Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4NS-X-xqi0yar0aZKvtYI0PiQ3I.roa
File: 4NS-X-xqi0yar0aZKvtYI0PiQ3I.roa (raw, json)
Hash identifier: jks/VHfHQ6z6bSdhGCtaKFynFLunrDh9ACm184z24Hg=
Subject key identifier: E0:D4:BE:5F:EC:6A:8B:4C:9A:AF:46:99:2A:FB:58:23:43:E2:43:72
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019E9327F6FB963ADFC8D9C489B2D9AF3C7A
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4NS-X-xqi0yar0aZKvtYI0PiQ3I.roa
Signing time: Thu 04 Jun 2026 15:02:10 +0000
ROA not before: Thu 04 Jun 2026 15:02:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
95.81.79.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.126.0/24 maxlen: 24
95.81.127.0/24 maxlen: 24
103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.85.114.0/24 maxlen: 24
103.85.115.0/24 maxlen: 24
104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.138.0/24 maxlen: 24
104.128.139.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.24.0/24 maxlen: 24
132.243.25.0/24 maxlen: 24
135.136.176.0/24 maxlen: 24
135.136.177.0/24 maxlen: 24
135.136.186.0/24 maxlen: 24
135.136.187.0/24 maxlen: 24
2a0c:5d00:1002::/48 maxlen: 48
2a0c:5d00:2002::/48 maxlen: 48
2a0c:5d06:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:27:f6:fb:96:3a:df:c8:d9:c4:89:b2:d9:af:3c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 4 15:02:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e0d4be5fec6a8b4c9aaf46992afb582343e24372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:3c:d2:f5:ce:87:f3:4e:45:5d:d5:e5:92:
ae:87:0a:1e:d9:32:f4:53:a4:3c:f5:b4:a6:2b:36:
42:c4:8c:db:ff:c5:19:21:35:a4:66:f9:c5:ad:dd:
d6:4a:9f:70:31:c5:e2:1b:9a:dd:38:e2:64:ac:52:
c7:d8:87:9b:ba:68:de:ba:18:03:45:80:85:71:6c:
3c:c6:0f:7b:b0:63:d0:9e:62:4b:39:21:88:a9:3c:
f2:13:bb:11:aa:0d:04:a6:26:6a:fd:64:c0:e9:58:
5f:e1:10:85:50:15:47:52:78:7a:b9:b3:da:63:6b:
a5:4b:40:ed:65:5a:0b:84:c6:63:b3:05:df:b6:f0:
bc:39:ae:63:e2:12:2f:86:89:82:fa:00:d8:7f:af:
0e:79:9d:7c:cc:f5:77:6f:e6:9f:01:18:fe:2d:d0:
2f:e1:2d:d8:e9:ab:3e:8f:67:6f:b6:37:01:05:93:
ef:94:09:d4:58:e6:92:ab:25:69:65:6a:8b:07:71:
ae:5c:47:5f:33:57:13:37:7d:c0:d4:2d:45:5e:cf:
b2:8b:53:eb:c2:f6:3f:b2:f5:c8:0f:ec:62:f9:6f:
57:e5:51:6f:63:0d:2c:e1:72:18:b0:49:cb:65:7e:
fe:d2:ec:7d:ce:85:1e:be:73:60:42:8e:b0:4c:86:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D4:BE:5F:EC:6A:8B:4C:9A:AF:46:99:2A:FB:58:23:43:E2:43:72
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/4NS-X-xqi0yar0aZKvtYI0PiQ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.86.0/24
95.81.79.0/24
95.81.113.0/24
95.81.126.0/23
103.71.22.0/23
103.85.114.0/23
104.128.132.0-104.128.143.255
109.69.61.0/24
132.243.24.0/23
135.136.176.0/23
135.136.186.0/23
IPv6:
2a0c:5d00:1002::/48
2a0c:5d00:2002::/48
2a0c:5d06:2002::/48
Signature Algorithm: sha256WithRSAEncryption
09:1c:49:63:2c:d7:9e:8e:af:09:73:9b:8b:a2:0c:17:9d:bc:
37:8b:07:30:05:30:39:10:3f:b5:f1:32:94:45:59:cc:60:57:
79:5e:0d:25:c5:17:35:04:3c:99:f1:2f:42:2a:bb:fc:75:07:
83:44:90:c6:2d:ea:8e:a1:1c:7e:ee:68:ba:5c:8e:81:72:21:
d2:24:e6:ed:1a:a7:59:ff:97:b4:6a:2c:f9:04:01:db:bd:86:
9a:9c:ed:dc:a1:ec:75:83:f4:59:b0:6f:8a:a9:7c:d1:f6:a2:
a0:92:c2:3a:35:db:60:5a:f8:aa:fa:8a:f2:cc:88:99:dd:5a:
4b:9b:88:96:46:9f:6d:f8:6c:dc:15:34:4e:74:80:92:92:a7:
0c:1a:5b:a0:c5:b7:ed:72:1e:74:a1:1c:0e:f7:dc:92:72:7c:
43:fc:e4:2d:3b:78:79:08:ec:c0:85:a6:27:88:27:c1:ba:f1:
bb:0f:e9:6f:1c:01:7a:db:40:f8:67:ff:9f:88:66:e2:ce:60:
75:33:bd:28:05:ba:b0:ca:91:8b:74:5f:fa:1c:c4:03:ae:aa:
aa:9e:47:12:ad:45:3b:c0:f6:34:b2:6e:e3:d9:b7:09:24:88:
db:bb:42:f6:b6:8f:6f:46:59:7f:95:61:5e:ba:11:8b:36:ee:
b3:0e:93:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:34 2026 by rpki-client