EA:3A:FD:16:9C:B4:3D:3B:C7:8C:CE:FD:FF
X509v3 Authority Key Identifier:
keyid:D5:62:0C:EC:70:97:4D:03:7D:77:69:75:8C:74:66:83:05:B3:2C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WIM7HCXTQN9d2l1jHRmgwWzLPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/vOGLIMF8fuo6_RactD07x4zO_f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/323a92-7d38-49ec-ba99-be434cb9f8f8/1/1WIM7HCXTQN9d2l1jHRmgwWzLPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.164.0/22
87.236.146.0/24
91.184.248.0/22
91.199.137.0/24
91.199.147.0/24
91.199.154.0/24
91.199.160.0/24
92.61.70.0/23
109.172.8.0/23
109.238.94.0/23
141.133.172.0/22
159.200.240.0/23
188.127.246.0/23
193.124.56.0/22
IPv6:
2a11:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:b4:34:74:fe:3f:3f:c0:a2:cb:4e:9e:85:98:ec:18:a5:91:
af:c7:32:ff:c9:26:f0:b3:42:8b:eb:70:e7:8a:d0:49:0d:2f:
f4:d9:26:ed:32:e3:9a:0b:90:da:e6:98:a1:54:b9:ab:d2:7f:
5a:52:19:07:fb:c5:42:b0:a6:24:85:43:67:3d:b8:ec:63:70:
f5:08:37:62:8f:63:57:38:28:47:56:bd:c0:06:9f:b4:38:b8:
95:8b:38:2c:67:d3:c4:69:c5:c0:5c:d5:04:06:fb:e1:b7:68:
db:81:9d:a6:af:ce:b1:9a:b1:d2:d8:06:95:30:ce:b2:ec:84:
72:e5:a4:ae:1d:ef:2c:c3:21:a1:d3:69:3a:af:b0:79:64:3d:
51:d6:ec:72:d3:1d:31:e5:5a:5e:a7:cf:68:32:a6:80:85:1a:
fb:5e:c0:85:0a:1e:b3:d6:9f:39:c9:53:a2:a6:61:f0:ba:1f:
96:7e:ae:b5:0d:cb:6f:54:48:c9:8a:45:bb:64:63:ab:ab:9f:
e3:6d:34:9d:fe:e9:5d:1c:8a:44:b1:a0:c5:30:17:32:5a:f9:
84:e0:3b:b4:51:52:57:77:63:5b:1d:5f:f2:1b:94:7c:d9:66:
82:12:bf:ea:5a:2c:bf:d2:c2:3e:09:2b:92:5e:d5:63:ad:5c:
f6:be:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:42 2026 by rpki-client