Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/fGPyVoYA7Pc-igsJ8lc6VndKUAI.roa
File: fGPyVoYA7Pc-igsJ8lc6VndKUAI.roa (raw, json)
Hash identifier: j4K4to0xa3XNtN0v+W/9xMBmLw/rUsB8qqoxhhwN2Vc=
Subject key identifier: 7C:63:F2:56:86:00:EC:F7:3E:8A:0B:09:F2:57:3A:56:77:4A:50:02
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 01A0BF597A42811639033110979896B959E7
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/fGPyVoYA7Pc-igsJ8lc6VndKUAI.roa
Signing time: Sun 20 Sep 2026 15:05:07 +0000
ROA not before: Sun 20 Sep 2026 15:05:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199242
IP address blocks: 5.255.61.0/24 maxlen: 24
5.255.62.0/23 maxlen: 23
23.252.66.0/23 maxlen: 23
23.252.71.0/24 maxlen: 24
23.252.79.0/24 maxlen: 24
31.222.234.0/24 maxlen: 24
37.72.142.0/24 maxlen: 24
62.3.11.0/24 maxlen: 24
62.106.90.0/24 maxlen: 24
62.233.61.0/24 maxlen: 24
80.71.144.0/24 maxlen: 24
91.92.112.0/23 maxlen: 23
91.246.50.0/24 maxlen: 24
107.150.162.0/23 maxlen: 23
107.150.175.0/24 maxlen: 24
107.150.177.0/24 maxlen: 24
146.19.4.0/24 maxlen: 24
146.19.199.0/24 maxlen: 24
146.19.203.0/24 maxlen: 24
162.222.88.0/23 maxlen: 23
162.222.90.0/24 maxlen: 24
167.160.27.0/24 maxlen: 24
176.97.217.0/24 maxlen: 24
176.126.101.0/24 maxlen: 24
185.4.224.0/23 maxlen: 23
185.234.12.0/24 maxlen: 24
185.252.210.0/24 maxlen: 24
188.244.119.0/24 maxlen: 24
193.9.48.0/24 maxlen: 24
193.162.132.0/24 maxlen: 24
193.162.133.0/24 maxlen: 24
194.26.230.0/24 maxlen: 24
194.26.231.0/24 maxlen: 24
194.99.158.0/24 maxlen: 24
195.96.130.0/24 maxlen: 24
195.96.131.0/24 maxlen: 24
212.52.14.0/24 maxlen: 24
212.52.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:59:7a:42:81:16:39:03:31:10:97:98:96:b9:59:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Sep 20 15:05:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c63f2568600ecf73e8a0b09f2573a56774a5002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:08:c8:62:9f:3d:68:98:08:07:b6:ad:79:95:
3c:db:fb:19:25:97:db:15:8d:72:95:37:66:19:84:
c3:8b:0e:f9:30:3b:b9:86:1f:9c:7b:22:5c:32:ae:
dc:a9:81:e3:20:38:ce:ff:cc:15:cc:63:8e:8a:82:
89:22:18:e7:ed:c7:9f:8d:52:af:e3:19:44:0b:75:
0f:64:d2:18:0a:87:57:c7:91:05:9b:eb:e1:ff:4d:
06:77:c0:16:2e:48:1c:60:46:ed:68:f7:bc:49:2f:
9f:da:a3:b4:66:4d:e9:26:cf:6e:0d:65:90:75:18:
e3:6f:f5:64:c3:c3:0d:3c:80:73:1a:0c:22:75:ec:
12:62:8b:4f:c7:d5:a8:42:4b:91:f9:f2:78:68:eb:
88:22:65:00:68:11:9f:bf:7c:21:9a:aa:8e:15:7a:
88:3c:de:71:e7:f0:66:a9:d3:6e:9a:69:f4:41:7f:
69:f1:9b:6a:ee:96:c9:47:f8:38:f4:15:d2:e1:8c:
d4:b2:7c:bc:03:de:9b:c0:1d:65:21:ac:4a:ce:d8:
ba:91:fd:33:2b:1d:87:95:b2:72:fd:46:be:0a:04:
85:7c:ad:00:d8:a6:cd:71:0c:4c:34:e7:aa:be:ef:
84:3c:80:27:52:ab:4f:9a:f6:42:b5:eb:83:aa:d5:
fe:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:63:F2:56:86:00:EC:F7:3E:8A:0B:09:F2:57:3A:56:77:4A:50:02
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/fGPyVoYA7Pc-igsJ8lc6VndKUAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.255.61.0-5.255.63.255
23.252.66.0/23
23.252.71.0/24
23.252.79.0/24
31.222.234.0/24
37.72.142.0/24
62.3.11.0/24
62.106.90.0/24
62.233.61.0/24
80.71.144.0/24
91.92.112.0/23
91.246.50.0/24
107.150.162.0/23
107.150.175.0/24
107.150.177.0/24
146.19.4.0/24
146.19.199.0/24
146.19.203.0/24
162.222.88.0-162.222.90.255
167.160.27.0/24
176.97.217.0/24
176.126.101.0/24
185.4.224.0/23
185.234.12.0/24
185.252.210.0/24
188.244.119.0/24
193.9.48.0/24
193.162.132.0/23
194.26.230.0/23
194.99.158.0/24
195.96.130.0/23
212.52.14.0/24
212.52.28.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e1:65:02:00:f1:55:2d:fa:bf:59:ec:4b:25:75:90:24:ba:
a6:0c:57:c0:25:05:53:6e:c5:53:9f:bc:37:e2:c4:17:03:2c:
16:5c:3b:64:8d:76:e4:26:bf:6d:a2:b8:66:b9:f8:de:e9:d1:
b6:37:3f:85:82:6e:6e:c8:f8:54:20:72:52:e5:87:a8:44:16:
96:d1:dc:86:b7:bf:89:75:7f:13:bd:72:f7:d9:15:4e:a2:3a:
eb:ef:98:9d:8b:64:37:1e:8b:53:89:f7:9d:90:b1:81:1e:70:
e2:23:fd:81:d3:9f:e8:8c:0b:3b:79:ae:42:82:45:c7:a6:55:
ad:1a:39:11:57:5c:7f:b3:e3:98:72:a2:4c:27:3b:69:81:be:
cc:a9:10:08:97:fb:5f:65:a9:fb:3a:29:35:9b:40:2f:ec:e2:
ed:f8:fc:65:cc:89:02:c1:d8:26:69:54:b0:44:1f:8c:70:18:
e6:3d:b3:22:85:d2:b4:a9:f9:65:28:8c:4e:ce:ba:d9:51:18:
87:43:8b:40:dc:7e:01:df:c5:73:ad:b3:f1:45:2a:d4:72:8c:
60:41:e6:47:2c:69:ca:01:24:0d:4c:ce:bb:68:93:62:9e:6c:
1e:c5:45:0b:25:47:be:cc:78:0e:4d:1e:23:63:46:35:7d:64:
99:4c:81:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:02:09 2026 by rpki-client