Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/RVaGH1SkZhzks6gtMqV3zoqEFSU.roa
File: RVaGH1SkZhzks6gtMqV3zoqEFSU.roa (raw, json)
Hash identifier: i0zXXrAXXw8+/WKaKhadLYpfrWES0ipPWqTRu/R5804=
Subject key identifier: 45:56:86:1F:54:A4:66:1C:E4:B3:A8:2D:32:A5:77:CE:8A:84:15:25
Certificate issuer: /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial: 019FF88EB9C5E66B2EBB52BB3CA72203EA67
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/RVaGH1SkZhzks6gtMqV3zoqEFSU.roa
Signing time: Thu 13 Aug 2026 00:38:51 +0000
ROA not before: Thu 13 Aug 2026 00:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 31.25.192.0/22 maxlen: 22
87.56.0.0/20 maxlen: 20
87.56.16.0/23 maxlen: 23
87.56.18.0/23 maxlen: 23
87.56.20.0/23 maxlen: 23
87.56.22.0/23 maxlen: 23
87.56.24.0/23 maxlen: 23
87.56.26.0/23 maxlen: 23
87.56.28.0/23 maxlen: 23
87.56.30.0/23 maxlen: 23
176.20.192.0/20 maxlen: 20
176.20.208.0/23 maxlen: 23
176.20.210.0/23 maxlen: 23
176.20.212.0/23 maxlen: 23
176.20.214.0/23 maxlen: 23
176.20.216.0/23 maxlen: 23
176.20.218.0/23 maxlen: 23
176.20.220.0/23 maxlen: 23
176.20.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:8e:b9:c5:e6:6b:2e:bb:52:bb:3c:a7:22:03:ea:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Validity
Not Before: Aug 13 00:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4556861f54a4661ce4b3a82d32a577ce8a841525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ee:16:e7:55:bc:02:2b:e9:83:d7:88:04:5a:
db:d8:57:d9:0e:03:14:a5:27:4d:16:df:0d:09:87:
dc:51:ca:e8:fa:c0:c9:15:01:6d:0a:ae:8f:cf:ee:
35:39:8a:f9:c8:a5:e0:b2:f7:6a:9b:4d:58:12:93:
83:c9:da:3b:aa:95:32:0b:a7:43:91:53:3e:51:7a:
69:c6:b6:db:a3:f0:c6:7b:29:32:a8:ac:02:e1:fa:
76:ac:f3:35:5f:95:b9:73:27:64:11:1d:72:31:be:
a7:97:7e:78:fd:82:65:fa:1b:66:73:e4:bf:ab:de:
a4:32:d2:bb:0f:36:6a:28:cb:dc:f9:07:c0:89:17:
a5:e4:7b:00:5f:0e:fa:30:14:2f:e0:12:fc:ec:05:
7a:bf:35:32:bf:11:c8:bb:22:16:e4:93:2c:d6:24:
10:33:33:da:0e:c5:93:db:29:ab:9c:c6:ac:81:eb:
f6:6f:e8:30:48:05:4e:38:29:c2:d8:bc:f0:21:7c:
37:4e:ce:d2:35:0d:ab:25:f5:07:d5:2e:63:aa:f2:
e9:0f:fe:98:06:b7:7d:88:8d:7a:1e:3f:22:a8:7e:
32:9d:a0:15:eb:9b:bc:27:a1:9d:70:51:5c:ee:f0:
0b:d4:dd:b2:05:8f:cd:b5:4b:60:d3:eb:3c:d9:c8:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:86:1F:54:A4:66:1C:E4:B3:A8:2D:32:A5:77:CE:8A:84:15:25
X509v3 Authority Key Identifier:
keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/RVaGH1SkZhzks6gtMqV3zoqEFSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.192.0/22
87.56.0.0/19
176.20.192.0/19
Signature Algorithm: sha256WithRSAEncryption
90:78:30:9b:09:3b:0e:cf:46:20:c2:cb:31:66:56:a6:19:85:
be:8f:5d:67:99:dd:08:7f:38:d2:e1:f6:d0:3a:20:d4:b7:26:
be:84:99:ae:c4:2d:2d:5c:e0:69:11:ca:f7:50:67:a5:fa:99:
63:1b:0a:a9:2f:5a:7c:6d:dd:bc:a2:54:bd:67:b7:54:1b:bd:
1c:52:18:51:ae:38:7a:0c:f2:1f:73:15:29:52:f1:30:0b:78:
9b:cf:7b:f0:f2:bf:9c:41:37:57:68:9b:ba:f6:b5:b6:6b:fa:
e4:10:07:7f:08:cc:48:7d:f2:5a:be:ae:4f:32:a8:a3:7c:31:
60:d1:36:27:e2:43:1b:ee:dd:f9:dd:67:9e:3f:b4:0e:f8:ac:
0d:52:b4:85:22:1a:5b:87:52:57:14:55:e3:2a:48:3c:f8:e2:
cd:84:e5:09:2c:50:66:7b:2e:78:7d:3d:4d:1f:e9:fb:1a:9e:
c6:19:b1:b4:94:5c:46:2d:d9:08:61:c6:2c:71:88:90:ea:24:
80:26:27:cd:e9:69:f2:88:20:7d:2c:cd:e3:e0:a0:c2:cc:10:
2a:5d:cb:7b:97:da:3f:94:6e:71:77:34:25:71:ae:8e:a7:ff:
78:35:2c:9d:fe:89:bb:74:86:5a:4b:be:5d:aa:b1:72:87:23:
a4:88:41:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:28 2026 by rpki-client