Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/b8J8cLT6b0T-B8fcEbW1GzzqnT8.roa
File: b8J8cLT6b0T-B8fcEbW1GzzqnT8.roa (raw, json)
Hash identifier: daIMw1YQHYuGbVnCwHmeVVuuxGmFwXQcpFT4nghMIks=
Subject key identifier: 6F:C2:7C:70:B4:FA:6F:44:FE:07:C7:DC:11:B5:B5:1B:3C:EA:9D:3F
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 019F7195403647407CB7FF4586C4011954AC
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/b8J8cLT6b0T-B8fcEbW1GzzqnT8.roa
Signing time: Fri 17 Jul 2026 19:37:14 +0000
ROA not before: Fri 17 Jul 2026 19:37:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47952
IP address blocks: 45.136.106.0/24 maxlen: 24
45.139.220.0/24 maxlen: 24
45.139.221.0/24 maxlen: 24
45.139.223.0/24 maxlen: 24
45.145.21.0/24 maxlen: 24
45.145.22.0/24 maxlen: 24
45.145.23.0/24 maxlen: 24
81.90.176.0/24 maxlen: 24
81.90.177.0/24 maxlen: 24
81.90.178.0/24 maxlen: 24
81.90.179.0/24 maxlen: 24
81.200.140.0/24 maxlen: 24
81.200.141.0/24 maxlen: 24
81.200.142.0/24 maxlen: 24
81.200.143.0/24 maxlen: 24
91.106.216.0/24 maxlen: 24
91.106.217.0/24 maxlen: 24
91.106.218.0/24 maxlen: 24
91.106.219.0/24 maxlen: 24
91.194.52.0/24 maxlen: 24
91.194.54.0/24 maxlen: 24
153.56.138.0/24 maxlen: 24
185.82.220.0/24 maxlen: 24
185.82.221.0/24 maxlen: 24
185.82.222.0/24 maxlen: 24
185.82.223.0/24 maxlen: 24
185.126.177.0/24 maxlen: 24
185.126.178.0/24 maxlen: 24
185.126.179.0/24 maxlen: 24
185.201.212.0/24 maxlen: 24
185.201.213.0/24 maxlen: 24
185.201.214.0/24 maxlen: 24
185.201.215.0/24 maxlen: 24
193.35.204.0/24 maxlen: 24
193.35.205.0/24 maxlen: 24
193.35.206.0/24 maxlen: 24
193.35.207.0/24 maxlen: 24
193.138.172.0/24 maxlen: 24
193.138.173.0/24 maxlen: 24
193.138.174.0/24 maxlen: 24
193.138.175.0/24 maxlen: 24
194.56.184.0/24 maxlen: 24
194.56.185.0/24 maxlen: 24
194.56.186.0/24 maxlen: 24
194.56.187.0/24 maxlen: 24
194.127.116.0/24 maxlen: 24
194.127.117.0/24 maxlen: 24
194.127.118.0/24 maxlen: 24
194.127.119.0/24 maxlen: 24
2a0a:c4c0::/48 maxlen: 48
2a0a:c4c0:1::/48 maxlen: 48
2a0a:c4c0:2::/48 maxlen: 48
2a0a:c4c0:3::/48 maxlen: 48
2a0a:c4c0:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:95:40:36:47:40:7c:b7:ff:45:86:c4:01:19:54:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Jul 17 19:37:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fc27c70b4fa6f44fe07c7dc11b5b51b3cea9d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:bb:5f:b4:2e:ca:0b:c1:2d:2a:ff:f9:f4:
15:1d:b3:ca:55:db:30:4b:b2:44:b3:99:57:88:f4:
0b:df:7e:e8:7b:da:89:5f:48:49:05:d7:31:40:1a:
06:01:e5:1e:6b:63:6d:8e:a1:8a:0e:3c:3e:4b:ad:
46:c4:fc:72:74:72:3d:dc:8b:d1:42:54:8f:5d:4d:
8b:5e:ce:07:18:07:0c:51:ce:ac:ff:59:79:9f:97:
51:49:9b:14:84:2d:aa:a8:d8:6d:96:a4:d9:4d:67:
a1:4b:34:96:47:84:f5:2d:0d:76:7e:7e:91:4d:b4:
e9:7d:61:b4:cf:da:69:fd:7f:6b:3a:b9:06:c4:44:
9a:a3:2c:5e:87:df:ad:b7:ec:66:f9:c0:49:88:cf:
61:8b:92:ce:06:9b:01:bf:5f:69:b5:fb:fe:f9:f6:
2b:34:ac:53:d7:04:f9:1f:7e:0d:a7:ae:64:80:19:
3f:e7:9f:df:cc:0c:9e:bb:2a:52:ea:bb:15:5c:3e:
e8:76:f6:69:58:cf:06:4e:be:12:9f:ae:47:0a:1a:
43:b7:91:9f:e6:35:62:6b:0f:01:10:21:29:50:a6:
30:6b:70:08:09:3a:d5:4e:59:b8:4e:e2:56:11:ad:
81:75:1f:32:28:93:24:55:d0:6d:dd:21:2a:49:62:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C2:7C:70:B4:FA:6F:44:FE:07:C7:DC:11:B5:B5:1B:3C:EA:9D:3F
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/b8J8cLT6b0T-B8fcEbW1GzzqnT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.106.0/24
45.139.220.0/23
45.139.223.0/24
45.145.21.0-45.145.23.255
81.90.176.0/22
81.200.140.0/22
91.106.216.0/22
91.194.52.0/24
91.194.54.0/24
153.56.138.0/24
185.82.220.0/22
185.126.177.0-185.126.179.255
185.201.212.0/22
193.35.204.0/22
193.138.172.0/22
194.56.184.0/22
194.127.116.0/22
IPv6:
2a0a:c4c0::/46
2a0a:c4c0:100::/48
Signature Algorithm: sha256WithRSAEncryption
1f:90:03:d9:3c:b2:45:2b:78:5a:08:32:49:4b:b1:e7:94:8a:
a8:9c:ac:c9:7f:ca:40:3a:4d:f5:74:70:f2:88:df:03:74:67:
d0:c8:b1:65:1c:1a:15:9e:fa:b7:80:70:af:83:c7:9f:9b:ee:
a8:0f:db:d4:79:4c:6f:5c:ca:e5:27:a0:a3:8c:3d:35:1b:95:
b7:80:82:fb:06:88:30:92:ca:82:ec:18:86:c0:37:62:35:9a:
0e:98:a5:eb:75:1c:14:36:37:91:19:4d:88:f7:80:59:47:30:
9b:33:b6:3a:f4:f2:ac:4d:56:22:a8:e4:17:95:08:0c:52:9f:
e2:9f:30:e8:7f:f3:0f:e9:e9:2b:0d:bf:40:ba:af:8a:ce:09:
8d:96:34:bc:8f:f7:15:1c:db:8b:c1:5a:ba:02:55:0b:71:67:
d9:19:0a:28:2d:60:41:fd:f1:e0:3b:a8:87:98:bd:7c:44:8c:
dd:32:df:cd:1b:c0:7d:17:af:34:81:21:1a:ea:a6:32:c6:3f:
eb:82:89:6c:83:97:05:c6:ae:b5:8c:85:4a:99:b8:e2:47:63:
44:be:67:75:de:4e:50:e5:6a:0f:eb:dc:e3:a7:c4:bf:fc:60:
56:2e:25:2f:b5:22:33:30:3a:14:78:54:75:02:7c:f9:cc:74:
e4:ed:0c:57
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZ9xlUA2R0B8t/9FhsQBGVSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzBiNzNiNTFjYmM1MzgwZGQ0YWRiM2Q1YWFmZjRkN2Ez
MzRjNWUwHhcNMjYwNzE3MTkzNzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmMyN2M3MGI0ZmE2ZjQ0ZmUwN2M3ZGMxMWI1YjUxYjNjZWE5ZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsO7X7QuygvBLSr/+fQVHbPKVdsw
S7JEs5lXiPQL337oe9qJX0hJBdcxQBoGAeUea2NtjqGKDjw+S61GxPxydHI93IvR
QlSPXU2LXs4HGAcMUc6s/1l5n5dRSZsUhC2qqNhtlqTZTWehSzSWR4T1LQ12fn6R
TbTpfWG0z9pp/X9rOrkGxESaoyxeh9+tt+xm+cBJiM9hi5LOBpsBv19ptfv++fYr
NKxT1wT5H34Np65kgBk/55/fzAyeuypS6rsVXD7odvZpWM8GTr4Sn65HChpDt5Gf
5jViaw8BECEpUKYwa3AICTrVTlm4TuJWEa2BdR8yKJMkVdBt3SEqSWLELwIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFG/CfHC0+m9E/gfH3BG1tRs86p0/MB8GA1UdIwQY
MBaAFLYwtztRy8U4DdSts9Wq/016M0xeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQt
MGQ0OGU2ODk1ZjEyLzEvYjhKOGNMVDZiMFQtQjhmY0ViVzFHenpxblQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80NzQ4YzctY2Q5ZS00MDFlLWE4YTQtMGQ0OGU2ODk1ZjEy
LzEvdGpDM08xSEx4VGdOMUsyejFhcl9UWG96VEY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGrBggrBgEFBQcBBwEB/wSBmzCBmDB8BAIAATB2AwQALYhq
AwQBLYvcAwQALYvfMAwDBAAtkRUDBAMtkRADBAJRWrADBAJRyIwDBAJbatgDBABb
wjQDBABbwjYDBACZOIoDBAK5UtwwDAMEALl+sQMEArl+sAMEArnJ1AMEAsEjzAME
AsGKrAMEAsI4uAMEAsJ/dDAYBAIAAjASAwcCKgrEwAAAAwcAKgrEwAEAMA0GCSqG
SIb3DQEBCwUAA4IBAQAfkAPZPLJFK3haCDJJS7HnlIqonKzJf8pAOk31dHDyiN8D
dGfQyLFlHBoVnvq3gHCvg8efm+6oD9vUeUxvXMrlJ6CjjD01G5W3gIL7BogwksqC
7BiGwDdiNZoOmKXrdRwUNjeRGU2I94BZRzCbM7Y69PKsTVYiqOQXlQgMUp/inzDo
f/MP6ekrDb9Auq+KzgmNljS8j/cVHNuLwVq6AlULcWfZGQooLWBB/fHgO6iHmL18
RIzdMt/NG8B9F680gSEa6qYyxj/rgolsg5cFxq61jIVKmbjiR2NEvmd13k5Q5WoP
69zjp8S//GBWLiUvtSIzMDoUeFR1Anz5zHTk7QxX
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:05:31 2026 by rpki-client