Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/4l6THy1wemBvF-vkg9NB9ilXQFI.roa
File: 4l6THy1wemBvF-vkg9NB9ilXQFI.roa (raw, json)
Hash identifier: CgWmcuwwtTy/GlBt62rl51b30noc89stqZhlngGfKlI=
Subject key identifier: E2:5E:93:1F:2D:70:7A:60:6F:17:EB:E4:83:D3:41:F6:29:57:40:52
Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial: 01A08F7160CABC46690685F076A9BDEDFB5C
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/4l6THy1wemBvF-vkg9NB9ilXQFI.roa
Signing time: Fri 11 Sep 2026 07:49:27 +0000
ROA not before: Fri 11 Sep 2026 07:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200780
IP address blocks: 5.42.200.0/24 maxlen: 24
45.9.104.0/22 maxlen: 24
45.85.132.0/22 maxlen: 24
45.85.133.0/24 maxlen: 24
45.85.134.0/23 maxlen: 23
45.155.228.0/22 maxlen: 24
45.156.188.0/22 maxlen: 24
46.19.104.0/21 maxlen: 24
77.236.98.0/23 maxlen: 24
88.218.32.0/23 maxlen: 24
89.40.220.0/23 maxlen: 24
91.227.36.0/22 maxlen: 24
91.233.66.0/24 maxlen: 24
91.234.104.0/22 maxlen: 24
93.177.69.0/24 maxlen: 24
93.177.70.0/23 maxlen: 24
95.178.108.0/22 maxlen: 24
185.40.102.0/23 maxlen: 24
185.62.224.0/22 maxlen: 24
185.73.204.0/22 maxlen: 24
185.73.204.0/24 maxlen: 24
185.144.24.0/22 maxlen: 24
185.217.200.0/22 maxlen: 24
194.11.255.0/24 maxlen: 24
194.13.1.0/24 maxlen: 24
194.13.64.0/24 maxlen: 24
194.13.67.0/24 maxlen: 24
194.88.112.0/22 maxlen: 22
194.106.208.0/23 maxlen: 24
195.35.96.0/24 maxlen: 24
195.133.148.0/22 maxlen: 24
2a05:46c0::/29 maxlen: 29
2a10:780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:71:60:ca:bc:46:69:06:85:f0:76:a9:bd:ed:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Validity
Not Before: Sep 11 07:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e25e931f2d707a606f17ebe483d341f629574052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:37:ea:f3:61:41:2e:8f:d7:e2:6a:01:8c:
6c:3f:5f:b5:49:0d:a0:5a:a6:04:8a:cc:f7:5a:d3:
44:b4:b2:f1:54:f3:9d:2b:c5:b1:74:2c:95:90:74:
52:a2:9e:7a:5a:e7:b0:86:e6:9e:6d:03:f3:54:3d:
95:bf:b0:84:1c:66:4f:7b:0c:7b:b2:f2:1f:59:16:
c5:0f:8c:a3:4a:fe:e3:f5:21:66:7b:23:e8:91:4f:
89:d5:9b:17:b5:a6:05:44:9a:bf:ff:29:40:73:fd:
ce:04:f5:66:0f:b5:5f:89:7d:ef:25:d9:8d:c4:e9:
a3:68:5e:fa:10:30:9b:38:19:c0:dd:c8:2d:7f:de:
e0:d5:cc:02:31:bf:ea:f2:c8:ba:5f:fc:33:2e:b6:
aa:04:05:45:66:a3:6e:88:9e:2e:0b:ee:d0:ba:09:
a3:56:f0:2f:35:ee:91:97:74:10:c7:89:a7:18:38:
62:7f:f4:1b:da:ec:47:a1:0f:88:12:9d:a8:90:fe:
63:f6:a6:f6:39:52:94:4d:40:98:ba:7f:5c:d6:d6:
36:8a:ec:00:0d:2d:d0:60:32:5a:9f:7b:1f:d7:b7:
89:7f:25:77:3b:04:ff:99:4c:12:22:d4:92:ec:da:
0b:ae:6d:b9:3a:d8:06:0a:f3:a1:42:34:7f:ea:47:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:5E:93:1F:2D:70:7A:60:6F:17:EB:E4:83:D3:41:F6:29:57:40:52
X509v3 Authority Key Identifier:
keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/4l6THy1wemBvF-vkg9NB9ilXQFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.200.0/24
45.9.104.0/22
45.85.132.0/22
45.155.228.0/22
45.156.188.0/22
46.19.104.0/21
77.236.98.0/23
88.218.32.0/23
89.40.220.0/23
91.227.36.0/22
91.233.66.0/24
91.234.104.0/22
93.177.69.0-93.177.71.255
95.178.108.0/22
185.40.102.0/23
185.62.224.0/22
185.73.204.0/22
185.144.24.0/22
185.217.200.0/22
194.11.255.0/24
194.13.1.0/24
194.13.64.0/24
194.13.67.0/24
194.88.112.0/22
194.106.208.0/23
195.35.96.0/24
195.133.148.0/22
IPv6:
2a05:46c0::/29
2a10:780::/32
Signature Algorithm: sha256WithRSAEncryption
59:39:d5:c4:69:68:41:20:46:ac:cf:7e:40:8d:57:0c:e9:27:
c4:ad:b2:c1:04:d1:2f:74:6d:46:8f:77:cc:96:8b:a1:bd:28:
8b:c6:fd:41:37:ed:93:2d:11:7e:17:a8:70:b8:ed:11:d2:ab:
5f:7e:7e:2c:ea:83:c0:87:dc:56:99:92:12:5e:01:61:34:05:
95:5b:da:d2:65:6a:b5:bd:4b:01:19:40:6b:5d:a5:ce:24:03:
0e:bd:64:6a:df:1f:1e:d7:ac:84:74:96:33:f8:02:aa:15:9f:
f7:76:e9:3d:f6:9b:52:a3:7d:cc:1f:16:98:12:e8:4b:c5:af:
96:7d:fc:86:4a:9f:23:79:88:f8:e8:9a:56:d3:32:ee:b8:c5:
ed:dc:80:0f:3c:5b:b1:b4:ce:0e:83:7d:a3:a1:52:38:2b:a7:
74:1d:bc:94:e9:8f:1c:2f:a8:f4:f3:01:0d:b0:00:f6:e9:db:
80:e6:90:90:10:61:fc:25:eb:a0:8f:22:cf:2f:45:c6:ba:a4:
28:09:7e:81:c3:ab:3c:27:8e:6f:a2:65:ea:3f:76:8f:b1:55:
22:b1:9a:99:4b:51:3b:2e:7e:92:01:39:0f:3e:2d:57:c3:94:
f6:99:ee:95:07:bf:8a:bd:fa:5e:a9:5d:cb:33:29:17:a5:9c:
da:99:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:39:31 2026 by rpki-client