Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/OgGnFbXJ4V3u-tj4G-1vivHmzWg.roa
File: OgGnFbXJ4V3u-tj4G-1vivHmzWg.roa (raw, json)
Hash identifier: GM46G0GUlTfS8w3iCZudPxHhvnavmPPDKTZm1YakeDs=
Subject key identifier: 3A:01:A7:15:B5:C9:E1:5D:EE:FA:D8:F8:1B:ED:6F:8A:F1:E6:CD:68
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019FF0733A144911B8A16BD81EFF871EC2BE
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/OgGnFbXJ4V3u-tj4G-1vivHmzWg.roa
Signing time: Tue 11 Aug 2026 10:51:51 +0000
ROA not before: Tue 11 Aug 2026 10:51:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 32
37.230.168.0/23 maxlen: 32
37.230.172.0/22 maxlen: 32
37.230.188.0/22 maxlen: 32
45.133.96.0/22 maxlen: 32
45.159.136.0/22 maxlen: 32
45.159.136.0/24 maxlen: 32
45.159.137.0/24 maxlen: 32
45.159.138.0/24 maxlen: 32
46.21.244.0/22 maxlen: 32
46.243.209.0/24 maxlen: 32
46.243.210.0/23 maxlen: 32
46.243.212.0/24 maxlen: 32
51.250.0.0/17 maxlen: 32
62.84.112.0/20 maxlen: 32
81.26.176.0/20 maxlen: 32
84.201.128.0/18 maxlen: 32
84.201.184.0/22 maxlen: 24
84.252.128.0/20 maxlen: 32
89.104.112.0/23 maxlen: 32
89.169.128.0/18 maxlen: 32
89.232.188.0/22 maxlen: 32
92.255.1.0/24 maxlen: 32
92.255.3.0/24 maxlen: 32
92.255.13.0/24 maxlen: 32
92.255.15.0/24 maxlen: 32
93.77.160.0/19 maxlen: 32
103.76.52.0/22 maxlen: 32
111.88.144.0/20 maxlen: 32
111.88.240.0/20 maxlen: 32
130.193.32.0/19 maxlen: 32
153.51.32.0/19 maxlen: 32
153.51.64.0/20 maxlen: 24
153.51.80.0/21 maxlen: 24
153.51.96.0/19 maxlen: 32
153.51.160.0/19 maxlen: 19
158.160.0.0/16 maxlen: 32
178.154.192.0/18 maxlen: 32
185.206.164.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
193.32.216.0/22 maxlen: 32
193.32.216.0/24 maxlen: 24
194.247.51.0/24 maxlen: 32
213.130.80.0/21 maxlen: 32
213.165.192.0/19 maxlen: 32
213.165.200.0/21 maxlen: 32
217.28.224.0/20 maxlen: 32
217.198.168.0/21 maxlen: 32
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:73:3a:14:49:11:b8:a1:6b:d8:1e:ff:87:1e:c2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Aug 11 10:51:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a01a715b5c9e15deefad8f81bed6f8af1e6cd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:93:ea:06:7c:08:92:b4:61:de:81:be:ef:
f2:13:38:0b:d5:fa:c3:e1:94:53:11:19:f3:bc:08:
8e:a7:a3:96:6b:e5:5f:2e:94:b9:58:80:d3:98:9e:
59:14:2b:3b:1f:6f:e9:2d:fd:bb:12:73:c6:8d:66:
e8:1b:db:b1:10:6a:13:cf:b4:39:21:13:df:70:f9:
44:31:9c:98:01:eb:60:6a:e5:32:b2:d9:59:22:bb:
3b:75:3d:fe:1e:1c:49:bd:65:5a:67:7c:c6:ea:81:
21:cd:af:ac:fc:45:76:30:cd:a7:85:6b:7a:5e:a7:
6a:c2:b5:92:f3:fd:e9:34:f5:6a:cf:26:8a:15:94:
64:4b:78:b8:4f:32:44:e6:28:08:bd:96:28:48:81:
fc:cd:d1:b0:f6:2d:b3:58:ab:65:15:37:81:42:96:
89:e6:9f:f6:55:0e:c5:88:23:e2:37:44:09:32:2b:
cd:cf:d6:ef:a1:98:47:9e:1d:14:c3:74:ab:da:f9:
23:7d:74:47:a2:4f:82:cf:24:c6:67:23:c6:21:b6:
80:65:ff:45:92:9f:e7:02:af:6e:cb:65:d8:9d:3b:
ab:1e:e7:3c:a6:46:9d:97:5d:6d:36:47:b4:3b:df:
30:dc:2c:1f:27:e0:1e:00:a8:19:b4:27:62:ad:3c:
bc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:A7:15:B5:C9:E1:5D:EE:FA:D8:F8:1B:ED:6F:8A:F1:E6:CD:68
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/OgGnFbXJ4V3u-tj4G-1vivHmzWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.168.0/23
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
45.159.136.0/22
46.21.244.0/22
46.243.209.0-46.243.212.255
51.250.0.0/17
62.84.112.0/20
81.26.176.0/20
84.201.128.0/18
84.252.128.0/20
89.104.112.0/23
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
92.255.13.0/24
92.255.15.0/24
93.77.160.0/19
103.76.52.0/22
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
153.51.32.0-153.51.87.255
153.51.96.0/19
153.51.160.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.247.51.0/24
213.130.80.0/21
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
92:d1:50:12:f2:2e:2a:d0:c3:18:e5:72:af:62:d6:af:bb:27:
95:a9:16:3c:10:4b:fc:7b:4a:f0:6f:01:05:98:66:2d:ca:db:
63:74:9a:1b:c2:76:9c:3b:9a:40:f6:51:85:29:5a:3b:b8:eb:
dd:33:35:4b:f0:51:f2:d6:c9:7e:76:05:6f:6f:15:3a:7b:89:
cc:bb:6e:c7:85:a0:26:11:9a:8a:83:56:52:27:11:a0:69:14:
58:3e:99:76:2a:c7:f3:0e:41:4a:9a:f2:cf:d2:dc:5e:1f:dd:
c8:39:49:9a:da:71:92:11:64:f1:49:c3:e1:8d:9b:0c:b0:81:
1c:2e:a2:97:c1:4d:c4:37:03:a2:b2:83:9f:19:11:52:8b:f8:
5e:60:69:c2:39:4b:85:41:9d:75:18:26:1d:b9:39:c9:bb:b4:
55:1e:8f:66:1a:4e:2d:6b:db:aa:2f:13:22:f7:f7:7f:bd:ca:
21:6d:6f:85:80:19:44:6b:fd:f1:c0:30:5d:0a:35:83:e8:cf:
0a:1f:f1:7a:65:f6:79:86:91:eb:63:d7:f4:1d:1e:c9:fb:04:
e5:b5:05:29:f3:89:2f:88:a9:ae:50:42:43:8f:79:e4:5c:c9:
74:b9:10:64:3f:8d:65:89:73:5d:fa:90:cf:6e:15:e7:62:1c:
1f:96:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:44 2026 by rpki-client