Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/PwiZTLMnTSImSJqg5YhxIc0yJ2I.roa
File: PwiZTLMnTSImSJqg5YhxIc0yJ2I.roa (raw, json)
Hash identifier: ELKLgbhzomAOFQPzxqVUBCgPOBcTULWY1WH35OnRTFw=
Subject key identifier: 3F:08:99:4C:B3:27:4D:22:26:48:9A:A0:E5:88:71:21:CD:32:27:62
Certificate issuer: /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial: 019FA28F6685AF4A113DF7F4B392473C521E
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/PwiZTLMnTSImSJqg5YhxIc0yJ2I.roa
Signing time: Mon 27 Jul 2026 07:52:14 +0000
ROA not before: Mon 27 Jul 2026 07:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200350
IP address blocks: 31.44.8.0/21 maxlen: 32
37.230.168.0/23 maxlen: 32
37.230.172.0/22 maxlen: 32
37.230.188.0/22 maxlen: 32
45.133.96.0/22 maxlen: 32
45.159.136.0/22 maxlen: 32
45.159.136.0/24 maxlen: 32
45.159.137.0/24 maxlen: 32
45.159.138.0/24 maxlen: 32
46.21.244.0/22 maxlen: 32
46.243.209.0/24 maxlen: 32
46.243.210.0/23 maxlen: 32
46.243.212.0/24 maxlen: 32
51.250.0.0/17 maxlen: 32
62.84.112.0/20 maxlen: 32
81.26.176.0/20 maxlen: 32
84.201.128.0/18 maxlen: 32
84.252.128.0/20 maxlen: 32
89.104.112.0/23 maxlen: 32
89.169.128.0/18 maxlen: 32
89.232.188.0/22 maxlen: 32
92.255.1.0/24 maxlen: 32
92.255.3.0/24 maxlen: 32
92.255.13.0/24 maxlen: 32
92.255.15.0/24 maxlen: 32
93.77.160.0/19 maxlen: 32
103.76.52.0/22 maxlen: 32
111.88.144.0/20 maxlen: 32
111.88.240.0/20 maxlen: 32
130.193.32.0/19 maxlen: 32
153.51.32.0/19 maxlen: 32
153.51.64.0/20 maxlen: 24
153.51.80.0/21 maxlen: 24
153.51.96.0/19 maxlen: 32
158.160.0.0/16 maxlen: 32
178.154.192.0/18 maxlen: 32
185.206.164.0/22 maxlen: 32
185.216.194.0/23 maxlen: 32
193.32.216.0/22 maxlen: 32
194.247.51.0/24 maxlen: 32
213.130.80.0/21 maxlen: 32
213.165.192.0/19 maxlen: 32
213.165.200.0/21 maxlen: 32
217.28.224.0/20 maxlen: 32
217.198.168.0/21 maxlen: 32
2a0d:d6c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:8f:66:85:af:4a:11:3d:f7:f4:b3:92:47:3c:52:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Validity
Not Before: Jul 27 07:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f08994cb3274d2226489aa0e5887121cd322762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:74:79:ac:b9:0e:35:fd:df:fe:3c:96:8f:
28:ec:e6:9d:8b:78:22:24:2a:9b:0f:bc:b2:3d:1b:
29:36:73:ff:bc:e3:b3:08:53:12:54:e0:3e:57:3b:
04:f8:08:06:24:c3:ab:8e:4a:23:d4:4d:82:15:38:
f2:c9:6e:b8:74:07:45:60:34:be:b3:8b:66:ea:c4:
91:3b:09:c3:e5:66:ab:15:3e:b6:04:2b:5c:85:b1:
5e:ff:45:df:74:06:34:6f:38:50:e9:0b:09:bf:9c:
9a:e4:b9:ec:f7:c4:73:a6:0c:05:76:4e:fe:ee:93:
bb:2a:09:0e:e0:c1:81:06:cc:0f:c7:a5:e6:e8:ec:
fa:59:0d:b3:70:c2:fe:35:52:05:5e:1f:e5:5c:80:
4f:64:40:0a:0a:4f:1e:c6:34:7c:63:47:39:09:2f:
ba:2a:fd:df:b5:9b:eb:a2:f5:a0:65:c2:9e:44:f9:
a4:87:86:b0:dc:ea:0a:36:9f:8a:7c:59:15:d8:13:
64:25:c4:97:2d:36:3d:7b:ce:5a:28:65:6a:49:91:
29:52:86:84:26:5a:4c:dc:b2:67:c7:01:a5:7f:1a:
b7:d8:7a:5d:ac:bd:f2:2b:1a:8b:72:1a:bf:12:18:
67:86:98:bb:3c:39:02:df:21:43:8d:77:03:4d:26:
f7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:99:4C:B3:27:4D:22:26:48:9A:A0:E5:88:71:21:CD:32:27:62
X509v3 Authority Key Identifier:
keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/PwiZTLMnTSImSJqg5YhxIc0yJ2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.8.0/21
37.230.168.0/23
37.230.172.0/22
37.230.188.0/22
45.133.96.0/22
45.159.136.0/22
46.21.244.0/22
46.243.209.0-46.243.212.255
51.250.0.0/17
62.84.112.0/20
81.26.176.0/20
84.201.128.0/18
84.252.128.0/20
89.104.112.0/23
89.169.128.0/18
89.232.188.0/22
92.255.1.0/24
92.255.3.0/24
92.255.13.0/24
92.255.15.0/24
93.77.160.0/19
103.76.52.0/22
111.88.144.0/20
111.88.240.0/20
130.193.32.0/19
153.51.32.0-153.51.87.255
153.51.96.0/19
158.160.0.0/16
178.154.192.0/18
185.206.164.0/22
185.216.194.0/23
193.32.216.0/22
194.247.51.0/24
213.130.80.0/21
213.165.192.0/19
217.28.224.0/20
217.198.168.0/21
IPv6:
2a0d:d6c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:b7:f4:c7:bf:7d:be:48:a1:01:2c:1b:d5:9e:ca:14:cc:32:
ab:9c:76:bf:6e:8e:07:c7:77:a0:99:fb:18:94:5f:78:42:f1:
5b:1a:87:92:dd:dd:1e:e0:6b:6b:52:67:88:09:21:ad:19:da:
a5:77:f3:03:2f:98:a9:ca:10:37:af:af:20:9d:74:74:5e:43:
72:7a:aa:09:2e:5a:c9:0d:c6:7e:4b:25:14:38:fc:25:7d:ca:
ba:f3:ef:63:19:16:24:50:59:f6:81:38:54:c6:04:9f:2b:8b:
50:3b:08:f8:b4:17:ff:ee:62:39:ea:a0:23:2b:0c:8f:fb:23:
e8:cd:fc:30:4f:a9:04:fb:e8:52:14:c1:e9:9f:b6:33:05:4d:
42:ab:c6:9a:f3:a9:78:73:22:b0:ef:bc:78:d7:e5:87:ca:60:
c7:df:d1:7c:37:f1:92:e4:4f:a9:67:e4:c3:14:7a:aa:49:c6:
8d:ef:b6:86:db:5c:d5:46:04:93:f7:44:8c:3d:47:15:65:f5:
00:7f:ef:b6:da:96:e3:ec:e2:c4:db:91:14:18:db:82:ec:ff:
7a:11:3b:0c:6e:57:07:f1:a8:ab:3d:31:49:1d:7f:a0:21:b4:
a8:6b:93:5a:a7:4c:78:70:05:2e:03:c2:ef:af:fb:fd:19:30:
03:6a:6e:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:17:18 2026 by rpki-client