Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/d7D9_8-EV0OF_G7I7MEEDhZW2h0.roa
File: d7D9_8-EV0OF_G7I7MEEDhZW2h0.roa (raw, json)
Hash identifier: WWLJrfMuw3/F8MMNeKlDW73dMBhQz1Tzv5In8NicFXo=
Subject key identifier: 77:B0:FD:FF:CF:84:57:43:85:FC:6E:C8:EC:C1:04:0E:16:56:DA:1D
Certificate issuer: /CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Certificate serial: 01A160F7524C4FD0A1107C92882C78533033
Authority key identifier: AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/d7D9_8-EV0OF_G7I7MEEDhZW2h0.roa
Signing time: Thu 22 Oct 2026 00:16:23 +0000
ROA not before: Thu 22 Oct 2026 00:16:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200000
IP address blocks: 37.139.64.0/21 maxlen: 21
45.154.218.0/24 maxlen: 24
46.247.80.0/21 maxlen: 21
89.19.128.0/19 maxlen: 19
109.205.96.0/21 maxlen: 21
173.242.48.0/20 maxlen: 20
185.25.116.0/22 maxlen: 22
185.39.224.0/22 maxlen: 22
185.65.244.0/22 maxlen: 22
185.68.16.0/22 maxlen: 22
185.68.16.0/24 maxlen: 24
185.69.152.0/22 maxlen: 22
185.104.44.0/22 maxlen: 22
185.104.45.0/24 maxlen: 24
185.124.8.0/22 maxlen: 22
185.149.40.0/22 maxlen: 22
185.209.168.0/22 maxlen: 22
185.233.36.0/22 maxlen: 22
185.233.40.0/22 maxlen: 22
185.233.44.0/22 maxlen: 22
185.233.116.0/22 maxlen: 22
185.233.120.0/22 maxlen: 22
185.233.136.0/22 maxlen: 22
185.233.152.0/22 maxlen: 23
185.234.176.0/22 maxlen: 22
185.235.168.0/22 maxlen: 22
185.239.180.0/22 maxlen: 22
217.173.208.0/20 maxlen: 20
2a00:7a60::/32 maxlen: 32
2a04:8000::/29 maxlen: 29
2a05:480::/29 maxlen: 29
2a06:6440::/29 maxlen: 29
2a0c:680::/29 maxlen: 29
2a0c:681::/32 maxlen: 32
2a0c:682::/31 maxlen: 31
2a0c:684::/30 maxlen: 30
2a0c:780::/29 maxlen: 29
2a0c:880::/29 maxlen: 29
2a0c:a80::/29 maxlen: 29
2a0c:c80::/29 maxlen: 29
2a0c:d80::/29 maxlen: 29
2a0c:e80::/29 maxlen: 29
2a0c:6080::/29 maxlen: 29
2a0d:1100::/29 maxlen: 29
2a0d:6500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:f7:52:4c:4f:d0:a1:10:7c:92:88:2c:78:53:30:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a0e0b1b21f093333c0748145b1628418cf2b5
Validity
Not Before: Oct 22 00:16:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b0fdffcf84574385fc6ec8ecc1040e1656da1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:c4:dd:51:e9:cf:e0:1e:d4:5f:c5:60:9b:
54:cc:e3:d0:00:75:80:71:95:3a:4d:f7:27:be:7a:
16:6e:64:8d:54:6b:13:a2:82:36:f3:f8:5b:db:d0:
9a:c7:1c:ea:ef:45:01:b7:49:94:a5:b5:ec:13:56:
f1:ad:e5:c7:61:57:99:d2:d2:78:98:eb:20:4b:f0:
2d:3f:63:37:7d:ac:74:46:ff:35:02:18:32:3c:9e:
fb:c9:6e:2f:4c:fc:d3:5d:03:46:47:1f:75:48:11:
36:8e:5d:8f:8a:5f:7e:29:2f:0e:0f:f0:f0:a6:31:
a5:4c:08:de:3a:21:8e:99:42:2e:79:8c:54:ba:00:
48:63:58:d0:b6:25:7f:63:5e:68:7c:b9:70:c0:ef:
5a:99:79:c7:28:b7:2c:33:34:93:91:83:e1:06:53:
55:98:85:0c:d4:c3:5b:5f:b6:c3:4e:1f:5a:f8:70:
0e:a8:2d:96:d1:94:d9:7e:05:c1:bf:9e:c2:08:d8:
63:b3:8d:99:95:36:32:3b:70:4a:bd:79:31:f4:93:
83:8a:ee:1b:bf:6b:c0:87:b9:c7:17:55:3a:80:4d:
09:67:b2:07:f1:de:11:bb:2a:ed:d1:5b:fe:b0:67:
3f:bf:78:2c:59:81:f8:94:c7:b6:e3:42:18:98:b8:
02:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B0:FD:FF:CF:84:57:43:85:FC:6E:C8:EC:C1:04:0E:16:56:DA:1D
X509v3 Authority Key Identifier:
keyid:AC:8A:0E:0B:1B:21:F0:93:33:3C:07:48:14:5B:16:28:41:8C:F2:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIoOCxsh8JMzPAdIFFsWKEGM8rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/d7D9_8-EV0OF_G7I7MEEDhZW2h0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8ce6a1-130c-480e-a903-db8eff1b11a0/1/rIoOCxsh8JMzPAdIFFsWKEGM8rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.64.0/21
45.154.218.0/24
46.247.80.0/21
89.19.128.0/19
109.205.96.0/21
173.242.48.0/20
185.25.116.0/22
185.39.224.0/22
185.65.244.0/22
185.68.16.0/22
185.69.152.0/22
185.104.44.0/22
185.124.8.0/22
185.149.40.0/22
185.209.168.0/22
185.233.36.0-185.233.47.255
185.233.116.0-185.233.123.255
185.233.136.0/22
185.233.152.0/22
185.234.176.0/22
185.235.168.0/22
185.239.180.0/22
217.173.208.0/20
IPv6:
2a00:7a60::/32
2a04:8000::/29
2a05:480::/29
2a06:6440::/29
2a0c:680::/29
2a0c:780::/29
2a0c:880::/29
2a0c:a80::/29
2a0c:c80::/29
2a0c:d80::/29
2a0c:e80::/29
2a0c:6080::/29
2a0d:1100::/29
2a0d:6500::/29
Signature Algorithm: sha256WithRSAEncryption
8e:a6:1d:03:72:f9:54:b0:21:26:13:6d:b4:76:aa:a4:fe:ab:
7a:6b:77:a1:1f:cf:c3:71:9f:93:30:77:d9:9c:2a:1e:da:4b:
b6:7f:d8:ca:c7:1e:cc:eb:96:c8:80:5e:94:cc:bc:30:54:a7:
8a:85:04:52:38:d2:03:48:20:f2:c2:49:61:c1:dd:e7:ab:f4:
15:9c:99:72:9c:47:ae:51:94:32:f1:87:5a:72:b4:cf:89:4a:
ea:d6:0e:e0:04:ec:a1:8b:82:91:76:8f:ec:18:64:65:29:ee:
94:71:b5:9b:f2:98:ff:83:6c:68:e2:b6:66:80:48:d7:69:00:
8d:dc:d7:24:16:15:3a:cb:80:33:c0:63:cd:a1:14:eb:b3:85:
ac:46:8f:b6:91:b0:1a:a8:b4:78:ab:4e:2f:d9:0e:da:a4:b7:
91:be:99:90:9c:08:83:43:eb:ab:16:b9:c3:93:ed:23:f7:7a:
a5:48:35:d1:76:c2:60:68:d8:fe:e6:3a:3e:4a:40:fe:9c:93:
80:8b:19:40:c3:95:5f:97:5b:44:d5:b4:e1:66:08:7b:48:7e:
63:09:28:9a:e6:cd:99:5c:62:11:71:0b:81:aa:da:15:94:92:
21:6f:de:7b:fa:e0:6f:ec:68:3d:be:35:20:0d:18:6e:3a:c0:
8c:40:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:08:02 2026 by rpki-client