Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I8vS97tvtkNgegC1NkyYJZ9EbQM.roa
File: I8vS97tvtkNgegC1NkyYJZ9EbQM.roa (raw, json)
Hash identifier: 65Bo/mCQt2n4+sp0dAv/y7zwG2eGPWv7JSdd7Q3lwQA=
Subject key identifier: 23:CB:D2:F7:BB:6F:B6:43:60:7A:00:B5:36:4C:98:25:9F:44:6D:03
Certificate issuer: /CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Certificate serial: 019F23693592756CEDC716C082237DA97966
Authority key identifier: 23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I8vS97tvtkNgegC1NkyYJZ9EbQM.roa
Signing time: Thu 02 Jul 2026 15:18:45 +0000
ROA not before: Thu 02 Jul 2026 15:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21430
IP address blocks: 31.7.240.0/21 maxlen: 21
77.78.64.0/22 maxlen: 22
77.78.68.0/23 maxlen: 23
77.78.74.0/23 maxlen: 23
77.78.80.0/21 maxlen: 21
77.78.88.0/23 maxlen: 23
77.78.91.0/24 maxlen: 24
77.78.92.0/23 maxlen: 24
77.78.122.0/24 maxlen: 24
80.250.0.0/19 maxlen: 19
81.0.196.0/23 maxlen: 23
81.0.198.0/24 maxlen: 24
81.0.200.0/22 maxlen: 22
81.0.204.0/23 maxlen: 23
81.0.210.0/23 maxlen: 23
81.0.215.0/24 maxlen: 24
81.0.216.0/24 maxlen: 24
81.0.222.0/23 maxlen: 23
81.0.224.0/24 maxlen: 24
81.0.227.0/24 maxlen: 24
81.0.229.0/24 maxlen: 24
81.0.244.0/23 maxlen: 23
81.0.251.0/24 maxlen: 24
81.0.252.0/23 maxlen: 23
82.208.0.0/22 maxlen: 22
82.208.13.0/24 maxlen: 24
82.208.15.0/24 maxlen: 24
82.208.19.0/24 maxlen: 24
82.208.24.0/23 maxlen: 23
82.208.30.0/23 maxlen: 24
82.208.36.0/23 maxlen: 23
82.208.38.0/24 maxlen: 24
82.208.42.0/23 maxlen: 23
82.208.45.0/24 maxlen: 24
82.208.51.0/24 maxlen: 24
82.208.52.0/22 maxlen: 22
82.208.57.0/24 maxlen: 24
82.208.59.0/24 maxlen: 24
83.136.200.0/21 maxlen: 21
85.239.224.0/23 maxlen: 23
85.239.226.0/24 maxlen: 24
85.239.228.0/23 maxlen: 23
85.239.251.0/24 maxlen: 24
85.239.254.0/23 maxlen: 23
109.123.200.0/23 maxlen: 23
109.123.201.0/24 maxlen: 24
109.123.204.0/24 maxlen: 24
109.123.212.0/23 maxlen: 23
109.123.226.0/24 maxlen: 24
147.161.28.0/22 maxlen: 22
185.33.136.0/22 maxlen: 22
185.161.240.0/22 maxlen: 22
217.11.226.0/24 maxlen: 24
217.11.231.0/24 maxlen: 24
217.11.234.0/24 maxlen: 24
217.11.237.0/24 maxlen: 24
217.11.238.0/23 maxlen: 23
217.11.240.0/23 maxlen: 23
217.11.244.0/24 maxlen: 24
217.11.250.0/24 maxlen: 24
217.11.252.0/23 maxlen: 23
217.11.255.0/24 maxlen: 24
2a01:6400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:35:92:75:6c:ed:c7:16:c0:82:23:7d:a9:79:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cf1dc7fc43e814839e00d804d3e0453121a842
Validity
Not Before: Jul 2 15:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23cbd2f7bb6fb643607a00b5364c98259f446d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:74:59:61:03:63:00:2f:3e:57:38:db:26:
65:e3:b5:62:e2:46:24:8c:84:1f:04:0f:4f:c1:bf:
fa:bc:f2:5c:a2:de:df:bb:75:d4:58:f8:32:30:b7:
a7:31:0f:f2:47:f2:d0:f9:a6:25:42:1c:aa:06:a3:
17:78:27:b1:c6:0a:24:aa:19:44:a8:8d:36:8d:f8:
ef:30:e9:54:15:6f:aa:6f:fd:bb:5c:73:ec:31:0d:
e5:dd:1d:31:f7:cb:b5:8d:dd:3c:31:fa:3c:a1:4c:
58:da:3c:f7:68:f3:1a:eb:84:0d:cd:dc:e2:7a:66:
7a:05:5b:0e:7d:3b:af:21:2e:f1:83:73:c5:fa:f2:
04:17:f6:e9:f7:bf:1b:89:78:00:b2:4b:c7:e5:b6:
92:62:74:69:24:91:1f:fd:3f:10:85:22:0b:ea:64:
3a:ca:f7:27:ff:1e:70:e3:8f:a5:fc:b4:1e:af:52:
e9:df:a4:76:e4:c6:df:b8:b0:e7:ea:e0:9d:10:1b:
e0:5d:83:e0:8b:00:66:72:c3:2e:28:59:de:3a:78:
a3:17:bf:b8:65:f4:bf:a0:c3:6b:0b:28:6e:14:58:
b6:26:02:ea:87:ba:06:b4:80:8a:03:1a:69:2e:d4:
4a:3c:3f:25:96:55:24:37:81:4c:64:e8:48:74:82:
5c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CB:D2:F7:BB:6F:B6:43:60:7A:00:B5:36:4C:98:25:9F:44:6D:03
X509v3 Authority Key Identifier:
keyid:23:CF:1D:C7:FC:43:E8:14:83:9E:00:D8:04:D3:E0:45:31:21:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I88dx_xD6BSDngDYBNPgRTEhqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I8vS97tvtkNgegC1NkyYJZ9EbQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/009074-66f6-4d4d-974a-da2ec8cfb888/1/I88dx_xD6BSDngDYBNPgRTEhqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.240.0/21
77.78.64.0-77.78.69.255
77.78.74.0/23
77.78.80.0-77.78.89.255
77.78.91.0-77.78.93.255
77.78.122.0/24
80.250.0.0/19
81.0.196.0-81.0.198.255
81.0.200.0-81.0.205.255
81.0.210.0/23
81.0.215.0-81.0.216.255
81.0.222.0-81.0.224.255
81.0.227.0/24
81.0.229.0/24
81.0.244.0/23
81.0.251.0-81.0.253.255
82.208.0.0/22
82.208.13.0/24
82.208.15.0/24
82.208.19.0/24
82.208.24.0/23
82.208.30.0/23
82.208.36.0-82.208.38.255
82.208.42.0/23
82.208.45.0/24
82.208.51.0-82.208.55.255
82.208.57.0/24
82.208.59.0/24
83.136.200.0/21
85.239.224.0-85.239.226.255
85.239.228.0/23
85.239.251.0/24
85.239.254.0/23
109.123.200.0/23
109.123.204.0/24
109.123.212.0/23
109.123.226.0/24
147.161.28.0/22
185.33.136.0/22
185.161.240.0/22
217.11.226.0/24
217.11.231.0/24
217.11.234.0/24
217.11.237.0-217.11.241.255
217.11.244.0/24
217.11.250.0/24
217.11.252.0/23
217.11.255.0/24
IPv6:
2a01:6400::/32
Signature Algorithm: sha256WithRSAEncryption
88:a2:f7:a1:fe:d0:5b:3f:ec:a0:99:9a:08:a5:1d:9d:07:20:
39:89:82:62:b9:c3:42:e7:68:16:3b:94:3c:6a:ff:ec:f6:e6:
08:be:3e:c9:ae:d6:e1:11:52:ea:9d:8b:e8:e9:ee:52:f1:23:
ad:6c:12:76:7e:3a:34:e5:cb:d6:8d:75:79:b2:98:de:50:92:
0b:53:95:ad:cd:66:d8:93:ce:df:d5:ef:01:b1:01:3a:73:79:
ed:2b:a9:90:e8:3a:e8:5f:2c:6b:ec:2e:ff:9c:84:bd:d5:f9:
af:01:72:42:30:7f:8c:be:91:e2:5b:44:13:24:c9:da:a2:7c:
52:28:bf:de:cb:2f:62:ac:b8:27:e9:c2:23:b4:6f:b3:63:60:
de:d5:9d:a2:04:c5:8f:44:46:ec:fa:78:31:52:67:04:c0:d4:
f4:9d:9e:67:35:d1:2d:0e:0c:89:bc:3c:2d:54:63:90:ee:3a:
6e:d6:f9:19:76:de:72:5e:28:5b:80:62:39:1b:e1:2c:06:c4:
74:9d:47:0f:1c:c9:db:ce:4b:26:8d:44:85:c1:37:8d:06:8d:
70:24:f1:74:04:03:40:db:6a:be:6a:bc:80:17:ab:f8:52:1e:
b2:8e:04:39:d8:ec:5f:b9:d8:8e:de:d2:41:8c:c5:fa:cd:20:
b9:ea:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:11 2026 by rpki-client