Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/p_-g8PelWdmqsdjOIMd952nJEQ0.roa
File: p_-g8PelWdmqsdjOIMd952nJEQ0.roa (raw, json)
Hash identifier: SNcHznir+SSpk2nPwXwbT8vISszxA2KZ7EJsOdYVxCA=
Subject key identifier: A7:FF:A0:F0:F7:A5:59:D9:AA:B1:D8:CE:20:C7:7D:E7:69:C9:11:0D
Certificate issuer: /CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Certificate serial: 019CEB560783DB6CD6D8DC8EC32E12B4CA00
Authority key identifier: 20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/p_-g8PelWdmqsdjOIMd952nJEQ0.roa
Signing time: Sat 14 Mar 2026 07:53:29 +0000
ROA not before: Sat 14 Mar 2026 07:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47895
IP address blocks: 78.142.232.0/22 maxlen: 22
91.205.128.0/22 maxlen: 22
91.205.131.0/24 maxlen: 24
153.80.224.0/22 maxlen: 22
185.34.20.0/22 maxlen: 22
185.34.21.0/24 maxlen: 24
185.189.100.0/22 maxlen: 22
185.244.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:56:07:83:db:6c:d6:d8:dc:8e:c3:2e:12:b4:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d2633bffb16da2d75edaf49bc821187cfb88ef
Validity
Not Before: Mar 14 07:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7ffa0f0f7a559d9aab1d8ce20c77de769c9110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:26:c7:dd:7d:d2:c3:ac:93:9a:e5:fc:bb:
ff:fe:02:65:ac:e1:57:c1:86:20:ca:66:c4:c0:f9:
e7:e1:e8:55:15:32:04:02:98:f3:0c:09:1a:ee:aa:
9c:61:ac:a7:a2:e8:0f:cf:a4:f1:54:31:93:38:5a:
77:6a:53:66:26:c1:74:26:72:f1:2e:e0:1d:9f:ed:
44:6d:eb:26:45:57:97:68:cc:17:56:12:6d:6c:f7:
5c:8e:f4:38:2d:53:dc:78:97:0d:ca:40:54:31:31:
e4:1a:a2:c3:5f:18:98:34:9c:52:c4:17:05:23:6e:
3f:05:8e:3e:41:14:aa:1d:04:26:e7:3f:c0:b0:8a:
e2:f4:67:11:f3:21:01:e6:3f:8c:01:29:73:0b:9c:
5c:4e:71:d7:f0:fe:bb:ea:8f:c0:c2:5d:c5:13:43:
66:d6:02:83:4f:51:54:e4:d4:5e:48:65:1d:a9:7d:
22:e5:c9:78:52:7e:e1:5f:da:f7:c4:bb:8c:81:f3:
80:16:72:f9:bc:88:39:2d:c6:de:67:11:b6:6d:a7:
99:3a:cf:48:7e:9e:96:88:69:4c:d6:9f:7e:53:e0:
cf:ce:8f:e6:9d:c9:3a:46:bb:ca:74:49:77:15:cb:
62:2d:38:76:22:8e:cf:8b:85:7c:83:de:ec:16:68:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FF:A0:F0:F7:A5:59:D9:AA:B1:D8:CE:20:C7:7D:E7:69:C9:11:0D
X509v3 Authority Key Identifier:
keyid:20:D2:63:3B:FF:B1:6D:A2:D7:5E:DA:F4:9B:C8:21:18:7C:FB:88:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INJjO_-xbaLXXtr0m8ghGHz7iO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/p_-g8PelWdmqsdjOIMd952nJEQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/7f0464-226d-4f49-a270-1cd6c871c1e8/1/INJjO_-xbaLXXtr0m8ghGHz7iO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.142.232.0/22
91.205.128.0/22
153.80.224.0/22
185.34.20.0/22
185.189.100.0/22
185.244.20.0/22
Signature Algorithm: sha256WithRSAEncryption
69:b1:7b:ca:71:8b:37:6a:d6:46:8d:f7:4b:d8:f1:61:fc:f0:
62:7a:75:40:9f:06:ac:6a:21:c2:66:60:25:53:3c:b5:e1:96:
13:bf:ae:f7:f2:fe:7a:f3:0b:5c:c5:43:a0:81:33:d2:07:74:
82:7b:b5:c1:11:be:cc:a3:50:c3:3d:8a:ed:de:51:06:45:dd:
bb:08:df:b4:83:2d:e6:b2:0a:d6:ef:f0:ec:d6:37:cc:29:f0:
89:9d:c5:75:65:46:73:16:45:b0:50:f3:e2:e2:b5:fe:2b:17:
92:09:1e:dc:01:6e:b8:2b:aa:df:5f:48:29:05:63:9e:bf:cc:
37:bd:06:19:3a:db:38:4a:86:cb:65:52:f3:08:33:33:8f:5d:
74:49:89:cd:eb:a0:88:25:2d:7f:91:4b:eb:3b:bb:57:ec:a4:
82:62:7b:94:d0:a3:58:00:2e:f9:51:0f:22:da:75:57:10:6e:
73:89:b6:e2:ee:4d:45:a0:58:87:36:bb:62:fc:fc:b6:04:ed:
ee:f0:52:6e:1a:1a:6f:c5:74:78:cc:1f:bd:15:e2:c7:ae:65:
8f:98:4e:63:99:80:98:f5:a6:7a:98:d1:a1:98:58:06:0e:bc:
d4:77:9d:b7:28:07:b8:35:24:18:62:76:2f:28:02:21:5f:2d:
57:88:1b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:08 2026 by rpki-client