Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/7KbLzKeoe6vvbjRoqRzl0-cHvQw.roa
File: 7KbLzKeoe6vvbjRoqRzl0-cHvQw.roa (raw, json)
Hash identifier: R2i+C7HKqrNiFbWnvFIXb0pYvq+ySmOB3Gkx7AyANgA=
Subject key identifier: EC:A6:CB:CC:A7:A8:7B:AB:EF:6E:34:68:A9:1C:E5:D3:E7:07:BD:0C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019F6736B612F49F16FD30F718B8995E275D
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/7KbLzKeoe6vvbjRoqRzl0-cHvQw.roa
Signing time: Wed 15 Jul 2026 19:17:46 +0000
ROA not before: Wed 15 Jul 2026 19:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.13.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
104.128.131.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.20.0/24 maxlen: 24
132.243.21.0/24 maxlen: 24
132.243.22.0/24 maxlen: 24
132.243.23.0/24 maxlen: 24
135.136.181.0/24 maxlen: 24
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.128.0/23 maxlen: 23
157.228.128.0/24 maxlen: 24
157.228.129.0/24 maxlen: 24
2a0c:5d00:ff06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:36:b6:12:f4:9f:16:fd:30:f7:18:b8:99:5e:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 15 19:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eca6cbcca7a87babef6e3468a91ce5d3e707bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:72:77:7e:ec:82:10:21:b5:54:cd:ff:8f:
ef:66:52:81:a6:d3:ef:df:ce:4b:af:fb:10:5e:4a:
ad:11:ec:05:bb:be:3e:df:d6:70:f8:69:5b:a8:fa:
42:b0:d0:a8:eb:8c:83:99:64:a5:61:a1:44:7a:d1:
87:df:de:41:1c:c3:25:09:43:08:09:55:e4:7c:f3:
47:bc:6a:50:f8:fb:0e:6c:ef:62:af:70:56:30:38:
84:1c:d0:2f:1e:fb:18:56:8d:f1:dc:16:ce:e1:9c:
6a:5d:78:f1:4b:1b:7a:cf:a4:c5:ce:28:56:65:02:
90:da:91:e0:e5:18:0a:a5:5a:00:13:6e:48:3d:f8:
56:f0:6d:a1:4c:59:40:58:fa:31:10:6a:c6:23:4d:
c5:34:c8:61:d7:c1:a8:c3:f2:8a:21:df:bf:5a:74:
5a:83:c6:5a:86:7b:7d:29:b0:60:5b:a9:82:ad:50:
dc:ff:5d:63:a7:79:76:28:89:66:1f:b1:6b:d0:9c:
03:62:14:47:fb:e7:ba:24:81:f3:ab:3b:03:a7:21:
85:04:52:7d:fe:af:27:bc:18:b1:0c:2e:fd:38:44:
61:33:2e:66:90:44:b5:bd:61:44:47:05:57:67:a9:
29:53:a0:35:7d:36:9b:2e:29:db:d3:e9:db:80:28:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A6:CB:CC:A7:A8:7B:AB:EF:6E:34:68:A9:1C:E5:D3:E7:07:BD:0C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/7KbLzKeoe6vvbjRoqRzl0-cHvQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/23
95.81.93.0/24
95.81.119.0-95.81.120.255
103.85.112.0/23
104.128.131.0/24
104.128.142.0/23
109.69.61.0/24
132.243.20.0/22
135.136.181.0-135.136.183.255
135.136.189.0/24
157.228.128.0/23
IPv6:
2a0c:5d00:ff06::/48
Signature Algorithm: sha256WithRSAEncryption
99:df:92:0b:82:29:77:58:29:81:16:8e:4f:29:18:66:98:29:
57:26:8f:91:1b:7d:7c:00:4f:10:f1:20:66:a1:ac:4f:a6:aa:
b9:ae:26:a5:8c:74:6e:8f:e4:ff:d3:9f:53:28:9c:93:75:94:
17:f6:f4:1b:6c:1f:77:b1:ba:eb:df:1d:b1:8c:bd:13:46:25:
c5:22:28:bc:48:9d:e3:d8:6a:59:05:da:f1:7f:bd:c4:7d:f9:
a9:e1:b2:4f:aa:44:63:f2:76:1f:98:bc:f5:3c:c8:22:98:af:
e0:3b:c7:25:85:33:9a:08:95:56:58:44:f7:89:9c:ee:0a:59:
30:6e:9b:c3:bf:26:7e:87:59:b0:ff:48:77:6b:18:30:9a:7e:
82:ea:95:6a:ee:fc:b2:a6:b1:bf:7d:2d:5f:4f:f5:d0:df:a7:
3d:e8:16:d5:d9:3c:76:a8:c3:a6:fc:53:47:d8:2d:92:b3:e6:
ea:76:6e:f5:22:dc:15:15:29:c7:2d:dd:bf:b3:4a:41:c6:52:
2d:66:48:a8:f7:90:8c:9b:42:23:72:8e:62:23:5a:78:1a:3f:
42:ae:a1:6f:28:13:f4:24:e8:46:49:df:49:69:f2:9f:ec:a6:
46:6e:34:a5:e0:d9:d0:0b:0c:5e:34:63:6a:11:55:2a:3b:14:
82:0c:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:51:32 2026 by rpki-client