Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/n8JXJeOOoOd0ZB8psyxJVOa3bs0.roa
File: n8JXJeOOoOd0ZB8psyxJVOa3bs0.roa (raw, json)
Hash identifier: 2oRtWGrNewLpxhVsijupAz+Nq9JEWrlYaXgCA/HOxYE=
Subject key identifier: 9F:C2:57:25:E3:8E:A0:E7:74:64:1F:29:B3:2C:49:54:E6:B7:6E:CD
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 01A0C48CA69B908FD7489013104EDE1B42E2
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/n8JXJeOOoOd0ZB8psyxJVOa3bs0.roa
Signing time: Mon 21 Sep 2026 15:19:07 +0000
ROA not before: Mon 21 Sep 2026 15:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21412
IP address blocks: 5.20.0.0/20 maxlen: 20
5.20.16.0/20 maxlen: 20
5.20.32.0/19 maxlen: 19
5.20.64.0/19 maxlen: 19
5.20.96.0/21 maxlen: 21
5.20.104.0/21 maxlen: 21
5.20.112.0/21 maxlen: 21
5.20.120.0/21 maxlen: 21
5.20.128.0/19 maxlen: 19
5.20.160.0/19 maxlen: 19
5.20.192.0/19 maxlen: 19
5.20.224.0/21 maxlen: 21
5.20.232.0/21 maxlen: 21
5.20.240.0/20 maxlen: 20
37.157.144.0/21 maxlen: 21
46.251.32.0/19 maxlen: 19
77.87.8.0/21 maxlen: 21
77.221.64.0/19 maxlen: 19
79.133.224.0/19 maxlen: 19
80.240.0.0/20 maxlen: 20
81.29.16.0/20 maxlen: 20
87.239.112.0/21 maxlen: 21
87.247.64.0/18 maxlen: 18
91.187.160.0/19 maxlen: 19
178.16.32.0/20 maxlen: 20
178.250.32.0/21 maxlen: 21
185.26.132.0/22 maxlen: 22
185.198.32.0/22 maxlen: 22
212.52.32.0/19 maxlen: 19
212.117.0.0/19 maxlen: 19
217.17.80.0/20 maxlen: 20
217.77.24.0/21 maxlen: 21
2a00:7600::/32 maxlen: 32
2a01:a1c0::/32 maxlen: 32
2a04:ce00::/29 maxlen: 29
2a04:eb00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:8c:a6:9b:90:8f:d7:48:90:13:10:4e:de:1b:42:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Sep 21 15:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9fc25725e38ea0e774641f29b32c4954e6b76ecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:43:a2:05:66:2e:f0:6d:eb:9f:57:d9:bc:
72:ce:30:67:25:c2:5f:ab:90:cb:bc:45:1a:35:3c:
08:1c:93:55:78:d4:10:9d:43:7a:f6:1f:9d:07:c5:
1a:9b:e5:9c:f0:8e:5e:4f:bb:63:3d:71:15:ca:37:
0b:57:48:34:e1:29:61:2b:d3:93:01:b6:2f:8e:6b:
34:35:fe:5f:6b:5c:ef:d7:2e:37:f1:e2:90:9f:45:
eb:e6:81:04:c6:82:12:55:bd:c6:af:bc:89:75:4c:
0d:ca:57:bc:d1:43:a4:91:e8:c9:2a:4d:c6:9c:21:
f8:67:59:d1:e9:aa:97:c3:64:e5:1f:a6:30:18:a1:
01:f2:ee:69:94:82:4d:3f:b1:27:e6:e4:94:b9:95:
28:1a:66:79:10:ab:2d:43:83:f2:47:fb:1f:db:38:
d7:5c:e7:3d:9c:d0:94:a2:2e:12:d2:fb:a5:cb:1b:
34:4d:70:8f:75:13:43:20:93:10:6d:f8:36:e8:98:
95:ae:b4:b0:3a:3b:6c:b4:c5:21:94:6d:e6:2c:ea:
64:8c:99:25:b2:53:7e:18:ba:7d:4b:63:11:04:94:
9b:7d:9b:72:75:ce:ec:3c:7a:3e:a2:50:62:da:29:
2b:cc:df:09:2d:39:ae:bd:24:df:5e:af:a1:0d:d9:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:57:25:E3:8E:A0:E7:74:64:1F:29:B3:2C:49:54:E6:B7:6E:CD
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/n8JXJeOOoOd0ZB8psyxJVOa3bs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.20.0.0/16
37.157.144.0/21
46.251.32.0/19
77.87.8.0/21
77.221.64.0/19
79.133.224.0/19
80.240.0.0/20
81.29.16.0/20
87.239.112.0/21
87.247.64.0/18
91.187.160.0/19
178.16.32.0/20
178.250.32.0/21
185.26.132.0/22
185.198.32.0/22
212.52.32.0/19
212.117.0.0/19
217.17.80.0/20
217.77.24.0/21
IPv6:
2a00:7600::/32
2a01:a1c0::/32
2a04:ce00::/29
2a04:eb00::/29
Signature Algorithm: sha256WithRSAEncryption
a5:80:f5:12:3e:b5:51:25:48:53:4a:fe:9a:8a:1a:9f:00:e1:
4f:8f:1b:40:d1:bf:35:33:86:b7:02:f0:b0:ef:ac:84:7e:e3:
b8:3a:6c:f1:29:4a:ac:75:b0:6a:f6:00:3c:da:62:cc:93:2a:
bd:ec:b4:b6:c5:f6:59:27:ff:55:f7:38:a5:45:4f:1b:f2:b3:
8b:3d:cf:49:f6:a4:48:e9:2f:d7:0c:1a:ae:ea:77:99:ba:c3:
aa:58:30:f1:35:a4:81:d9:d8:cb:c0:7c:60:88:41:6e:7e:77:
34:57:02:b2:24:58:b5:09:69:5e:24:1e:a7:2e:a8:5d:b2:33:
83:fa:ed:39:69:91:38:4a:ed:7d:25:dc:b5:6e:2e:fc:48:05:
c2:27:3c:af:f6:1f:0c:eb:84:78:0b:f1:31:c1:dd:58:29:7b:
79:d7:8f:b3:6d:d6:fd:40:fb:35:c9:6f:10:df:8a:e5:7b:a8:
4c:1b:4a:51:80:66:20:3a:2c:57:2b:ee:dd:09:62:22:4c:75:
76:a1:7d:91:1f:b7:2e:a5:52:cc:28:0d:f1:9d:ff:39:e1:0c:
cd:41:57:b0:ed:e9:e3:dd:b4:6e:b2:fc:3a:80:d1:89:9a:8e:
03:d6:4a:9c:2e:f4:f8:ff:87:20:ac:bd:80:15:55:f4:e4:8e:
81:d7:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:36:11 2026 by rpki-client