Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/vRgORVIgzFbgx9kOiETjJtMLghA.roa
File: vRgORVIgzFbgx9kOiETjJtMLghA.roa (raw, json)
Hash identifier: Uf5SkSIOo28qZJtGrvXdFP718QNyditb6xU5BtcR6CQ=
Subject key identifier: BD:18:0E:45:52:20:CC:56:E0:C7:D9:0E:88:44:E3:26:D3:0B:82:10
Certificate issuer: /CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Certificate serial: 019F8463168BB2BF3ED54B91A9FBEC74788E
Authority key identifier: 05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/vRgORVIgzFbgx9kOiETjJtMLghA.roa
Signing time: Tue 21 Jul 2026 11:15:14 +0000
ROA not before: Tue 21 Jul 2026 11:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29422
IP address blocks: 77.86.128.0/17 maxlen: 17
77.91.209.0/24 maxlen: 24
77.91.210.0/23 maxlen: 23
80.69.160.0/21 maxlen: 21
80.69.168.0/22 maxlen: 22
81.17.192.0/21 maxlen: 21
83.145.192.0/18 maxlen: 18
83.150.64.0/18 maxlen: 18
84.20.128.0/19 maxlen: 19
84.239.128.0/17 maxlen: 17
84.239.208.0/20 maxlen: 20
94.101.0.0/20 maxlen: 20
185.123.116.0/22 maxlen: 22
188.117.0.0/18 maxlen: 18
193.104.38.0/24 maxlen: 24
194.79.16.0/22 maxlen: 22
213.157.64.0/19 maxlen: 19
217.30.176.0/20 maxlen: 20
217.149.48.0/20 maxlen: 20
2001:67c:70::/48 maxlen: 48
2001:1bc8::/29 maxlen: 29
2001:1bc8::/32 maxlen: 32
2a01:51c0::/29 maxlen: 29
2a01:51c0::/32 maxlen: 32
2a01:51c1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:63:16:8b:b2:bf:3e:d5:4b:91:a9:fb:ec:74:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053d04e72bb249c79eb1168cf1d43a3ca548c206
Validity
Not Before: Jul 21 11:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd180e455220cc56e0c7d90e8844e326d30b8210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:5b:2c:bf:96:20:32:f4:6c:ba:23:62:47:
3d:e3:c1:42:f9:e2:8f:23:0c:e7:f1:9e:52:d2:51:
f6:ba:34:6d:03:ae:bd:11:71:fa:ee:1b:e7:80:8d:
15:13:46:f8:ae:0c:d5:54:90:ae:2a:1b:29:12:d6:
7a:c6:94:e9:11:91:9c:0a:7a:9f:9d:21:d8:48:2f:
e4:e4:22:05:89:dc:38:84:3d:f1:f5:80:30:8e:ac:
c3:38:3f:9e:d9:63:30:f2:8e:79:44:95:92:db:a8:
0e:13:6e:68:7d:e4:e5:df:93:47:b7:5b:ca:0f:12:
16:1c:a4:b9:5c:d6:f7:ee:69:f4:ca:88:a6:d7:6a:
92:c8:87:3a:22:37:a4:35:f5:4a:92:4b:3f:2a:66:
0d:36:c7:cb:52:79:78:c1:9e:1a:25:c7:3b:03:d3:
45:1c:c9:ec:2c:b2:8c:06:e3:c0:c5:2a:b7:b1:7a:
e0:21:e9:da:93:e9:28:76:fe:ec:79:ee:b5:4e:01:
e5:7a:59:ca:31:47:7f:f7:a2:7a:f8:1d:43:da:69:
e8:db:f1:b2:24:4c:df:6f:10:36:4c:a2:1f:af:97:
ea:e2:30:be:3b:0d:1d:b0:aa:f4:06:60:db:88:d1:
e3:4e:50:a8:d5:a7:26:c2:9b:83:b2:ad:b6:ec:14:
22:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:18:0E:45:52:20:CC:56:E0:C7:D9:0E:88:44:E3:26:D3:0B:82:10
X509v3 Authority Key Identifier:
keyid:05:3D:04:E7:2B:B2:49:C7:9E:B1:16:8C:F1:D4:3A:3C:A5:48:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT0E5yuySceesRaM8dQ6PKVIwgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/vRgORVIgzFbgx9kOiETjJtMLghA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/3550b4-51b5-448b-ab62-2a813dbf4582/1/BT0E5yuySceesRaM8dQ6PKVIwgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.86.128.0/17
77.91.209.0-77.91.211.255
80.69.160.0-80.69.171.255
81.17.192.0/21
83.145.192.0/18
83.150.64.0/18
84.20.128.0/19
84.239.128.0/17
94.101.0.0/20
185.123.116.0/22
188.117.0.0/18
193.104.38.0/24
194.79.16.0/22
213.157.64.0/19
217.30.176.0/20
217.149.48.0/20
IPv6:
2001:67c:70::/48
2001:1bc8::/29
2a01:51c0::/29
Signature Algorithm: sha256WithRSAEncryption
98:d0:0d:2a:f5:69:64:f2:4b:13:37:8f:7f:5c:d8:c4:54:91:
9f:90:4b:b7:cf:38:4c:12:2b:38:08:18:e2:fa:5b:2a:d3:12:
b7:00:31:11:6b:d7:19:3f:3f:47:ec:dc:b5:e4:cf:c6:94:71:
d9:4d:2d:c7:6f:f8:8c:16:68:f1:43:9e:9c:1d:fa:5f:3e:5e:
a1:de:2c:1a:f1:26:5e:28:64:84:58:29:5d:24:96:2e:43:83:
11:20:fb:67:60:60:7f:0e:80:c1:77:43:78:64:08:e3:ee:df:
a0:c6:df:61:62:e9:f1:2a:95:2b:cf:1f:8b:75:f6:9c:c8:b2:
7b:9f:19:0c:97:c3:0a:7f:0b:f0:c2:81:d6:1d:c5:49:3b:80:
f2:49:95:42:8c:2f:eb:04:d9:20:a0:60:fa:55:11:97:c7:20:
f0:d5:f5:fc:07:95:d7:4a:a3:1e:ae:b1:d1:d6:ec:ef:7d:94:
8b:65:b6:26:8d:75:5e:2a:2d:9d:3c:d6:a3:31:0a:43:96:25:
54:cd:61:df:dd:fc:d8:58:70:fa:49:b3:06:d4:b3:0a:5d:9f:
39:cf:f7:72:25:33:72:91:7f:4b:f1:c3:ff:c3:aa:97:b1:d5:
b3:2f:3b:4a:8f:96:13:c3:31:e2:1d:43:1b:3f:34:dd:55:6b:
e8:b2:b6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:47 2026 by rpki-client