Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/20VygfwVlNCmiYaqXe3wYV0H-NY.roa
File: 20VygfwVlNCmiYaqXe3wYV0H-NY.roa (raw, json)
Hash identifier: RTfUnp4cc1sr9qZVV1x/DY/U+HOziyC+zams+lO0xGQ=
Subject key identifier: DB:45:72:81:FC:15:94:D0:A6:89:86:AA:5D:ED:F0:61:5D:07:F8:D6
Certificate issuer: /CN=ddb182a5dbd1bee871de519002d6018fee213670
Certificate serial: 01A11B47A4035F47E830DC0B8A8AD0C6B15C
Authority key identifier: DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/20VygfwVlNCmiYaqXe3wYV0H-NY.roa
Signing time: Thu 08 Oct 2026 11:30:42 +0000
ROA not before: Thu 08 Oct 2026 11:30:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34916
IP address blocks: 85.204.193.0/24 maxlen: 24
86.104.231.0/24 maxlen: 24
86.105.226.0/24 maxlen: 24
86.106.27.0/24 maxlen: 24
89.44.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:47:a4:03:5f:47:e8:30:dc:0b:8a:8a:d0:c6:b1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddb182a5dbd1bee871de519002d6018fee213670
Validity
Not Before: Oct 8 11:30:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db457281fc1594d0a68986aa5dedf0615d07f8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f5:f7:fd:68:36:fa:01:4d:a8:1b:50:55:0a:
eb:ed:ea:e5:9d:b9:68:c1:b4:e0:6f:3c:8c:dc:0a:
9d:0b:57:79:05:1f:ca:df:0e:4e:4a:18:82:be:79:
bd:48:a4:55:ae:cd:2b:cb:8f:33:9c:ff:be:0b:1a:
cb:6e:26:8d:b5:ab:bb:26:58:d1:b0:b7:ce:4d:bb:
02:41:d4:02:e5:b6:7a:5a:94:ec:bb:cd:fd:c8:7d:
e9:24:94:a2:4c:87:e0:70:e0:a1:9a:70:9e:80:b8:
a5:dc:95:29:a3:77:86:20:1b:b5:ed:de:ea:72:9b:
74:35:44:a6:6b:f8:67:57:5c:d5:0f:e9:97:df:88:
e6:6c:33:71:dc:12:28:94:eb:aa:96:36:1a:85:fe:
33:83:eb:50:52:c1:be:74:2f:0b:47:89:1a:f8:91:
09:ea:f9:0d:7b:4a:06:9d:7e:b0:b0:aa:f5:50:d2:
d9:2a:9f:4e:c9:e4:0d:54:06:d8:f3:32:5f:a7:bc:
b6:c9:63:64:ab:b7:38:f6:2a:53:d8:e4:82:6d:29:
80:c1:73:4b:44:2e:91:9f:fb:c8:ae:32:bc:5f:ee:
36:97:48:7f:e8:4c:11:62:2f:03:6a:c5:1a:e1:c2:
5a:88:3b:54:7c:bb:23:94:f6:ae:98:c9:f3:66:f4:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:45:72:81:FC:15:94:D0:A6:89:86:AA:5D:ED:F0:61:5D:07:F8:D6
X509v3 Authority Key Identifier:
keyid:DD:B1:82:A5:DB:D1:BE:E8:71:DE:51:90:02:D6:01:8F:EE:21:36:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3bGCpdvRvuhx3lGQAtYBj-4hNnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/20VygfwVlNCmiYaqXe3wYV0H-NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/3bGCpdvRvuhx3lGQAtYBj-4hNnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.193.0/24
86.104.231.0/24
86.105.226.0/24
86.106.27.0/24
89.44.238.0/23
Signature Algorithm: sha256WithRSAEncryption
09:28:15:14:ef:cd:fb:27:d4:87:ab:47:e2:d3:43:47:12:4b:
39:1a:7e:b4:00:5e:0c:7c:c6:b8:9a:12:2c:aa:a5:62:a5:3a:
14:fd:e3:d9:0e:27:a2:70:5b:1c:c6:ed:da:f1:ce:83:7a:b7:
2a:11:10:07:a6:a7:ed:15:65:5f:55:3d:f1:48:3a:03:a3:7e:
97:15:c9:56:39:f0:13:98:4d:a4:83:ec:4f:32:79:30:72:29:
1e:da:f0:10:ed:d1:a5:bd:0e:1d:1c:67:98:2c:5d:ee:40:bd:
4f:3f:2e:f9:d0:9a:09:43:15:81:c7:91:9d:5b:51:4e:4c:2c:
c4:57:b1:dc:49:c9:d3:44:51:86:35:5c:62:b5:63:35:d4:9a:
79:75:48:c7:54:1d:dc:83:bb:31:31:e8:2f:e1:a8:c7:bf:8e:
5b:bc:3a:9f:2e:90:50:44:f8:f6:eb:8d:b1:df:0d:be:67:b5:
23:2a:42:86:2d:77:52:a3:62:98:1c:cb:31:c0:61:3e:8a:ad:
92:7f:46:a9:86:df:74:9c:8d:e1:45:5c:0e:27:3d:db:03:1f:
2e:74:2e:97:49:ad:16:c1:1d:b0:75:0e:6d:b2:e1:48:5a:a1:
02:ab:fe:8d:07:0a:cf:f7:23:c8:7a:47:09:41:be:1a:e8:c2:
15:d3:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:06:01 2026 by rpki-client