Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IHEkRtUeNRm9Xzn_OjRHTggXuVQ.roa
File: IHEkRtUeNRm9Xzn_OjRHTggXuVQ.roa (raw, json)
Hash identifier: zp5JzWnBEjAwutiXfTUGZeZTWYBrTF4weyTIHWdsGTQ=
Subject key identifier: 20:71:24:46:D5:1E:35:19:BD:5F:39:FF:3A:34:47:4E:08:17:B9:54
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A13AC72A5F2C9F886E67993D7ACB5977B8
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IHEkRtUeNRm9Xzn_OjRHTggXuVQ.roa
Signing time: Wed 14 Oct 2026 14:18:13 +0000
ROA not before: Wed 14 Oct 2026 14:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 45.134.88.0/24 maxlen: 24
45.134.89.0/24 maxlen: 24
45.134.91.0/24 maxlen: 24
143.246.140.0/22 maxlen: 24
143.246.143.0/24 maxlen: 24
193.37.139.0/24 maxlen: 24
193.148.248.0/24 maxlen: 24
193.148.249.0/24 maxlen: 24
193.148.250.0/24 maxlen: 24
193.148.251.0/24 maxlen: 24
2a0c:9a40:1::/48 maxlen: 48
2a0c:9a40:1000::/44 maxlen: 48
2a0c:9a40:1001::/48 maxlen: 48
2a0c:9a40:1002::/48 maxlen: 48
2a0c:9a40:1024::/48 maxlen: 48
2a0c:9a40:1030::/44 maxlen: 48
2a0c:9a40:1034::/48 maxlen: 48
2a0c:9a40:1050::/48 maxlen: 48
2a0c:9a40:1051::/48 maxlen: 48
2a0c:9a40:1054::/48 maxlen: 48
2a0c:9a40:1055::/48 maxlen: 48
2a0c:9a40:1057::/48 maxlen: 48
2a0c:9a40:1058::/48 maxlen: 48
2a0c:9a40:1059::/48 maxlen: 48
2a0c:9a40:1060::/48 maxlen: 48
2a0c:9a40:1070::/44 maxlen: 48
2a0c:9a40:1070::/48 maxlen: 48
2a0c:9a40:1072::/48 maxlen: 48
2a0c:9a40:1074::/48 maxlen: 48
2a0c:9a40:1080::/44 maxlen: 48
2a0c:9a40:1080::/48 maxlen: 48
2a0c:9a40:1090::/44 maxlen: 48
2a0c:9a40:2000::/40 maxlen: 48
2a0c:9a40:2100::/40 maxlen: 48
2a0c:9a40:2200::/40 maxlen: 48
2a0c:9a40:2300::/40 maxlen: 48
2a0c:9a40:2328::/48 maxlen: 48
2a0c:9a40:2400::/40 maxlen: 48
2a0c:9a40:2500::/40 maxlen: 48
2a0c:9a40:2600::/40 maxlen: 48
2a0c:9a40:2700::/40 maxlen: 48
2a0c:9a40:2800::/40 maxlen: 48
2a0c:9a40:2900::/48 maxlen: 48
2a0c:9a40:2a00::/40 maxlen: 40
2a0c:9a40:2b00::/40 maxlen: 48
2a0c:9a40:2c00::/40 maxlen: 48
2a0c:9a40:2d00::/40 maxlen: 48
2a0c:9a40:2e00::/40 maxlen: 48
2a0c:9a40:2f00::/40 maxlen: 48
2a0c:9a40:3000::/36 maxlen: 48
2a0c:9a40:8a90::/48 maxlen: 48
2a0c:9a40:e060::/44 maxlen: 44
2a0c:9a44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:c7:2a:5f:2c:9f:88:6e:67:99:3d:7a:cb:59:77:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 14 14:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20712446d51e3519bd5f39ff3a34474e0817b954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:13:d1:e2:01:a9:b5:cf:6c:c7:cd:f3:77:
a0:49:e9:ed:11:43:ff:c3:1a:d4:86:e3:b3:8c:d0:
b6:5c:0f:0d:22:97:3d:fc:e3:77:64:5b:26:a7:c8:
3e:f7:80:2e:c9:d8:d8:58:16:5e:13:51:5d:c5:f7:
bb:79:a2:4a:3d:f3:33:ad:ca:97:51:1a:fc:b6:73:
97:41:46:94:8c:a6:cc:21:8a:92:c5:71:e4:85:41:
d0:b1:7c:5b:18:30:66:5c:dc:21:68:07:c7:01:99:
24:e7:f8:f6:7e:8b:ab:e9:f8:57:b3:de:57:6f:9e:
78:cc:18:30:4a:9b:79:5d:1e:d7:91:b9:7b:bb:b1:
16:1c:57:f4:1b:d1:ad:83:98:b4:4e:74:b7:62:0c:
34:9c:72:aa:29:2b:2a:91:fc:c4:d7:ae:ff:73:11:
b1:fe:b8:75:e3:c1:b8:4e:85:8b:1e:cb:ae:74:f3:
28:de:27:31:4f:a4:e5:07:d7:87:d2:87:da:e9:0f:
3f:4f:c3:6a:6b:10:d7:15:bd:a8:5b:57:1e:cf:b0:
59:b7:6d:35:b3:6c:05:fc:97:2b:72:53:bc:a1:ed:
29:8e:0e:27:1f:a6:b3:b8:ef:2c:4e:20:82:ec:0d:
85:c0:44:57:7b:95:a1:41:e9:9a:c2:bf:10:af:2b:
8c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:71:24:46:D5:1E:35:19:BD:5F:39:FF:3A:34:47:4E:08:17:B9:54
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/IHEkRtUeNRm9Xzn_OjRHTggXuVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.88.0/23
45.134.91.0/24
143.246.140.0/22
193.37.139.0/24
193.148.248.0/22
IPv6:
2a0c:9a40:1::/48
2a0c:9a40:1000::/44
2a0c:9a40:1024::/48
2a0c:9a40:1030::/44
2a0c:9a40:1050::/47
2a0c:9a40:1054::/47
2a0c:9a40:1057::-2a0c:9a40:1059:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:1060::/48
2a0c:9a40:1070::-2a0c:9a40:109f:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2000::-2a0c:9a40:2900:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:2a00::-2a0c:9a40:3fff:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:8a90::/48
2a0c:9a40:e060::/44
2a0c:9a44::/48
Signature Algorithm: sha256WithRSAEncryption
5e:a3:4e:8d:80:63:ee:8f:5d:5b:34:dd:62:a5:65:13:b0:f6:
b6:7b:33:6f:61:91:0e:26:92:1c:ae:5b:a8:d3:01:af:2e:ae:
50:c5:76:0f:2c:0c:61:34:94:f5:5d:d0:cb:7f:dc:4c:54:6f:
81:a1:91:fb:41:54:dc:33:0d:54:49:59:d4:0d:57:dc:33:d1:
f3:1a:f3:68:1e:30:20:13:66:8c:1c:d2:7f:3b:43:be:00:18:
b4:b9:9a:2f:d0:ab:d0:c6:b7:1f:63:e6:40:23:39:14:77:85:
04:4d:a4:89:ac:78:e4:22:9e:76:16:3c:dd:ef:67:46:d3:51:
37:39:62:4e:3c:c6:82:4c:38:26:93:71:78:e5:f9:bd:03:64:
aa:d7:3c:41:d2:0f:b3:47:91:97:bf:23:50:44:10:c2:21:66:
6c:d3:7d:c1:5a:53:39:e9:a0:47:e2:63:1a:1f:27:dc:9c:1c:
26:2b:02:58:d0:ed:72:2b:fc:ad:aa:49:77:a6:08:f1:5b:63:
25:fd:e3:bd:c8:93:44:f9:88:60:bf:14:7a:9f:7e:18:2c:ee:
07:9f:f9:19:5c:1c:09:81:78:15:69:a4:ab:bf:b1:66:f4:7e:
8b:34:00:e7:63:bc:4a:f4:9e:3a:f1:80:dc:ad:e7:1f:64:7f:
3d:5c:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:56 2026 by rpki-client