Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ONFz0V7IAS7pLP2dPdVzEzcHEzs.roa
File: ONFz0V7IAS7pLP2dPdVzEzcHEzs.roa (raw, json)
Hash identifier: exi5IPpnyvXJKOHa7VYcHQgVZZfh1VDHbH5mjri2Ow4=
Subject key identifier: 38:D1:73:D1:5E:C8:01:2E:E9:2C:FD:9D:3D:D5:73:13:37:07:13:3B
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A111DD1DC7CEBD3149B5C79ABE54C6D042
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ONFz0V7IAS7pLP2dPdVzEzcHEzs.roa
Signing time: Tue 06 Oct 2026 15:37:45 +0000
ROA not before: Tue 06 Oct 2026 15:37:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202053
IP address blocks: 5.22.208.0/22 maxlen: 22
5.22.212.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
80.47.224.0/22 maxlen: 22
80.47.228.0/22 maxlen: 22
80.47.232.0/22 maxlen: 22
80.47.236.0/22 maxlen: 22
80.69.172.0/22 maxlen: 22
81.27.96.0/22 maxlen: 22
81.27.100.0/22 maxlen: 22
81.27.104.0/23 maxlen: 23
81.27.106.0/23 maxlen: 23
81.27.108.0/22 maxlen: 22
83.136.248.0/21 maxlen: 21
85.9.200.0/21 maxlen: 21
85.9.208.0/21 maxlen: 21
85.9.216.0/22 maxlen: 22
85.9.220.0/22 maxlen: 22
87.58.144.0/22 maxlen: 22
87.58.148.0/22 maxlen: 22
87.58.152.0/22 maxlen: 22
87.58.156.0/23 maxlen: 23
87.58.158.0/23 maxlen: 23
94.237.0.0/24 maxlen: 24
94.237.1.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.4.0/22 maxlen: 22
94.237.8.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
94.237.126.0/24 maxlen: 24
95.111.192.0/21 maxlen: 21
95.111.200.0/22 maxlen: 22
95.111.204.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
185.20.136.0/22 maxlen: 22
185.26.48.0/22 maxlen: 22
185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
212.147.224.0/22 maxlen: 22
212.147.228.0/22 maxlen: 22
212.147.232.0/22 maxlen: 22
212.147.236.0/22 maxlen: 22
212.147.240.0/22 maxlen: 22
212.147.244.0/22 maxlen: 22
212.147.248.0/23 maxlen: 23
212.147.250.0/23 maxlen: 23
212.147.252.0/22 maxlen: 22
213.163.192.0/20 maxlen: 20
2a04:3540::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3544::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3545::/32 maxlen: 32
2a04:3545:4000::/34 maxlen: 34
2a04:3545:8000::/34 maxlen: 34
2a04:3546::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:dd:1d:c7:ce:bd:31:49:b5:c7:9a:be:54:c6:d0:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Oct 6 15:37:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=38d173d15ec8012ee92cfd9d3dd573133707133b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:84:6a:72:d4:6f:43:b8:1a:e8:6c:0e:52:
81:64:4e:70:b2:d3:f5:ff:20:0c:80:0c:8e:bd:bb:
b1:20:0a:f5:6b:73:f2:25:7a:fd:66:ff:84:0f:80:
86:5e:c8:61:a8:a8:6f:c9:16:7a:aa:5d:b2:f8:c8:
d1:ff:38:38:54:95:e2:b1:13:c0:6b:c9:91:70:a8:
83:42:04:f2:96:a2:b8:f1:a5:55:73:8d:48:03:f6:
be:80:cd:2e:91:d1:ec:84:0d:eb:19:f5:d2:86:19:
87:f5:38:ee:3f:93:14:f8:03:ed:15:0f:8e:de:a4:
ae:cd:5e:b6:ef:44:07:a2:42:8a:00:7b:b9:6c:3a:
25:77:d6:5c:70:27:c0:09:28:dd:5f:9c:59:bb:e9:
64:85:06:2c:aa:d1:72:e3:eb:28:29:e0:b9:69:65:
83:f1:66:ea:57:9d:7e:e1:21:f9:9c:7e:08:b1:f5:
67:dc:b0:64:7a:f7:ac:fd:ac:25:1d:c6:39:56:7a:
2d:b0:12:08:ec:c2:68:e8:33:3d:58:7a:e9:4a:55:
79:69:fc:92:fa:e2:ff:23:1c:f7:3f:e3:ce:be:08:
15:3e:0e:5f:78:bf:7b:cb:35:60:34:48:99:c3:7a:
79:32:a2:b2:f0:d4:17:a2:b8:06:1c:a3:c5:d4:d1:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D1:73:D1:5E:C8:01:2E:E9:2C:FD:9D:3D:D5:73:13:37:07:13:3B
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/ONFz0V7IAS7pLP2dPdVzEzcHEzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.47.224.0/20
80.69.172.0/22
81.27.96.0/20
83.136.248.0/21
85.9.200.0-85.9.223.255
87.58.144.0/20
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
212.147.224.0/19
213.163.192.0/20
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
79:45:bf:7b:3d:75:33:bd:e7:c8:7a:33:cb:5e:79:f4:a0:16:
b8:7e:f6:37:93:4f:5b:da:7e:10:40:82:96:71:80:c4:c8:68:
a4:54:12:d6:71:27:cf:98:e3:81:50:13:09:3b:28:ab:68:fd:
c7:67:b0:6c:67:be:81:7a:bc:55:19:04:7d:1f:19:01:e8:e7:
43:77:be:f3:24:ce:6f:14:71:a1:d0:c7:8c:d9:36:22:cd:0b:
7c:8e:93:4f:8e:2e:3f:0c:32:12:45:ae:90:f3:08:cd:ff:b2:
99:12:f3:67:6f:64:27:23:c1:b5:53:90:1b:30:0c:5b:c2:82:
45:68:d4:09:f4:e1:83:f9:16:25:7b:92:6c:85:26:82:75:76:
8a:3a:85:11:80:d5:bf:5d:85:6a:cc:29:bb:1c:78:9a:8d:3c:
73:7f:98:a1:9a:63:f2:ba:c7:2c:7f:26:39:c3:92:8f:96:ba:
8b:08:9b:0a:80:35:97:31:7a:10:12:c1:57:04:09:26:44:d0:
ce:32:30:1d:bf:f9:17:ec:81:83:7f:0b:56:76:25:6d:af:1d:
6f:5c:01:c1:0a:b5:39:c9:db:fb:88:a1:6c:33:9f:2f:1b:6c:
df:cb:2d:f6:fd:16:50:03:47:8f:69:ca:29:03:ef:58:81:4a:
cb:12:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:28 2026 by rpki-client