Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/V9R18pAhqjs3ujpltN-LA2R7GKs.roa
File: V9R18pAhqjs3ujpltN-LA2R7GKs.roa (raw, json)
Hash identifier: 0KpkOoYnCrtsUvSnY1CEtCnDhOKo/ntFnmKZ2Or6v9U=
Subject key identifier: 57:D4:75:F2:90:21:AA:3B:37:BA:3A:65:B4:DF:8B:03:64:7B:18:AB
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019F8F442058F6CAA928FE17AD248DDF01BC
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/V9R18pAhqjs3ujpltN-LA2R7GKs.roa
Signing time: Thu 23 Jul 2026 13:57:14 +0000
ROA not before: Thu 23 Jul 2026 13:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24877
IP address blocks: 84.55.24.0/21 maxlen: 24
84.55.38.0/23 maxlen: 23
84.55.39.0/24 maxlen: 24
84.55.40.0/21 maxlen: 21
84.55.40.0/22 maxlen: 22
84.55.44.0/23 maxlen: 23
84.55.46.0/23 maxlen: 23
88.222.0.0/17 maxlen: 17
88.222.128.0/18 maxlen: 18
88.222.192.0/20 maxlen: 20
88.222.216.0/24 maxlen: 24
88.222.224.0/20 maxlen: 20
88.222.248.0/22 maxlen: 22
88.223.64.0/20 maxlen: 20
88.223.64.0/21 maxlen: 21
88.223.72.0/21 maxlen: 21
88.223.100.0/22 maxlen: 22
88.223.132.0/22 maxlen: 22
88.223.136.0/23 maxlen: 23
88.223.136.0/24 maxlen: 24
88.223.139.0/24 maxlen: 24
88.223.140.0/22 maxlen: 22
88.223.156.0/22 maxlen: 22
88.223.179.0/24 maxlen: 24
88.223.182.0/24 maxlen: 24
213.164.112.0/22 maxlen: 22
217.147.32.0/23 maxlen: 24
217.147.32.0/24 maxlen: 24
217.147.33.0/24 maxlen: 24
217.147.39.0/24 maxlen: 24
217.147.42.0/23 maxlen: 23
2a01:7c80:8000::/33 maxlen: 33
2a01:7c81::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:44:20:58:f6:ca:a9:28:fe:17:ad:24:8d:df:01:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jul 23 13:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57d475f29021aa3b37ba3a65b4df8b03647b18ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:18:c9:15:1b:f6:61:92:7a:38:e0:dd:13:fd:
ad:0b:7d:be:39:05:4b:a9:b2:09:c7:a2:95:7a:b4:
73:e3:92:78:63:69:b3:3b:0e:1f:fb:41:71:b5:2e:
9a:fe:ae:9c:32:27:83:d7:18:e9:f2:f7:25:ec:f6:
1f:53:73:16:91:60:be:9d:97:45:83:f9:20:91:eb:
37:96:a2:06:3a:3c:a7:04:4c:7c:c0:dd:0a:ab:f6:
89:e8:54:90:0f:71:3a:40:04:aa:fd:f4:ce:4c:f2:
b7:ea:da:14:6f:f6:b9:2f:cd:bb:9b:66:7d:32:21:
81:0f:a9:dd:85:f4:33:6e:bb:05:d4:82:7e:30:ab:
72:fe:66:99:53:77:50:17:15:41:c0:11:38:62:a6:
23:64:c8:2a:61:9e:6e:16:23:f4:e5:e9:e4:88:1a:
90:77:38:3c:fd:fa:6a:ad:38:40:3e:34:d1:97:3f:
a3:1b:91:ee:13:62:49:97:03:44:ea:69:24:f0:2b:
b3:71:b5:b0:c5:6a:ef:c2:b7:17:42:73:d4:f0:ad:
29:90:0e:89:35:44:06:c7:6d:87:b0:63:36:23:ed:
e1:35:61:5e:e9:6a:79:b6:13:60:2c:bd:7c:c0:12:
4b:da:44:c9:a1:c5:d0:1d:a8:49:dc:0c:2f:dd:b1:
61:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D4:75:F2:90:21:AA:3B:37:BA:3A:65:B4:DF:8B:03:64:7B:18:AB
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/V9R18pAhqjs3ujpltN-LA2R7GKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.24.0/21
84.55.38.0-84.55.47.255
88.222.0.0-88.222.207.255
88.222.216.0/24
88.222.224.0/20
88.222.248.0/22
88.223.64.0/20
88.223.100.0/22
88.223.132.0-88.223.137.255
88.223.139.0-88.223.143.255
88.223.156.0/22
88.223.179.0/24
88.223.182.0/24
213.164.112.0/22
217.147.32.0/23
217.147.39.0/24
217.147.42.0/23
IPv6:
2a01:7c80:8000::-2a01:7c81:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:fc:95:67:90:ef:f4:de:6b:29:9d:47:b3:fd:5c:db:d7:b0:
51:22:5e:ae:2a:27:f9:89:dd:de:db:26:fb:a3:6b:28:1a:89:
95:bd:f5:72:83:a5:68:c1:6f:c4:b3:4e:e0:f0:c9:33:22:35:
d3:5b:e7:a0:41:f1:e9:d1:47:87:68:6f:ae:52:ae:c4:97:94:
af:a8:13:35:e7:8f:e5:e2:80:43:ca:93:80:7e:4c:03:3c:cb:
93:93:92:e3:15:f0:2e:13:56:13:94:5d:96:f9:4f:c9:ef:cd:
76:f6:9b:3f:c2:08:8f:aa:dc:38:92:13:e1:a7:71:bb:83:42:
23:a1:1c:07:6e:34:f1:5b:64:e2:e4:28:a5:54:2d:98:1d:6a:
47:c5:42:f8:40:e2:3c:6c:f0:af:2f:db:3d:3d:c0:95:aa:7f:
58:d9:fb:9d:17:ab:0e:5c:e6:ed:02:f2:23:ac:d8:d6:6a:8d:
3d:22:4a:39:7f:5c:b8:a7:3e:49:12:71:75:29:ae:ab:e0:ed:
be:27:17:b0:52:81:cb:4b:39:19:ee:6b:29:f0:ee:b0:01:59:
fe:b3:a9:de:35:04:b4:87:40:74:62:28:a0:77:8d:0b:6f:99:
ce:f7:c6:b2:4b:c3:88:a5:06:e8:ea:c9:23:2e:e6:70:c9:b4:
93:2b:69:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:19 2026 by rpki-client