Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/VQZz-okygci0q4bPk4NrG70FL80.roa
File: VQZz-okygci0q4bPk4NrG70FL80.roa (raw, json)
Hash identifier: zB51qkJyOipwoBy4eTPTCUbwd332werRHx90DRFh23E=
Subject key identifier: 55:06:73:FA:89:32:81:C8:B4:AB:86:CF:93:83:6B:1B:BD:05:2F:CD
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 019F8ED642CA68EAB78BA424F4E7200D951F
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/VQZz-okygci0q4bPk4NrG70FL80.roa
Signing time: Thu 23 Jul 2026 11:57:14 +0000
ROA not before: Thu 23 Jul 2026 11:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 85.137.248.0/23 maxlen: 24
85.137.248.0/24 maxlen: 24
85.137.249.0/24 maxlen: 24
91.208.162.0/24 maxlen: 24
91.208.184.0/24 maxlen: 24
91.208.197.0/24 maxlen: 24
91.208.206.0/24 maxlen: 24
131.123.32.0/19 maxlen: 24
131.123.32.0/24 maxlen: 24
131.123.33.0/24 maxlen: 24
131.123.34.0/24 maxlen: 24
131.123.35.0/24 maxlen: 24
131.123.36.0/24 maxlen: 24
131.123.37.0/24 maxlen: 24
131.123.38.0/24 maxlen: 24
131.123.39.0/24 maxlen: 24
131.123.40.0/24 maxlen: 24
131.123.41.0/24 maxlen: 24
131.123.42.0/24 maxlen: 24
131.123.43.0/24 maxlen: 24
131.123.48.0/20 maxlen: 20
131.123.50.0/24 maxlen: 24
143.246.192.0/21 maxlen: 24
2a0f:5f40::/29 maxlen: 48
2a0f:5f40::/48 maxlen: 48
2a0f:5f40:1::/48 maxlen: 48
2a0f:5f40:1000::/48 maxlen: 48
2a0f:5f45::/32 maxlen: 32
2a0f:5f46::/32 maxlen: 32
2a0f:5f46:600::/40 maxlen: 40
2a0f:5f46:700::/40 maxlen: 40
2a0f:5f46:800::/40 maxlen: 40
2a0f:5f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d6:42:ca:68:ea:b7:8b:a4:24:f4:e7:20:0d:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Jul 23 11:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=550673fa893281c8b4ab86cf93836b1bbd052fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5c:65:fb:9d:dd:e9:48:e4:26:be:4d:85:87:
2d:f4:f6:1f:19:52:3d:85:05:4e:e5:03:4c:0d:58:
67:d2:e0:ea:e5:34:96:14:e4:91:0a:d0:95:61:78:
5e:15:3b:0c:5e:2f:f0:7c:bc:22:e5:a9:41:05:38:
47:ce:ac:77:ce:d7:b4:57:e9:2f:ad:e6:36:a4:cc:
4d:b1:b2:55:a2:18:e4:14:46:c0:74:79:49:ff:da:
3e:09:2f:cb:78:4b:d2:15:59:e5:a7:55:c3:ba:bc:
23:85:a6:7b:d2:59:40:4a:16:b4:69:f2:b6:95:86:
83:a9:12:0a:51:3e:13:65:49:ed:ba:18:8c:b3:31:
3b:9e:bc:45:08:c9:bf:a2:ad:11:30:9b:16:7f:97:
da:d7:c5:19:85:47:d9:9d:d7:eb:a5:e5:79:9b:95:
c5:06:80:5c:be:8c:16:40:c1:da:d7:3c:a5:3f:ac:
87:e3:63:45:58:d0:83:59:05:56:18:15:7d:f1:c3:
b9:07:8e:e3:c9:43:b2:14:d8:6c:46:ce:2d:06:7e:
b3:0c:6e:ce:22:6e:a8:06:7e:c0:74:e8:ff:2c:61:
9b:21:b5:3e:5d:46:9b:50:8b:53:16:9c:62:92:1c:
3c:19:3d:88:a8:67:a5:eb:82:ce:20:c1:af:28:a5:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:73:FA:89:32:81:C8:B4:AB:86:CF:93:83:6B:1B:BD:05:2F:CD
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/VQZz-okygci0q4bPk4NrG70FL80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.137.248.0/23
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
131.123.32.0/19
143.246.192.0/21
IPv6:
2a0f:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
4e:89:37:f1:04:94:c6:47:4b:26:ea:a2:26:7f:88:0e:be:e0:
3f:ed:ea:05:45:5c:c6:20:1a:dd:2f:db:6a:6e:f2:43:6e:25:
8a:d5:62:b3:95:be:dd:8f:d7:62:e4:6d:c7:67:8c:72:25:f7:
60:06:d1:34:9d:34:1c:35:7c:07:2d:73:16:ea:59:06:73:84:
f2:42:e9:fd:75:e9:bb:dc:97:e7:65:70:17:be:d5:3b:2a:8f:
59:5b:7a:22:65:95:30:43:e1:bf:9a:1c:b2:a4:da:ff:4f:47:
99:6b:0f:c7:61:5b:dc:39:b6:38:43:f3:91:40:42:5b:4f:0d:
6b:52:3e:aa:aa:4e:2d:38:f1:1c:72:5f:b1:74:d8:a0:88:70:
b0:2a:8d:0e:eb:a1:de:62:75:9c:17:73:13:58:99:d1:4d:4b:
41:f4:5f:35:f4:ce:6b:b9:06:01:fe:25:69:fc:e7:25:0a:63:
fc:ee:d0:a1:6c:ea:b6:17:ee:a7:1b:ee:29:c6:c9:ff:e0:21:
50:56:6f:79:53:92:fb:fb:61:ec:16:ca:2d:13:3e:aa:d2:9e:
f7:0b:b5:8b:56:55:63:53:d8:a7:28:25:0f:bd:3e:ac:eb:25:
04:2e:7d:31:d8:ca:20:92:08:ec:38:41:3a:cd:cb:61:94:fd:
0c:4a:36:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:27 2026 by rpki-client