Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/t7QFfAGmlDO98QZMwCjE53mnB3g.roa
File: t7QFfAGmlDO98QZMwCjE53mnB3g.roa (raw, json)
Hash identifier: SC0LtWCiu+/cSV+pyap9AL2T2fjca4sRrK0zbfTs3dM=
Subject key identifier: B7:B4:05:7C:01:A6:94:33:BD:F1:06:4C:C0:28:C4:E7:79:A7:07:78
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 01A12B64E63350DA1B18FB80A5D24999C3F4
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/t7QFfAGmlDO98QZMwCjE53mnB3g.roa
Signing time: Sun 11 Oct 2026 14:36:35 +0000
ROA not before: Sun 11 Oct 2026 14:36:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 32
37.230.168.0/23 maxlen: 32
37.230.172.0/22 maxlen: 32
37.230.188.0/22 maxlen: 32
45.133.96.0/22 maxlen: 32
45.159.136.0/22 maxlen: 32
45.159.136.0/24 maxlen: 32
45.159.137.0/24 maxlen: 32
45.159.138.0/24 maxlen: 32
46.21.244.0/22 maxlen: 32
46.243.209.0/24 maxlen: 32
46.243.210.0/23 maxlen: 32
46.243.212.0/24 maxlen: 32
51.250.0.0/17 maxlen: 32
62.84.112.0/20 maxlen: 32
81.26.176.0/20 maxlen: 32
84.201.128.0/18 maxlen: 32
84.201.184.0/22 maxlen: 24
84.252.128.0/20 maxlen: 32
89.104.112.0/23 maxlen: 32
89.169.128.0/18 maxlen: 32
89.232.188.0/22 maxlen: 32
92.255.1.0/24 maxlen: 32
92.255.3.0/24 maxlen: 32
92.255.13.0/24 maxlen: 32
92.255.15.0/24 maxlen: 32
93.77.160.0/19 maxlen: 32
103.76.52.0/22 maxlen: 32
111.88.144.0/20 maxlen: 32
111.88.240.0/20 maxlen: 32
130.193.32.0/19 maxlen: 32
153.51.32.0/19 maxlen: 32
153.51.64.0/20 maxlen: 24
153.51.80.0/21 maxlen: 24
153.51.96.0/19 maxlen: 32
153.51.160.0/19 maxlen: 19
158.160.0.0/16 maxlen: 32
178.154.192.0/18 maxlen: 32
178.170.222.0/24 maxlen: 32
185.206.164.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
193.32.216.0/22 maxlen: 32
193.32.216.0/24 maxlen: 24
194.156.166.0/24 maxlen: 32
194.247.51.0/24 maxlen: 32
213.130.80.0/21 maxlen: 32
213.165.192.0/19 maxlen: 32
213.165.200.0/21 maxlen: 32
217.28.224.0/20 maxlen: 32
217.198.168.0/21 maxlen: 32
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:64:e6:33:50:da:1b:18:fb:80:a5:d2:49:99:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Oct 11 14:36:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7b4057c01a69433bdf1064cc028c4e779a70778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:b9:ad:50:c8:18:cd:1c:f2:2e:48:74:36:
42:29:ab:f7:ad:53:81:cf:23:c3:d8:16:24:72:54:
49:f2:90:cb:c9:64:bb:73:7f:67:9c:a5:8b:29:7c:
8b:9b:a0:29:0c:0b:9b:69:ce:17:96:e8:ac:01:50:
8e:28:c7:da:1c:a2:33:ac:3f:45:13:c8:f2:a7:a6:
53:18:9d:eb:66:92:50:9b:3c:23:7b:f0:ab:9d:30:
b6:29:9e:b6:14:02:cf:f8:9d:dd:c9:97:df:c6:a5:
b6:c8:12:88:a6:17:f0:7d:c3:ed:1a:39:ec:4f:eb:
38:14:ff:b9:01:ff:e4:ff:07:aa:16:ee:dc:88:6b:
d0:77:de:24:75:d9:8c:f7:86:ab:bf:f6:d2:ec:66:
c2:80:be:18:30:6b:4c:e5:4b:33:ba:5a:c2:46:2a:
41:69:f6:98:a6:2d:6b:c3:1e:eb:1d:3a:60:11:db:
94:7c:79:62:b6:f2:4e:35:70:ca:bb:ca:b0:bc:83:
d1:e3:d3:c8:c9:14:0a:04:a1:16:fe:ce:04:cd:d3:
f4:a2:27:f6:17:5d:a7:15:65:5b:8b:34:38:46:72:
2a:7a:58:14:ed:1d:ea:1c:af:96:5c:4e:ca:d4:38:
84:a5:54:c2:d1:b4:30:8e:b2:39:41:01:19:87:68:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B4:05:7C:01:A6:94:33:BD:F1:06:4C:C0:28:C4:E7:79:A7:07:78
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/t7QFfAGmlDO98QZMwCjE53mnB3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.168.0/23
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
45.159.136.0/22
46.21.244.0/22
46.243.209.0-46.243.212.255
51.250.0.0/17
62.84.112.0/20
81.26.176.0/20
84.201.128.0/18
84.252.128.0/20
89.104.112.0/23
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
92.255.13.0/24
92.255.15.0/24
93.77.160.0/19
103.76.52.0/22
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
153.51.32.0-153.51.87.255
153.51.96.0/19
153.51.160.0/19
158.160.0.0/16
178.154.192.0/18
178.170.222.0/24
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.156.166.0/24
194.247.51.0/24
213.130.80.0/21
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
53:18:45:3a:1e:16:69:17:8f:2b:30:a3:37:c6:b7:f4:db:0d:
b0:8f:b3:98:2e:3b:41:4c:a3:16:f5:9f:ba:f1:86:f1:33:04:
99:4c:08:f9:4c:39:b4:b7:e3:2e:e7:26:ad:d3:40:6e:10:85:
12:d1:37:12:c6:c5:d4:c9:13:9a:cd:b6:1a:c2:4f:80:f8:47:
5d:ca:07:1b:a7:7b:f5:83:66:4b:c1:d7:df:cd:5f:44:3a:a8:
2f:70:09:4a:03:b7:d6:5f:04:08:4e:da:b1:88:a4:90:b7:40:
33:13:78:2f:6e:46:dc:82:e8:58:9d:68:83:ab:58:e0:9b:bd:
83:a5:7a:32:71:a4:63:03:51:fa:46:0a:e1:f2:e4:55:d4:3c:
02:9d:e5:1f:b2:f6:fb:bb:fc:a5:f1:2c:94:3e:10:f1:50:03:
1c:d6:1a:de:05:aa:33:15:96:6d:2b:a1:18:3e:77:0b:66:05:
69:46:73:a4:8d:57:f5:55:fb:ef:f9:fb:53:57:91:76:1a:da:
8c:49:cf:71:6f:f9:a2:7d:21:8c:fa:79:36:45:c4:4f:8d:77:
c5:0e:94:93:0f:5b:1e:f6:67:75:30:18:e0:80:97:82:1f:bc:
e4:c6:88:b7:72:bc:99:55:b7:41:57:5d:be:eb:1f:4c:86:d9:
85:cb:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:32 2026 by rpki-client