Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/20RsOqRrL0H6-PcPWhB27U2bzU0.roa
File: 20RsOqRrL0H6-PcPWhB27U2bzU0.roa (raw, json)
Hash identifier: gXh5bVehs+x2i2b+VQ9ZyFNRx6XLYD8M8H99V8Et2Co=
Subject key identifier: DB:44:6C:3A:A4:6B:2F:41:FA:F8:F7:0F:5A:10:76:ED:4D:9B:CD:4D
Certificate issuer: /CN=8144f5fc0aa23f9dcc0a9680bf6a86286da84050
Certificate serial: 019F2369137D8D69643458A695C367F18D8C
Authority key identifier: 81:44:F5:FC:0A:A2:3F:9D:CC:0A:96:80:BF:6A:86:28:6D:A8:40:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gUT1_AqiP53MCpaAv2qGKG2oQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/20RsOqRrL0H6-PcPWhB27U2bzU0.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208403
IP address blocks: 45.131.20.0/24 maxlen: 24
45.131.21.0/24 maxlen: 24
45.131.22.0/24 maxlen: 24
45.131.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/gUT1_AqiP53MCpaAv2qGKG2oQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/gUT1_AqiP53MCpaAv2qGKG2oQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gUT1_AqiP53MCpaAv2qGKG2oQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:13:7d:8d:69:64:34:58:a6:95:c3:67:f1:8d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8144f5fc0aa23f9dcc0a9680bf6a86286da84050
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db446c3aa46b2f41faf8f70f5a1076ed4d9bcd4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b5:9e:88:ea:cf:5c:9e:dd:3d:83:bf:8e:18:
be:7c:ca:bd:da:a4:06:ed:9b:be:0a:37:8e:fe:a0:
26:9b:ec:da:7f:a3:97:70:79:05:f3:ea:74:ce:b2:
85:7e:06:a3:f2:58:f7:00:12:29:d8:71:da:32:5d:
18:38:a8:07:24:39:83:35:d3:77:26:af:d0:d4:84:
e7:b2:c4:01:59:c7:51:5c:5c:26:5c:41:81:49:cf:
e4:74:bc:4e:21:9b:ae:4d:df:68:86:03:12:f2:33:
86:38:d3:73:78:6a:68:1f:4a:99:a8:a0:11:fb:6e:
76:4d:2c:dc:e5:4f:c5:7c:68:f4:b3:a6:88:47:9b:
8e:b2:56:38:79:59:ef:6d:89:b6:41:42:d0:96:24:
63:31:26:85:b9:6d:20:82:9a:22:98:44:c6:ae:23:
d8:aa:8f:a3:6b:47:48:8d:87:37:2b:d9:70:26:13:
3a:e3:bb:5c:de:a8:0b:98:16:6f:b8:a3:c4:d9:f9:
d2:96:fe:7b:ea:5f:cf:03:c2:e8:9a:3f:4c:25:e9:
3e:c3:4f:7b:b3:60:17:86:61:69:5c:12:0d:bb:35:
3b:e7:26:77:a4:f6:de:48:dc:c7:c6:66:56:1a:dc:
ca:dc:e3:7f:e1:10:75:a1:c6:61:fe:9c:1a:93:f4:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:44:6C:3A:A4:6B:2F:41:FA:F8:F7:0F:5A:10:76:ED:4D:9B:CD:4D
X509v3 Authority Key Identifier:
keyid:81:44:F5:FC:0A:A2:3F:9D:CC:0A:96:80:BF:6A:86:28:6D:A8:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gUT1_AqiP53MCpaAv2qGKG2oQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/20RsOqRrL0H6-PcPWhB27U2bzU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/gUT1_AqiP53MCpaAv2qGKG2oQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:07:6e:7e:c2:a9:d7:30:98:61:ed:0e:ce:b0:da:2e:14:e0:
d4:ec:5f:dc:ed:84:40:32:c0:51:bd:bf:7f:9b:d1:c6:f7:11:
59:25:c1:ef:14:4d:40:1e:e4:9c:bc:2f:98:92:33:a4:03:ee:
21:c5:aa:5a:1f:54:63:16:55:10:dc:45:b8:13:5c:d1:2f:b1:
f9:10:1f:b5:60:70:79:30:9a:f2:7e:c1:10:fb:2b:2d:6d:ec:
00:2c:48:8c:4d:1d:d5:4a:30:5a:20:0c:28:8c:86:63:32:d0:
ef:25:71:77:88:19:7f:fd:d5:24:a0:33:e3:2a:ce:5c:dc:be:
29:71:54:60:51:e4:b4:36:0b:4a:28:72:8e:09:2e:da:f7:f6:
b8:fb:45:37:40:c5:f6:a8:52:7c:e7:21:9d:97:17:3d:fd:c5:
26:55:ce:e6:56:4b:65:e2:4e:c9:9b:1f:05:93:a3:2c:01:1f:
ed:22:55:f5:b3:c1:87:33:e9:92:7e:3d:94:e2:3a:0c:51:27:
99:ae:79:9f:6c:73:63:28:87:f4:23:32:18:3e:b0:67:80:69:
ac:4a:5f:b7:b7:73:a8:26:fb:02:1c:81:aa:18:27:10:29:95:
17:0c:2a:6e:1b:b9:e2:10:30:db:ef:4f:6a:2f:38:2f:21:72:
fe:57:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:20:38 2026 by rpki-client