Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/8sxlG_ERzpJY-DrWbCJVeSyivJc.roa
File: 8sxlG_ERzpJY-DrWbCJVeSyivJc.roa (raw, json)
Hash identifier: 9JU8Lr30fMhxDVV9hEMZqzi9bdp5C4wErnIwMwEa1+0=
Subject key identifier: F2:CC:65:1B:F1:11:CE:92:58:F8:3A:D6:6C:22:55:79:2C:A2:BC:97
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D04C62CE3E11086F424B15C9A963B241D
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/8sxlG_ERzpJY-DrWbCJVeSyivJc.roa
Signing time: Thu 19 Mar 2026 06:26:29 +0000
ROA not before: Thu 19 Mar 2026 06:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.105.0/24 maxlen: 24
5.180.106.0/24 maxlen: 24
5.180.107.0/24 maxlen: 24
45.74.242.0/24 maxlen: 24
45.74.247.0/24 maxlen: 24
45.131.0.0/24 maxlen: 24
45.131.1.0/24 maxlen: 24
45.131.2.0/24 maxlen: 24
45.131.3.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
45.141.149.0/24 maxlen: 24
77.83.200.0/24 maxlen: 24
77.83.201.0/24 maxlen: 24
77.83.202.0/24 maxlen: 24
91.208.204.0/24 maxlen: 24
194.116.237.0/24 maxlen: 24
2a09:8780::/29 maxlen: 29
2a0f:b700::/29 maxlen: 29
2a0f:e900::/29 maxlen: 29
2a0f:eb00::/29 maxlen: 29
2a0f:eb05::/32 maxlen: 32
2a0f:eb07::/32 maxlen: 32
2a0f:ed00::/29 maxlen: 29
2a0f:ed03::/32 maxlen: 32
2a0f:f900::/29 maxlen: 29
2a13:a440:7::/48 maxlen: 48
2a13:a441::/32 maxlen: 32
2a13:a442::/32 maxlen: 32
2a13:a443::/32 maxlen: 32
2a13:a444::/32 maxlen: 32
2a13:a445::/32 maxlen: 32
2a13:a446::/32 maxlen: 32
2a13:a447::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:c6:2c:e3:e1:10:86:f4:24:b1:5c:9a:96:3b:24:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 19 06:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2cc651bf111ce9258f83ad66c2255792ca2bc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:e7:46:f1:ec:36:ac:6b:4f:18:10:00:fa:
ba:3c:2d:e7:e0:f2:36:95:e0:67:87:58:36:5a:01:
ed:67:c0:8d:75:86:c3:7d:93:8a:7e:2e:45:c0:3d:
ce:35:3e:d7:9e:91:b3:c3:cb:1b:45:83:5e:04:be:
13:a6:91:ae:b7:29:a2:bf:55:52:17:3c:a1:66:49:
f6:c0:90:9e:94:f5:45:47:6f:97:e7:5a:33:28:9b:
e9:24:32:9e:2f:40:f9:5f:2b:12:53:52:ef:6b:df:
d3:71:ff:93:39:8c:16:9a:73:e0:6e:d8:72:06:fe:
83:2f:84:8e:68:59:cb:0c:b6:c5:33:51:c8:e6:a5:
23:5f:7a:33:91:cf:54:59:ba:fe:65:e2:c7:9c:80:
dd:00:fa:7b:89:ae:8e:df:e1:1e:ac:48:a6:2a:65:
98:59:b9:df:81:af:6b:8f:6b:f2:40:15:79:c6:b1:
96:b6:83:7f:92:6f:78:22:44:51:65:63:d8:1b:bf:
bc:04:ad:04:fa:96:c3:db:d6:58:a6:74:46:87:45:
88:56:3d:e0:53:a1:59:88:c4:26:60:56:a8:c4:08:
c5:cf:41:94:d5:20:41:0d:dc:2a:44:bf:d5:fc:c2:
cc:d8:96:dd:4a:17:70:fe:79:58:73:c3:8c:49:9a:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CC:65:1B:F1:11:CE:92:58:F8:3A:D6:6C:22:55:79:2C:A2:BC:97
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/8sxlG_ERzpJY-DrWbCJVeSyivJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0-5.180.107.255
45.74.242.0/24
45.74.247.0/24
45.131.0.0/22
45.136.4.0/24
45.141.149.0/24
77.83.200.0-77.83.202.255
91.208.204.0/24
194.116.237.0/24
IPv6:
2a09:8780::/29
2a0f:b700::/29
2a0f:e900::/29
2a0f:eb00::/29
2a0f:ed00::/29
2a0f:f900::/29
2a13:a440:7::/48
2a13:a441::-2a13:a447:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
96:48:85:7d:cd:0e:dd:4d:fa:26:e9:20:c9:54:c6:84:01:28:
9d:e8:34:d5:b5:aa:51:cd:8a:5d:65:71:15:77:69:55:f5:f9:
b5:94:7c:9e:89:8d:4e:2a:15:80:a3:77:55:cc:d2:89:07:37:
d5:57:9a:a5:4d:16:16:93:57:89:48:ae:ba:e0:cc:66:35:0e:
aa:5b:4e:d7:f7:4a:74:cc:81:b7:91:4f:3e:4a:83:10:89:38:
63:b5:f9:37:81:c7:48:23:d2:60:8e:7f:58:f8:bb:8f:11:4e:
bd:df:ef:45:51:53:c7:21:05:bb:83:5a:ea:a1:a2:0e:0f:d0:
16:49:e5:f8:fa:cd:48:3b:23:20:97:79:8c:be:c1:63:df:e2:
84:fd:9f:10:04:0a:39:eb:44:23:92:b7:ed:bc:3e:ca:11:18:
a2:c0:15:35:04:e3:d2:0a:bf:69:10:19:91:ac:9a:09:14:8f:
9e:ea:e8:4b:bd:b9:19:66:8e:f3:d1:0e:ae:9b:bd:67:a8:78:
c4:4c:6d:d4:9a:9b:30:29:fd:4a:c3:c5:66:47:a9:2b:7d:fe:
a7:91:e6:0a:bb:e5:95:97:05:9e:3b:bc:c1:56:c5:0b:72:3a:
89:b8:14:9b:5a:fb:73:2d:0e:d4:a8:09:b8:43:11:24:5c:d0:
ef:6c:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:30 2026 by rpki-client