Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/8_1v0wtNl2Z2ScVVfoaRaUQUs-A.roa
File: 8_1v0wtNl2Z2ScVVfoaRaUQUs-A.roa (raw, json)
Hash identifier: h5V2jHAV7SjL7TsBTlYuZ8vNuFqurYnZC+n9CiEtjEw=
Subject key identifier: F3:FD:6F:D3:0B:4D:97:66:76:49:C5:55:7E:86:91:69:44:14:B3:E0
Certificate issuer: /CN=d75e5d507257475f7281230654b39870fa4969dc
Certificate serial: 01A08B97CE15C85208BDABE914BC86D7BEBC
Authority key identifier: D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/8_1v0wtNl2Z2ScVVfoaRaUQUs-A.roa
Signing time: Thu 10 Sep 2026 13:52:56 +0000
ROA not before: Thu 10 Sep 2026 13:52:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25255
IP address blocks: 46.220.0.0/16 maxlen: 16
77.116.0.0/14 maxlen: 14
77.116.0.0/17 maxlen: 17
77.116.128.0/17 maxlen: 17
77.117.0.0/17 maxlen: 17
77.119.16.0/20 maxlen: 20
77.119.128.0/20 maxlen: 20
77.119.128.0/22 maxlen: 22
77.119.160.0/20 maxlen: 20
77.119.176.0/20 maxlen: 20
77.119.192.0/19 maxlen: 19
77.119.224.0/19 maxlen: 19
81.3.192.0/18 maxlen: 18
81.3.192.0/24 maxlen: 24
81.3.201.0/24 maxlen: 24
81.3.204.0/23 maxlen: 23
81.3.206.0/23 maxlen: 23
81.3.210.0/24 maxlen: 24
81.3.211.0/24 maxlen: 24
91.141.0.0/17 maxlen: 17
91.141.0.0/20 maxlen: 20
91.141.0.0/22 maxlen: 22
91.141.32.0/19 maxlen: 19
91.141.64.0/20 maxlen: 20
91.141.96.0/20 maxlen: 20
91.141.112.0/20 maxlen: 20
94.245.192.0/18 maxlen: 18
94.245.192.0/24 maxlen: 24
109.126.64.0/18 maxlen: 18
178.112.0.0/14 maxlen: 14
178.112.0.0/17 maxlen: 17
178.112.128.0/17 maxlen: 17
178.113.0.0/17 maxlen: 17
178.115.32.0/19 maxlen: 19
178.115.64.0/20 maxlen: 20
178.115.80.0/20 maxlen: 20
178.115.128.0/20 maxlen: 20
178.115.128.0/22 maxlen: 22
178.115.144.0/20 maxlen: 20
178.115.224.0/19 maxlen: 19
178.165.128.0/17 maxlen: 17
178.165.128.0/20 maxlen: 20
178.165.128.0/22 maxlen: 22
178.165.160.0/19 maxlen: 19
178.165.192.0/20 maxlen: 20
178.165.224.0/20 maxlen: 20
178.165.240.0/20 maxlen: 20
194.24.128.0/19 maxlen: 19
194.24.158.0/24 maxlen: 24
194.24.159.0/24 maxlen: 24
213.94.64.0/18 maxlen: 18
213.94.64.0/21 maxlen: 21
213.94.74.22/32 maxlen: 32
213.94.74.28/32 maxlen: 32
213.94.74.54/32 maxlen: 32
213.94.74.60/32 maxlen: 32
213.94.76.0/24 maxlen: 24
213.94.77.0/24 maxlen: 24
213.94.78.0/24 maxlen: 24
213.94.79.0/24 maxlen: 24
213.94.80.0/22 maxlen: 22
213.94.95.0/24 maxlen: 24
213.94.96.0/21 maxlen: 21
2a02:2861::/32 maxlen: 32
2a02:2861:d::/48 maxlen: 48
2a02:2861:e::/48 maxlen: 48
2a02:2864::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.mft
rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:97:ce:15:c8:52:08:bd:ab:e9:14:bc:86:d7:be:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75e5d507257475f7281230654b39870fa4969dc
Validity
Not Before: Sep 10 13:52:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3fd6fd30b4d97667649c5557e8691694414b3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:da:ee:86:17:74:48:29:60:61:87:9f:3a:
5d:78:fe:ad:d9:ac:84:cb:8e:ba:2c:b2:e9:55:9e:
00:7c:d1:b0:cd:7d:01:03:55:dd:8b:ab:8e:22:3a:
01:33:b1:99:12:c8:fe:0c:5a:7b:0f:56:89:a3:d8:
f7:da:bb:4e:4e:99:21:a5:79:47:7b:b3:4f:cc:75:
46:0c:86:be:c5:d8:eb:e7:d9:56:ba:ec:17:26:fa:
54:9f:93:ad:9b:ce:a2:9e:0d:c3:a6:a6:3a:70:44:
68:1c:d2:23:ac:82:24:d4:e9:0f:f4:f3:fb:34:f9:
2b:3e:4b:96:2f:0b:7c:13:a9:20:56:f3:6e:91:b4:
8e:e5:a6:f9:34:23:ce:61:32:0b:d6:b7:03:96:db:
46:36:f2:82:01:d6:b3:ea:78:5c:35:ec:78:ec:42:
41:fc:59:67:cf:62:3b:de:e1:cc:7c:1f:4a:8a:bd:
a8:6b:d4:68:b9:34:19:7b:56:e5:28:a1:37:b2:ca:
aa:27:ab:3c:54:57:e4:23:fe:d9:aa:37:8e:82:dc:
dc:ac:85:33:3d:59:13:86:23:43:1c:bb:58:04:8f:
82:3d:b6:dd:b6:71:f5:7c:42:0a:0c:fc:f2:ac:3c:
b4:81:e1:1b:d6:94:e1:7e:39:ec:7f:1b:3d:25:86:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FD:6F:D3:0B:4D:97:66:76:49:C5:55:7E:86:91:69:44:14:B3:E0
X509v3 Authority Key Identifier:
keyid:D7:5E:5D:50:72:57:47:5F:72:81:23:06:54:B3:98:70:FA:49:69:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/115dUHJXR19ygSMGVLOYcPpJadw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/8_1v0wtNl2Z2ScVVfoaRaUQUs-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/115dUHJXR19ygSMGVLOYcPpJadw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.220.0.0/16
77.116.0.0/14
81.3.192.0/18
91.141.0.0/17
94.245.192.0/18
109.126.64.0/18
178.112.0.0/14
178.165.128.0/17
194.24.128.0/19
213.94.64.0/18
IPv6:
2a02:2861::/32
2a02:2864::/30
Signature Algorithm: sha256WithRSAEncryption
be:d4:53:69:c6:8f:55:4c:b5:3f:d2:c5:38:d5:a2:64:40:e7:
f0:0a:12:20:d1:2c:cb:32:b2:4e:e1:88:64:b1:22:7c:88:5e:
96:a1:fe:fb:d0:8c:da:87:e1:38:8e:7a:4d:c1:79:a3:09:51:
ec:98:18:36:13:dc:16:6d:80:80:86:78:fd:fa:b0:5f:14:58:
30:9e:0b:56:58:c0:a6:2c:36:1f:1c:6b:b9:f5:b7:a0:03:af:
f5:26:3e:22:a3:1c:1c:2c:ba:99:6c:f8:57:5a:10:cb:5a:eb:
86:d2:b9:ff:fa:16:b9:f7:ec:0a:76:d9:d0:da:c8:18:3e:fd:
5e:b8:21:13:78:91:77:56:91:b8:18:80:b1:11:d3:df:11:1a:
2c:6e:4e:37:db:0b:0f:0e:6e:e9:cf:1c:07:3f:83:13:e5:f1:
3f:07:b8:4b:b4:79:47:25:f0:a1:df:80:55:bb:7e:08:6f:de:
8d:d2:0e:c6:19:5f:4e:ef:01:4d:1e:54:bc:36:25:09:c7:61:
42:a9:67:c4:78:92:23:ee:a2:46:85:71:e1:2f:b7:5f:97:1d:
ad:32:61:68:8a:f4:83:15:ce:1f:69:10:08:47:c2:7b:5a:c9:
a5:95:20:5f:6c:e5:46:20:49:af:35:f8:46:00:0a:99:ce:0d:
f7:01:c2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:00:26 2026 by rpki-client