Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/kDoTJ2kxAhnzYWMzUp_oWtM0ugw.roa
File: kDoTJ2kxAhnzYWMzUp_oWtM0ugw.roa (raw, json)
Hash identifier: q9CHVChSRMKwvwVNLEbnvgyQfICpHZ0MxpgYd+c4UvU=
Subject key identifier: 90:3A:13:27:69:31:02:19:F3:61:63:33:52:9F:E8:5A:D3:34:BA:0C
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 019EABABEC4C20CEFA1D74E65A5F90C19CC3
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/kDoTJ2kxAhnzYWMzUp_oWtM0ugw.roa
Signing time: Tue 09 Jun 2026 09:17:11 +0000
ROA not before: Tue 09 Jun 2026 09:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29256
IP address blocks: 46.57.128.0/21 maxlen: 21
46.57.136.0/21 maxlen: 21
46.57.144.0/20 maxlen: 20
46.57.144.0/21 maxlen: 21
46.57.144.0/22 maxlen: 22
46.57.148.0/22 maxlen: 22
46.57.152.0/21 maxlen: 21
46.57.160.0/20 maxlen: 20
46.57.160.0/21 maxlen: 21
46.57.168.0/21 maxlen: 21
46.57.168.0/22 maxlen: 22
46.57.172.0/22 maxlen: 22
46.57.176.0/20 maxlen: 20
46.57.176.0/21 maxlen: 21
46.57.184.0/21 maxlen: 21
46.57.192.0/20 maxlen: 20
46.57.192.0/21 maxlen: 21
46.57.200.0/21 maxlen: 21
46.57.208.0/20 maxlen: 20
46.57.208.0/21 maxlen: 21
46.57.216.0/21 maxlen: 21
46.57.224.0/20 maxlen: 20
46.57.224.0/21 maxlen: 21
46.57.232.0/21 maxlen: 21
46.57.240.0/20 maxlen: 20
46.57.240.0/21 maxlen: 21
46.57.248.0/21 maxlen: 21
46.213.0.0/21 maxlen: 21
46.213.0.0/22 maxlen: 22
46.213.4.0/22 maxlen: 22
46.213.8.0/21 maxlen: 21
46.213.16.0/21 maxlen: 21
46.213.24.0/21 maxlen: 21
46.213.32.0/21 maxlen: 21
46.213.40.0/21 maxlen: 21
46.213.48.0/21 maxlen: 21
46.213.56.0/21 maxlen: 21
46.213.64.0/21 maxlen: 21
46.213.72.0/21 maxlen: 21
46.213.80.0/21 maxlen: 21
46.213.88.0/21 maxlen: 21
46.213.96.0/21 maxlen: 21
46.213.104.0/21 maxlen: 21
46.213.104.0/22 maxlen: 22
46.213.108.0/22 maxlen: 22
46.213.112.0/21 maxlen: 21
46.213.112.0/22 maxlen: 22
46.213.116.0/22 maxlen: 22
46.213.120.0/21 maxlen: 21
46.213.120.0/22 maxlen: 22
46.213.124.0/22 maxlen: 22
46.213.128.0/21 maxlen: 21
46.213.136.0/21 maxlen: 21
46.213.144.0/21 maxlen: 21
46.213.152.0/21 maxlen: 21
46.213.160.0/21 maxlen: 21
46.213.168.0/21 maxlen: 21
46.213.168.0/22 maxlen: 22
46.213.172.0/22 maxlen: 22
46.213.176.0/21 maxlen: 21
46.213.184.0/21 maxlen: 21
46.213.184.0/22 maxlen: 22
46.213.188.0/22 maxlen: 22
46.213.192.0/21 maxlen: 21
46.213.200.0/21 maxlen: 21
46.213.208.0/21 maxlen: 21
46.213.216.0/21 maxlen: 21
46.213.224.0/21 maxlen: 21
46.213.224.0/22 maxlen: 22
46.213.228.0/22 maxlen: 22
46.213.232.0/21 maxlen: 21
46.213.240.0/21 maxlen: 21
46.213.248.0/21 maxlen: 21
94.252.128.0/22 maxlen: 22
94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
94.252.144.0/20 maxlen: 20
94.252.144.0/21 maxlen: 21
94.252.152.0/21 maxlen: 21
94.252.160.0/20 maxlen: 20
94.252.176.0/22 maxlen: 22
94.252.180.0/24 maxlen: 24
94.252.181.0/24 maxlen: 24
94.252.182.0/24 maxlen: 24
94.252.183.0/24 maxlen: 24
94.252.184.0/24 maxlen: 24
94.252.185.0/24 maxlen: 24
94.252.186.0/24 maxlen: 24
94.252.187.0/24 maxlen: 24
94.252.188.0/24 maxlen: 24
94.252.189.0/24 maxlen: 24
94.252.190.0/24 maxlen: 24
94.252.191.0/24 maxlen: 24
94.252.192.0/21 maxlen: 21
94.252.200.0/21 maxlen: 21
94.252.208.0/21 maxlen: 21
94.252.216.0/21 maxlen: 21
94.252.224.0/21 maxlen: 21
94.252.240.0/21 maxlen: 21
178.52.0.0/20 maxlen: 20
178.52.0.0/21 maxlen: 21
178.52.0.0/22 maxlen: 22
178.52.4.0/22 maxlen: 22
178.52.8.0/21 maxlen: 21
178.52.8.0/22 maxlen: 22
178.52.12.0/22 maxlen: 22
178.52.16.0/20 maxlen: 20
178.52.16.0/21 maxlen: 21
178.52.24.0/21 maxlen: 21
178.52.32.0/20 maxlen: 20
178.52.32.0/21 maxlen: 21
178.52.40.0/21 maxlen: 21
178.52.48.0/20 maxlen: 20
178.52.48.0/21 maxlen: 21
178.52.56.0/21 maxlen: 21
178.52.64.0/20 maxlen: 20
178.52.64.0/21 maxlen: 21
178.52.72.0/21 maxlen: 21
178.52.80.0/20 maxlen: 20
178.52.80.0/21 maxlen: 21
178.52.88.0/21 maxlen: 21
178.52.96.0/20 maxlen: 20
178.52.96.0/21 maxlen: 21
178.52.104.0/21 maxlen: 21
178.52.104.0/22 maxlen: 22
178.52.108.0/22 maxlen: 22
178.52.112.0/20 maxlen: 20
178.52.112.0/21 maxlen: 21
178.52.120.0/21 maxlen: 21
178.52.128.0/20 maxlen: 20
178.52.128.0/21 maxlen: 21
178.52.136.0/21 maxlen: 21
178.52.144.0/20 maxlen: 20
178.52.144.0/21 maxlen: 21
178.52.152.0/21 maxlen: 21
178.52.160.0/20 maxlen: 20
178.52.160.0/21 maxlen: 21
178.52.168.0/21 maxlen: 21
178.52.176.0/20 maxlen: 20
178.52.176.0/21 maxlen: 21
178.52.176.0/22 maxlen: 22
178.52.180.0/22 maxlen: 22
178.52.184.0/21 maxlen: 21
178.52.192.0/20 maxlen: 20
178.52.192.0/21 maxlen: 21
178.52.200.0/21 maxlen: 21
178.52.208.0/20 maxlen: 20
178.52.208.0/21 maxlen: 21
178.52.216.0/21 maxlen: 21
178.52.224.0/20 maxlen: 20
178.52.224.0/21 maxlen: 21
178.52.232.0/21 maxlen: 21
178.52.240.0/20 maxlen: 20
178.52.240.0/21 maxlen: 21
178.52.248.0/21 maxlen: 21
178.52.248.0/22 maxlen: 22
178.52.252.0/22 maxlen: 22
185.136.144.0/22 maxlen: 22
188.139.128.0/20 maxlen: 20
188.139.128.0/21 maxlen: 21
188.139.136.0/21 maxlen: 21
188.139.144.0/20 maxlen: 20
188.139.144.0/21 maxlen: 21
188.139.152.0/21 maxlen: 21
188.139.160.0/20 maxlen: 20
188.139.160.0/21 maxlen: 21
188.139.168.0/21 maxlen: 21
188.139.176.0/20 maxlen: 20
188.139.176.0/21 maxlen: 21
188.139.184.0/21 maxlen: 21
188.139.192.0/20 maxlen: 20
188.139.192.0/21 maxlen: 21
188.139.200.0/21 maxlen: 21
188.139.208.0/20 maxlen: 20
188.139.208.0/21 maxlen: 21
188.139.216.0/21 maxlen: 21
188.139.224.0/20 maxlen: 20
188.139.224.0/21 maxlen: 21
188.139.232.0/21 maxlen: 21
188.139.240.0/20 maxlen: 20
188.139.240.0/21 maxlen: 21
188.139.248.0/21 maxlen: 21
2a00:b800::/32 maxlen: 32
2a00:b800:3000::/55 maxlen: 55
2a00:b800:3000:200::/55 maxlen: 55
2a00:b800:3000:400::/55 maxlen: 55
2a00:b800:3000:600::/55 maxlen: 55
2a00:b800:3200::/55 maxlen: 55
2a00:b800:3200:200::/55 maxlen: 55
2a00:b800:3200:400::/55 maxlen: 55
2a00:b800:3200:600::/55 maxlen: 55
2a00:b800:3400::/55 maxlen: 55
2a00:b800:3400:200::/55 maxlen: 55
2a00:b800:3400:400::/55 maxlen: 55
2a00:b800:3400:600::/55 maxlen: 55
2a00:b800:3600::/55 maxlen: 55
2a00:b800:3600:200::/55 maxlen: 55
2a00:b800:3600:400::/55 maxlen: 55
2a00:b800:3600:600::/55 maxlen: 55
2a00:b800:3a00::/55 maxlen: 55
2a00:b800:3a00:200::/55 maxlen: 55
2a00:b800:3a00:400::/55 maxlen: 55
2a00:b800:3a00:600::/55 maxlen: 55
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:ab:ec:4c:20:ce:fa:1d:74:e6:5a:5f:90:c1:9c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Jun 9 09:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=903a132769310219f3616333529fe85ad334ba0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:47:5f:cc:aa:c2:2b:d4:ac:42:00:77:09:94:
81:ac:6c:d2:43:40:f4:a5:f1:8c:85:1b:c9:c1:d2:
79:e7:4d:29:1e:23:b1:44:73:f0:10:9a:a3:d1:de:
c5:fa:87:02:53:ea:c7:bb:b1:5c:44:12:81:18:df:
b2:a4:2c:ab:96:03:bb:dc:70:11:b5:83:3f:49:60:
9c:f1:a8:dc:65:3c:48:d1:fe:1a:51:89:08:d6:df:
4b:ef:ca:1c:04:cc:90:0a:e8:46:70:b0:df:77:92:
80:82:be:43:d6:1a:f9:b5:e6:1e:59:34:29:2b:1e:
84:05:12:e3:d5:2b:4e:6d:b2:7c:9d:36:54:da:f8:
07:12:d1:04:59:86:b2:4a:fb:d7:f2:24:95:bf:00:
85:12:51:b3:b3:e5:f8:d7:70:e6:e7:72:b4:47:71:
e7:9c:41:fb:51:ca:f9:16:38:1c:77:07:c5:8c:b5:
dc:cc:44:98:9e:0b:7d:02:59:79:33:d6:e6:ce:b5:
15:6e:fe:d3:c5:6d:5e:f6:1b:00:1b:a3:56:54:f2:
81:d9:e5:97:20:19:a3:4e:fe:a6:aa:86:7c:4b:73:
cf:ce:58:03:c2:7d:32:2e:d9:b9:60:0e:9a:44:a4:
95:aa:61:5c:6e:74:96:87:da:f7:bf:c5:67:8a:8f:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3A:13:27:69:31:02:19:F3:61:63:33:52:9F:E8:5A:D3:34:BA:0C
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/kDoTJ2kxAhnzYWMzUp_oWtM0ugw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.57.128.0/17
46.213.0.0/16
94.252.128.0-94.252.231.255
94.252.240.0/21
178.52.0.0/16
185.136.144.0/22
188.139.128.0/17
IPv6:
2a00:b800::/32
Signature Algorithm: sha256WithRSAEncryption
48:48:21:53:eb:f0:d8:d6:9a:f3:5d:e0:79:29:ef:35:ed:ba:
91:57:72:f0:2c:5d:70:14:b8:1d:96:3a:70:b4:85:2f:3b:b2:
8b:cb:4b:a3:3b:88:5b:91:da:fe:71:9d:7b:6b:7c:c5:a5:6c:
5d:5a:ba:84:ec:46:fb:76:4e:ab:0c:14:b5:a4:fb:ff:d6:ec:
63:4d:fe:d7:36:3a:5a:13:41:73:df:f5:e3:20:2b:bb:ca:95:
9f:98:b8:52:ce:98:a8:4c:61:21:18:c2:7f:9f:da:23:aa:0f:
43:23:2d:0e:61:ea:f8:d4:87:ed:ed:bd:e4:e1:3b:27:5a:9f:
36:da:7c:9a:40:5c:cc:2a:a5:b0:5e:04:f5:75:5e:5a:69:10:
d6:00:f3:3f:c7:7a:dd:a9:e4:59:5a:03:69:df:04:0e:98:b7:
9e:8a:d2:60:13:e9:cb:c1:d6:9a:33:0d:08:88:eb:f0:b0:5f:
c6:05:6b:fb:07:61:be:eb:c9:23:65:97:ee:cd:f6:8f:8d:e4:
d4:bc:35:7f:46:85:55:7a:60:50:cd:96:44:c8:50:9b:31:b8:
41:04:db:07:35:d5:68:c3:73:20:1a:88:54:ca:9f:20:69:a7:
02:0d:16:0a:7a:5f:1a:3d:b6:be:90:63:18:67:bc:4c:07:88:
fd:d7:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:37 2026 by rpki-client