Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/8gXUkKQw8arTOvKo91QrTIhhgLM.roa
File: 8gXUkKQw8arTOvKo91QrTIhhgLM.roa (raw, json)
Hash identifier: 3FKGGmL5ZFlUUkm/8Tty8cDyN60SEeEzpNytHf+rPGY=
Subject key identifier: F2:05:D4:90:A4:30:F1:AA:D3:3A:F2:A8:F7:54:2B:4C:88:61:80:B3
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 019A0BCEF2403E7D134C8E6C472B4FC15A4B
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/8gXUkKQw8arTOvKo91QrTIhhgLM.roa
Signing time: Wed 22 Oct 2025 12:05:03 +0000
ROA not before: Wed 22 Oct 2025 12:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20764
IP address blocks: 79.141.208.0/20 maxlen: 20
79.141.213.0/24 maxlen: 24
80.64.96.0/20 maxlen: 20
80.64.97.0/24 maxlen: 24
80.64.98.28/32 maxlen: 32
80.64.99.0/24 maxlen: 24
80.64.102.0/24 maxlen: 24
80.64.103.0/24 maxlen: 24
80.64.104.0/24 maxlen: 24
80.64.105.0/24 maxlen: 24
80.64.108.0/24 maxlen: 24
80.64.109.0/24 maxlen: 24
81.27.240.0/20 maxlen: 20
81.27.241.0/24 maxlen: 24
81.27.248.0/24 maxlen: 24
81.27.252.0/24 maxlen: 24
81.27.253.0/24 maxlen: 24
185.5.160.0/22 maxlen: 22
2a00:1c28::/29 maxlen: 29
2a00:1c28::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ce:f2:40:3e:7d:13:4c:8e:6c:47:2b:4f:c1:5a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Oct 22 12:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f205d490a430f1aad33af2a8f7542b4c886180b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:f6:58:1b:5d:c6:df:e3:1c:f7:bc:d7:c6:
45:ac:38:45:19:50:20:46:5d:d0:3a:5a:80:64:76:
d4:b3:a6:cb:d4:e2:04:b8:50:53:94:77:7f:7c:43:
1d:33:8b:91:90:77:c7:84:af:5f:a1:10:e8:38:31:
fb:2b:b3:ae:fb:5b:e4:ed:b4:0b:1f:e1:6a:c4:11:
15:e9:d0:5d:96:33:e7:7c:4f:99:4a:6c:51:d4:f3:
9c:76:66:5c:d8:88:37:dc:8b:62:36:e6:2d:84:31:
0f:04:c2:fd:71:3d:b9:63:9b:a6:cf:02:d2:92:73:
44:d7:3c:77:0b:1d:76:cc:40:2f:b1:2b:9e:66:5f:
f4:3b:95:61:a7:35:92:f6:48:3f:5d:5c:d6:d0:8d:
3c:60:ff:54:ee:08:63:2d:90:d5:65:c0:b9:64:7a:
48:c6:12:25:0f:09:96:8a:0d:17:c0:70:41:4e:7f:
e2:12:15:ac:b7:66:7a:ee:84:9f:05:e4:d8:26:4d:
7c:31:33:10:9a:3e:f8:8e:5d:fe:cc:ff:b9:47:1b:
14:ff:7c:05:05:c7:cd:e1:ac:d2:7f:d4:ae:f4:87:
8e:b4:c7:2c:33:53:b1:1f:84:0c:48:f2:d2:6c:83:
ac:a3:3d:3a:b0:64:83:61:a5:a2:2e:c0:95:ee:09:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:D4:90:A4:30:F1:AA:D3:3A:F2:A8:F7:54:2B:4C:88:61:80:B3
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/8gXUkKQw8arTOvKo91QrTIhhgLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.208.0/20
80.64.96.0/20
81.27.240.0/20
185.5.160.0/22
IPv6:
2a00:1c28::/29
Signature Algorithm: sha256WithRSAEncryption
21:d5:8e:62:2a:91:97:31:b6:d7:6f:af:54:ba:2b:1e:0b:63:
c1:bd:e3:81:89:25:ed:60:1d:a9:d4:77:f4:6c:25:a1:e5:98:
79:58:93:78:bb:e7:44:de:1a:dd:79:43:8a:98:95:23:80:ec:
86:b0:d3:e4:46:d2:5f:f1:ed:1a:94:9c:0d:61:d6:e8:d8:a5:
92:ac:b0:15:5a:b8:71:26:72:8b:4c:3e:7c:bd:38:aa:94:d2:
a4:60:e1:1f:9d:27:9a:22:3a:b9:58:5c:ea:35:d5:67:5b:fc:
94:7b:3d:86:2c:b1:a2:92:a7:e4:2a:c1:f4:a3:a5:dc:7c:c6:
8f:1c:b7:ef:81:cc:6c:e9:56:6e:fd:11:be:93:09:e4:1b:7f:
46:1f:39:09:40:96:58:5b:a7:74:f2:33:27:77:d2:5c:d1:94:
af:81:6b:67:f7:54:f1:03:44:30:1e:7f:7e:97:43:d9:a3:f1:
e5:3f:27:5e:23:ea:15:72:d8:f2:f0:45:b6:82:05:a6:4d:c3:
e6:61:5b:0a:df:17:1a:ac:e9:3c:9b:93:8f:98:0a:a4:16:47:
96:06:f9:14:83:e4:27:b2:87:28:77:b4:32:c6:80:46:65:2b:
bd:b7:ac:b9:d6:95:ba:67:46:64:fd:74:06:49:a4:73:81:70:
46:0b:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:20:44 2025 by rpki-client