Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/8TeZpbl_qus5n0g90QhzhZotgWI.roa
File: 8TeZpbl_qus5n0g90QhzhZotgWI.roa (raw, json)
Hash identifier: jS66+I6BTf47/f9YsHIptnfwhsFPalQW0oQ6WBC3rB0=
Subject key identifier: F1:37:99:A5:B9:7F:AA:EB:39:9F:48:3D:D1:08:73:85:9A:2D:81:62
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019F889A7F0F2FD5013A2EBB00A5B2025A49
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/8TeZpbl_qus5n0g90QhzhZotgWI.roa
Signing time: Wed 22 Jul 2026 06:54:14 +0000
ROA not before: Wed 22 Jul 2026 06:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 5.252.20.0/24 maxlen: 24
45.150.110.0/24 maxlen: 24
91.199.133.0/24 maxlen: 24
91.229.239.0/24 maxlen: 24
146.19.213.0/24 maxlen: 24
159.253.120.0/24 maxlen: 24
194.110.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:9a:7f:0f:2f:d5:01:3a:2e:bb:00:a5:b2:02:5a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jul 22 06:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f13799a5b97faaeb399f483dd10873859a2d8162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:a8:46:1c:9d:65:c5:53:ae:b4:0d:ae:44:
e3:d5:51:cb:3e:ed:ab:c4:3c:cc:eb:55:4c:88:e1:
fa:d1:a1:d6:66:bc:1e:31:f6:e9:67:f1:5a:27:bd:
2d:f6:59:f7:91:6a:43:df:34:a1:bb:f8:ba:8f:9f:
cb:6b:1c:e1:0a:aa:58:98:cc:7f:47:91:df:c3:10:
e2:a2:2a:14:6c:48:e1:35:dc:7f:ac:25:2a:e9:ac:
6f:aa:07:c0:b2:a3:fc:1c:93:bf:a5:f2:02:44:09:
03:15:85:31:27:ae:a8:23:db:1b:4a:81:e2:da:be:
ae:7c:84:7c:2f:54:63:27:4f:5a:2f:0d:13:da:f3:
bf:71:1e:f9:53:26:1b:d5:a7:93:4f:ef:3f:98:21:
ce:2a:74:49:36:53:bf:7a:d4:f4:62:ac:9d:01:7d:
a4:ea:54:23:4b:70:88:37:fc:84:13:8b:f2:fd:3c:
43:c9:8b:ef:1e:36:e7:63:fd:d2:2c:49:91:01:ee:
34:aa:c4:e2:de:97:4f:15:9e:02:e2:33:5f:29:b4:
02:07:95:8c:7a:31:73:20:9a:24:34:09:07:4a:fb:
c7:b3:6c:a5:ba:f5:e4:d6:01:32:31:13:31:a4:03:
0c:8d:0b:4d:23:70:d4:bc:2a:8b:fe:b3:06:74:46:
0f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:37:99:A5:B9:7F:AA:EB:39:9F:48:3D:D1:08:73:85:9A:2D:81:62
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/8TeZpbl_qus5n0g90QhzhZotgWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.20.0/24
45.150.110.0/24
91.199.133.0/24
91.229.239.0/24
146.19.213.0/24
159.253.120.0/24
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4f:7e:3d:7f:da:7c:7c:9f:11:f4:6b:7f:37:7f:8d:e8:aa:
38:b5:99:0a:05:c2:0a:c3:78:63:c5:da:21:77:72:47:eb:03:
3b:c9:c4:6c:8e:93:f1:7c:25:dc:47:5b:40:d7:95:95:e2:55:
6b:45:b3:f9:ad:88:07:73:29:5e:d5:b9:76:f6:96:1c:d0:6b:
3d:47:25:bb:3a:69:e7:1a:d2:ef:e5:71:87:d4:2a:f0:93:c6:
76:fc:45:4e:18:0b:e4:76:46:10:38:5c:67:39:b1:db:35:fe:
4b:0e:4a:32:ce:33:7e:c1:ab:42:9e:1c:95:e4:b8:a4:25:67:
d6:1c:1d:44:94:1c:43:30:25:95:a8:e8:2c:4b:ee:47:04:39:
fb:36:94:77:01:ec:91:e8:b9:fd:9b:75:30:f7:c5:47:30:a6:
e2:d0:e7:01:73:52:a3:56:49:04:c7:98:60:78:b3:ba:72:64:
20:6e:7d:36:71:ed:07:c8:e8:bd:df:83:c3:f9:1c:b9:60:01:
fd:ae:92:f8:1e:f5:7a:f5:da:33:17:99:bd:ee:39:64:8a:3e:
29:8e:ff:7b:f0:f4:69:55:8e:b0:35:3e:bd:2e:7d:b5:54:01:
14:fa:52:8e:ba:3d:2a:7d:bd:29:94:08:f1:41:88:40:f6:fe:
35:cd:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:25 2026 by rpki-client