Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/8iXVbDvMju7-EJeGnPpOtGQyF7U.roa
File: 8iXVbDvMju7-EJeGnPpOtGQyF7U.roa (raw, json)
Hash identifier: wKP5YMkA+q0QNEzh+pRjZ/4Vyr+5zr20wgyKCq6eXMs=
Subject key identifier: F2:25:D5:6C:3B:CC:8E:EE:FE:10:97:86:9C:FA:4E:B4:64:32:17:B5
Certificate issuer: /CN=addd2a815060aa7e621a2094349758b2036896f0
Certificate serial: 01A12DE6AE845E480A0A1F50B63DA55C0768
Authority key identifier: AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/8iXVbDvMju7-EJeGnPpOtGQyF7U.roa
Signing time: Mon 12 Oct 2026 02:17:35 +0000
ROA not before: Mon 12 Oct 2026 02:17:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201776
IP address blocks: 2.59.51.0/24 maxlen: 24
31.40.208.0/22 maxlen: 22
31.40.208.0/24 maxlen: 24
31.40.209.0/24 maxlen: 24
31.40.211.0/24 maxlen: 24
31.40.252.0/22 maxlen: 22
37.44.252.0/22 maxlen: 22
77.83.8.0/22 maxlen: 22
77.83.10.0/24 maxlen: 24
77.83.16.0/22 maxlen: 22
78.136.196.0/22 maxlen: 22
78.136.200.0/21 maxlen: 21
78.153.137.0/24 maxlen: 24
78.153.138.0/24 maxlen: 24
78.153.147.0/24 maxlen: 24
83.171.252.0/22 maxlen: 22
83.172.60.0/22 maxlen: 24
83.172.61.0/24 maxlen: 24
83.172.62.0/24 maxlen: 24
85.115.200.0/22 maxlen: 22
89.107.136.0/22 maxlen: 22
89.107.138.0/23 maxlen: 23
89.107.138.0/24 maxlen: 24
89.107.139.0/24 maxlen: 24
91.103.110.0/23 maxlen: 23
94.126.24.0/21 maxlen: 24
94.126.30.0/24 maxlen: 24
109.94.220.0/22 maxlen: 22
109.236.52.0/22 maxlen: 22
109.237.104.0/24 maxlen: 24
178.34.152.0/21 maxlen: 21
178.34.158.0/24 maxlen: 24
178.34.176.0/20 maxlen: 20
178.173.124.0/22 maxlen: 22
178.173.126.0/24 maxlen: 24
178.173.127.0/24 maxlen: 24
185.64.44.0/22 maxlen: 22
188.119.76.0/22 maxlen: 22
188.124.224.0/21 maxlen: 21
188.124.248.0/21 maxlen: 21
193.47.44.0/22 maxlen: 22
193.56.64.0/22 maxlen: 22
193.56.72.0/22 maxlen: 22
193.148.52.0/22 maxlen: 22
217.197.172.0/22 maxlen: 22
2a04:f800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:e6:ae:84:5e:48:0a:0a:1f:50:b6:3d:a5:5c:07:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=addd2a815060aa7e621a2094349758b2036896f0
Validity
Not Before: Oct 12 02:17:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f225d56c3bcc8eeefe1097869cfa4eb4643217b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:13:3e:a6:73:59:d7:16:eb:93:69:48:29:
89:3f:1e:3e:6e:df:b8:85:ce:9f:83:e7:de:16:60:
74:a5:be:b3:f2:4e:0c:b5:18:09:5e:63:7f:de:9e:
65:61:a6:00:37:a2:65:8e:d6:89:2a:1e:26:34:51:
23:72:45:c7:e5:5c:ab:74:d2:a0:74:fb:1b:0f:63:
54:3b:55:b1:f7:a6:3d:0d:ae:79:7a:7f:07:9d:e8:
ae:f5:3e:15:49:aa:ff:bd:b8:ae:b0:e7:3d:32:26:
c1:35:98:31:32:a2:44:f9:50:2a:38:ee:da:68:43:
5e:01:ca:1c:21:66:d2:e6:db:5f:46:67:c6:4d:f9:
25:07:61:33:59:69:a9:3d:bc:7d:5b:66:7a:57:9a:
cb:f8:7d:e3:fd:7c:98:9f:a1:74:4b:ac:71:08:a8:
27:f5:cf:74:d6:3e:0b:68:d8:a4:ed:84:89:58:1a:
9d:25:d4:35:be:5d:c4:bf:db:2d:28:80:f1:c9:99:
28:92:b3:08:ff:ef:91:c2:76:df:1d:5b:e5:2f:eb:
42:40:bf:ba:ef:89:08:da:6f:73:a7:22:c2:4c:80:
c4:6c:c5:c1:70:f3:2d:08:88:db:db:62:3e:92:30:
5f:b6:b6:68:ae:92:f9:8d:11:18:70:98:39:3a:01:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:25:D5:6C:3B:CC:8E:EE:FE:10:97:86:9C:FA:4E:B4:64:32:17:B5
X509v3 Authority Key Identifier:
keyid:AD:DD:2A:81:50:60:AA:7E:62:1A:20:94:34:97:58:B2:03:68:96:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rd0qgVBgqn5iGiCUNJdYsgNolvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/8iXVbDvMju7-EJeGnPpOtGQyF7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4fa48-3be8-4fa3-a436-8a0d0bf0b577/1/rd0qgVBgqn5iGiCUNJdYsgNolvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.51.0/24
31.40.208.0/22
31.40.252.0/22
37.44.252.0/22
77.83.8.0/22
77.83.16.0/22
78.136.196.0-78.136.207.255
78.153.137.0-78.153.138.255
78.153.147.0/24
83.171.252.0/22
83.172.60.0/22
85.115.200.0/22
89.107.136.0/22
91.103.110.0/23
94.126.24.0/21
109.94.220.0/22
109.236.52.0/22
109.237.104.0/24
178.34.152.0/21
178.34.176.0/20
178.173.124.0/22
185.64.44.0/22
188.119.76.0/22
188.124.224.0/21
188.124.248.0/21
193.47.44.0/22
193.56.64.0/22
193.56.72.0/22
193.148.52.0/22
217.197.172.0/22
IPv6:
2a04:f800::/29
Signature Algorithm: sha256WithRSAEncryption
30:c5:1e:4c:d8:86:34:cd:30:df:3b:35:2b:20:19:2d:77:47:
fc:89:ee:e8:fd:b8:22:59:33:42:17:79:26:ee:1b:12:e4:d0:
47:ef:2f:0f:0a:49:96:d6:81:96:14:96:d2:48:54:98:d1:ec:
7e:8b:f1:99:c5:81:aa:6a:db:71:40:6b:1b:c5:87:d9:09:8b:
43:22:15:55:68:7f:da:e3:0f:00:52:99:99:a4:c5:2a:1e:11:
22:c8:6a:1a:5f:76:04:b0:51:64:7f:cc:5e:3d:cb:46:31:23:
e4:c7:7e:9f:d7:0f:75:da:d9:08:73:0d:49:02:40:3b:ea:9e:
27:a6:80:35:30:42:e7:5b:28:c4:fd:34:c4:fd:e0:a9:17:39:
05:20:d3:aa:67:93:cb:f9:bf:30:39:8b:aa:d2:16:0d:88:f7:
9d:57:bd:b6:a4:db:86:1c:49:2d:a2:f5:6d:cb:67:3b:77:08:
84:1d:e0:1a:9a:e7:e1:17:da:1a:de:ef:00:8f:fe:e4:43:a2:
f4:19:e1:a9:79:38:c8:f1:ff:5a:71:aa:f1:35:94:20:c3:11:
ee:af:7a:02:3e:f4:3a:d9:e6:0d:fd:8d:43:7a:a0:d6:f5:0d:
32:22:12:b7:18:2f:16:04:b7:36:96:ac:62:4b:5c:e5:ad:e3:
77:74:8d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:22 2026 by rpki-client