Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/_C8dSNFKG1Xi-1R-R_3md34bDpw.roa
File: _C8dSNFKG1Xi-1R-R_3md34bDpw.roa (raw, json)
Hash identifier: WZZ7cWqQi7jQSZ8IAXwAeAod3QjUmVawfOLpc3RZwY0=
Subject key identifier: FC:2F:1D:48:D1:4A:1B:55:E2:FB:54:7E:47:FD:E6:77:7E:1B:0E:9C
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 01A1623C55938F457E7605F5B7EF0CCD45D7
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/_C8dSNFKG1Xi-1R-R_3md34bDpw.roa
Signing time: Thu 22 Oct 2026 06:11:23 +0000
ROA not before: Thu 22 Oct 2026 06:11:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 37.251.0.0/17 maxlen: 17
46.227.232.0/21 maxlen: 21
62.131.0.0/16 maxlen: 16
62.216.0.0/19 maxlen: 19
62.251.0.0/17 maxlen: 17
77.160.0.0/13 maxlen: 13
77.168.0.0/14 maxlen: 14
77.172.0.0/16 maxlen: 16
77.173.0.0/16 maxlen: 16
77.174.0.0/16 maxlen: 16
77.175.0.0/16 maxlen: 16
77.175.0.0/17 maxlen: 17
77.175.128.0/17 maxlen: 17
80.60.0.0/15 maxlen: 15
80.100.0.0/15 maxlen: 15
81.204.0.0/14 maxlen: 14
82.92.0.0/14 maxlen: 15
82.136.192.0/18 maxlen: 18
82.161.0.0/16 maxlen: 16
82.168.0.0/15 maxlen: 15
82.170.0.0/16 maxlen: 16
83.68.0.0/19 maxlen: 19
84.39.0.0/19 maxlen: 19
84.80.0.0/16 maxlen: 16
84.82.0.0/15 maxlen: 15
84.84.0.0/14 maxlen: 14
85.113.224.0/19 maxlen: 19
86.80.0.0/13 maxlen: 13
86.88.0.0/15 maxlen: 15
86.90.0.0/16 maxlen: 16
86.92.0.0/14 maxlen: 14
88.159.0.0/16 maxlen: 16
109.72.32.0/20 maxlen: 20
128.127.32.0/20 maxlen: 20
188.142.0.0/17 maxlen: 17
194.109.0.0/16 maxlen: 16
195.64.64.0/19 maxlen: 19
195.121.0.0/16 maxlen: 16
195.240.0.0/16 maxlen: 16
195.240.0.0/17 maxlen: 17
195.240.128.0/18 maxlen: 18
195.240.192.0/18 maxlen: 18
195.241.0.0/16 maxlen: 16
212.123.128.0/18 maxlen: 18
212.182.128.0/18 maxlen: 18
212.238.0.0/16 maxlen: 16
213.10.0.0/16 maxlen: 16
213.75.0.0/16 maxlen: 16
213.84.0.0/16 maxlen: 16
213.148.224.0/19 maxlen: 19
213.197.0.0/18 maxlen: 18
213.222.0.0/19 maxlen: 19
2a02:a400::/24 maxlen: 25
2a02:a405::/32 maxlen: 32
2a02:a480::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:3c:55:93:8f:45:7e:76:05:f5:b7:ef:0c:cd:45:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Oct 22 06:11:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc2f1d48d14a1b55e2fb547e47fde6777e1b0e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8e:75:56:90:2d:97:ef:0f:c8:5d:65:e1:03:
ac:46:5e:eb:7e:93:bf:82:30:5d:10:db:2b:37:c8:
d3:8b:82:fd:95:3e:8e:81:e5:e9:07:5b:a9:9e:b1:
bb:30:f9:94:2b:50:49:55:05:2d:cd:1c:78:de:6e:
69:c9:c7:60:18:52:ef:2b:f9:48:56:71:bc:0b:f7:
4e:e5:23:af:f2:37:c3:58:52:7f:bb:60:9c:eb:97:
8a:83:b3:72:be:1c:04:0b:8a:63:c1:30:69:67:4f:
1b:92:ac:2b:ac:04:2e:27:07:7f:ba:e1:84:d9:aa:
1c:3e:73:7a:70:e9:63:8e:2f:6e:14:a0:4b:fb:d9:
e0:05:6f:13:95:8f:d8:42:eb:4e:ea:fe:f8:c1:7a:
bb:59:a2:22:c8:8c:e5:65:a7:c9:53:35:da:b1:a5:
71:31:84:d4:7b:a5:d0:15:e3:5d:89:0d:4b:d5:c5:
8d:47:90:f6:21:1d:79:0f:00:5d:0d:7a:ad:94:ee:
1f:b2:e9:a7:24:1f:1a:78:68:f0:5f:24:93:43:d9:
ae:ee:fe:3b:00:53:54:73:42:3a:5a:5a:4c:c9:32:
e1:57:04:6c:c8:c2:3b:88:50:b7:2b:f4:ce:e3:7e:
a3:f3:b7:e9:ab:59:7e:67:86:83:ec:d6:8f:04:75:
bd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2F:1D:48:D1:4A:1B:55:E2:FB:54:7E:47:FD:E6:77:7E:1B:0E:9C
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/_C8dSNFKG1Xi-1R-R_3md34bDpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
109.72.32.0/20
128.127.32.0/20
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
IPv6:
2a02:a400::/24
Signature Algorithm: sha256WithRSAEncryption
5e:5b:77:38:fe:6f:b1:1c:cc:d0:31:a3:ef:15:af:ce:3e:ba:
84:27:0f:dc:65:db:bb:eb:d0:72:f7:14:14:45:3a:ff:77:31:
a2:38:95:6b:f1:6b:3f:23:91:6b:95:3c:e6:b8:7f:40:b6:2c:
4a:64:a8:cc:91:29:36:83:65:43:c4:4c:e4:22:1c:0d:87:f7:
05:e5:7e:b8:ce:53:69:ba:f1:6a:6d:71:2b:e2:5d:3e:32:fc:
7e:a9:50:0e:1e:da:6e:9d:9c:93:28:23:f1:36:37:e8:6f:09:
79:e7:10:57:73:05:cb:22:83:83:67:52:b9:47:bf:b9:4e:ab:
2c:dd:2f:59:41:b0:b1:42:0b:47:f5:33:e0:28:53:b1:ed:f7:
a7:83:93:22:3e:6c:b9:84:e0:64:19:06:05:27:e2:fe:fc:3f:
88:7b:9b:a4:9a:5a:67:e2:f4:9b:86:9b:f5:3c:72:a1:f4:87:
70:c1:5b:92:e9:f5:3a:9b:d5:dd:64:47:fa:f0:1d:1f:1a:8a:
cf:ab:39:44:fe:27:d3:68:0c:8c:30:a3:3f:b6:1d:79:8c:7d:
a5:aa:aa:04:ce:bc:a7:c4:25:7b:d4:aa:a7:5a:94:a2:07:85:
a5:94:58:46:8a:4a:1f:e9:52:18:2a:33:9b:c8:4b:6e:7f:c6:
8b:65:b5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:49:56 2026 by rpki-client