Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/a2t-2fJPlSbBUQP7F2vJruftWJg.roa
File: a2t-2fJPlSbBUQP7F2vJruftWJg.roa (raw, json)
Hash identifier: fgKXAxN2ulEkOQEfrITB7HGb/FRdxrbO10Ou20JoDq8=
Subject key identifier: 6B:6B:7E:D9:F2:4F:95:26:C1:51:03:FB:17:6B:C9:AE:E7:ED:58:98
Certificate issuer: /CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Certificate serial: 01A13473DE0E8A498F200363BD27F63A8972
Authority key identifier: 20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/a2t-2fJPlSbBUQP7F2vJruftWJg.roa
Signing time: Tue 13 Oct 2026 08:49:30 +0000
ROA not before: Tue 13 Oct 2026 08:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41998
IP address blocks: 5.42.136.0/22 maxlen: 22
5.42.140.0/22 maxlen: 22
31.25.40.0/21 maxlen: 21
31.25.46.0/23 maxlen: 23
37.25.48.0/21 maxlen: 21
37.60.168.0/21 maxlen: 21
37.228.176.0/20 maxlen: 20
46.182.136.0/21 maxlen: 21
62.152.160.0/19 maxlen: 19
83.242.36.0/22 maxlen: 22
83.242.40.0/21 maxlen: 21
83.242.48.0/20 maxlen: 20
88.218.208.0/22 maxlen: 22
91.103.112.0/21 maxlen: 21
93.118.0.0/21 maxlen: 21
93.118.8.0/21 maxlen: 21
93.118.16.0/21 maxlen: 21
93.118.24.0/21 maxlen: 21
93.184.176.0/20 maxlen: 20
94.124.208.0/21 maxlen: 21
94.176.240.0/20 maxlen: 20
145.14.192.0/20 maxlen: 20
149.249.56.0/21 maxlen: 21
153.92.80.0/20 maxlen: 20
171.33.176.0/22 maxlen: 22
171.33.180.0/22 maxlen: 22
185.3.80.0/22 maxlen: 22
185.6.96.0/22 maxlen: 22
185.36.120.0/22 maxlen: 22
185.61.28.0/22 maxlen: 22
185.107.4.0/22 maxlen: 22
185.108.230.0/23 maxlen: 23
185.160.200.0/22 maxlen: 22
185.210.8.0/22 maxlen: 22
185.244.200.0/22 maxlen: 22
188.93.216.0/21 maxlen: 21
188.244.100.0/22 maxlen: 22
193.31.20.0/22 maxlen: 22
193.31.44.0/22 maxlen: 22
193.84.240.0/22 maxlen: 22
193.106.32.0/22 maxlen: 22
193.151.4.0/22 maxlen: 22
193.238.104.0/22 maxlen: 24
194.140.112.0/20 maxlen: 20
212.86.176.0/22 maxlen: 22
212.86.184.0/22 maxlen: 22
213.153.68.0/22 maxlen: 22
213.153.76.0/22 maxlen: 22
213.153.80.0/22 maxlen: 22
213.153.84.0/22 maxlen: 22
213.153.88.0/22 maxlen: 22
213.153.92.0/22 maxlen: 22
217.66.136.0/21 maxlen: 21
217.78.160.0/20 maxlen: 20
2a00:79c0::/32 maxlen: 32
2a02:17b0::/32 maxlen: 32
2a03:b880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:73:de:0e:8a:49:8f:20:03:63:bd:27:f6:3a:89:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=204a096504cdbb9f2fb7fd0e66406d526fe10b5a
Validity
Not Before: Oct 13 08:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b6b7ed9f24f9526c15103fb176bc9aee7ed5898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8f:f7:85:52:cf:32:04:35:96:41:78:3c:a5:
2c:5e:5d:98:f8:c2:64:f3:cc:c4:f4:5b:68:15:50:
75:a3:31:ab:45:9a:32:36:b7:1e:24:be:09:ec:19:
f2:8c:cf:8b:1d:22:9e:23:92:3c:49:03:cd:f7:ca:
dc:33:6e:c8:e2:ec:31:58:77:f2:35:59:4d:12:51:
59:52:aa:5c:51:58:c1:46:3e:86:aa:fb:a4:3a:f8:
af:ed:6a:3f:af:9f:6e:15:be:42:bf:44:da:2f:aa:
9b:4e:26:19:2f:2f:e4:45:5a:5a:ab:40:d6:6d:75:
7a:8e:2c:d8:a6:43:da:d3:e6:26:59:46:47:50:57:
d1:42:e4:24:59:51:29:b2:4c:c8:49:6a:38:3e:0e:
bd:a7:4d:67:5c:18:46:70:39:d2:06:48:61:d6:25:
59:e6:b9:2b:dd:93:c3:d0:d3:79:b9:36:5c:03:dc:
3e:f8:c4:c0:2a:50:12:c9:0f:a5:52:16:5e:12:90:
2f:f9:de:ac:2c:36:63:4a:a5:60:c4:8a:f4:d1:7e:
db:f6:95:0f:ab:fe:13:0f:78:9a:67:f8:7d:7c:56:
01:97:09:74:46:9d:5b:68:03:f9:ce:2e:fc:f7:63:
86:13:6b:ae:27:fa:4c:0a:57:cd:6d:75:73:14:c2:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6B:7E:D9:F2:4F:95:26:C1:51:03:FB:17:6B:C9:AE:E7:ED:58:98
X509v3 Authority Key Identifier:
keyid:20:4A:09:65:04:CD:BB:9F:2F:B7:FD:0E:66:40:6D:52:6F:E1:0B:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IEoJZQTNu58vt_0OZkBtUm_hC1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/a2t-2fJPlSbBUQP7F2vJruftWJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e251dc-8b2b-4f3d-b636-15422478800b/1/IEoJZQTNu58vt_0OZkBtUm_hC1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.136.0/21
31.25.40.0/21
37.25.48.0/21
37.60.168.0/21
37.228.176.0/20
46.182.136.0/21
62.152.160.0/19
83.242.36.0-83.242.63.255
88.218.208.0/22
91.103.112.0/21
93.118.0.0/19
93.184.176.0/20
94.124.208.0/21
94.176.240.0/20
145.14.192.0/20
149.249.56.0/21
153.92.80.0/20
171.33.176.0/21
185.3.80.0/22
185.6.96.0/22
185.36.120.0/22
185.61.28.0/22
185.107.4.0/22
185.108.230.0/23
185.160.200.0/22
185.210.8.0/22
185.244.200.0/22
188.93.216.0/21
188.244.100.0/22
193.31.20.0/22
193.31.44.0/22
193.84.240.0/22
193.106.32.0/22
193.151.4.0/22
193.238.104.0/22
194.140.112.0/20
212.86.176.0/22
212.86.184.0/22
213.153.68.0/22
213.153.76.0-213.153.95.255
217.66.136.0/21
217.78.160.0/20
IPv6:
2a00:79c0::/32
2a02:17b0::/32
2a03:b880::/29
Signature Algorithm: sha256WithRSAEncryption
8c:f1:e9:79:3a:26:dc:1f:69:72:7f:d0:01:3a:c6:c6:64:1a:
6c:b8:6e:f3:d0:a2:5b:b9:b1:5d:76:3e:c6:8a:82:30:72:0c:
c6:b2:92:14:6d:0a:bd:eb:1b:94:41:4e:9c:17:43:8b:2f:e5:
a5:bf:6d:71:ea:a7:3d:87:fc:27:93:56:c5:cf:91:e9:78:ef:
4d:6f:11:22:a2:c2:47:81:54:70:7f:d8:bb:4c:fa:4a:cd:cc:
88:18:da:4c:a1:df:76:14:4d:f8:b1:45:1a:7e:ff:47:4a:8a:
55:f9:5e:3b:45:ea:fa:7e:44:28:96:47:55:aa:0c:df:8b:98:
76:e7:79:40:97:15:91:d9:5a:53:0d:0a:20:94:10:c8:f8:bd:
1f:4f:53:14:fd:ad:7b:52:59:0d:6b:64:60:81:d5:88:59:f6:
5a:31:00:a0:d5:ce:54:7e:95:84:0a:75:5b:9e:2c:49:64:05:
db:c6:ec:aa:7f:06:84:47:5f:ac:e0:4f:d0:ab:bf:60:5d:ce:
0e:3c:fa:52:16:d6:ad:51:7a:e4:0f:62:22:17:a1:0a:57:da:
39:ff:3c:f7:b5:cb:d0:99:ee:67:ec:3e:5a:54:95:cf:5c:34:
8c:a2:c2:f1:06:50:bd:1f:ba:ec:5f:e7:fe:eb:b8:dc:b1:a1:
67:d6:85:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Oct 25 07:53:31 2026 by rpki-client