Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/7etp7UWOiO-JYnkMD77IvldSSeo.roa
File: 7etp7UWOiO-JYnkMD77IvldSSeo.roa (raw, json)
Hash identifier: h4hWRgFzfUa0asjFEyAGmME9ueRC2tSbnYdDzQta3EU=
Subject key identifier: ED:EB:69:ED:45:8E:88:EF:89:62:79:0C:0F:BE:C8:BE:57:52:49:EA
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A01F6E78D2E2594E2AD850DFCA94CD1290
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/7etp7UWOiO-JYnkMD77IvldSSeo.roa
Signing time: Thu 20 Aug 2026 13:48:48 +0000
ROA not before: Thu 20 Aug 2026 13:48:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
104.128.128.0/24 maxlen: 24
104.128.129.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
132.243.26.0/24 maxlen: 24
157.228.140.0/24 maxlen: 24
157.228.141.0/24 maxlen: 24
157.228.144.0/24 maxlen: 24
157.228.145.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5d00:2001::/48 maxlen: 48
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:6e:78:d2:e2:59:4e:2a:d8:50:df:ca:94:cd:12:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 20 13:48:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edeb69ed458e88ef8962790c0fbec8be575249ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:91:59:9c:ac:b6:ac:50:15:50:9e:31:bc:
2d:77:93:6c:a2:8d:9a:39:97:b1:15:2c:42:94:74:
03:f9:f2:39:ef:28:d4:35:7d:09:79:2f:37:34:a6:
3b:bd:ac:a3:3d:c7:f8:95:02:4b:10:0c:60:40:2f:
17:68:c5:18:39:69:6a:67:3e:be:d1:cf:d2:77:e4:
9a:0a:f5:0a:a7:35:cd:0e:30:e5:94:ee:03:3f:5b:
c1:41:c9:70:e4:32:f4:29:09:04:45:de:77:0a:37:
37:3f:76:28:cb:81:1a:20:91:f2:09:6b:47:60:03:
4c:4b:a1:c3:a2:40:fe:f3:36:94:69:fd:4d:39:7b:
dc:0c:30:d9:46:61:9c:71:e5:55:cc:7c:58:ac:97:
c1:70:2d:eb:e1:bb:d8:9d:05:1c:ec:c6:a7:57:20:
47:0d:0b:f5:05:21:eb:10:27:f5:5b:d8:5c:ee:ce:
a6:87:28:09:64:b3:bb:2a:8b:c9:b0:de:10:8c:11:
3d:8e:d4:94:af:a3:29:88:2e:f5:bb:2d:24:6b:80:
0a:e1:85:3e:f1:f6:b9:fb:fc:2e:10:2c:91:a6:70:
be:83:85:09:50:31:47:b1:76:99:3e:f5:04:c4:20:
90:cf:33:7d:45:da:72:42:4a:42:a4:f8:5a:53:8b:
25:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EB:69:ED:45:8E:88:EF:89:62:79:0C:0F:BE:C8:BE:57:52:49:EA
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/7etp7UWOiO-JYnkMD77IvldSSeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.14.0/23
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
103.82.103.0/24
104.128.128.0/23
109.69.60.0/24
132.243.26.0/24
157.228.140.0/23
157.228.144.0/23
185.37.195.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0c:5d00:2001::/48
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
3d:7d:96:4a:bd:f5:66:8e:3d:d5:11:20:11:f2:5c:cf:89:13:
bc:ea:74:53:08:2f:1f:14:7b:47:58:74:50:6e:85:58:55:2c:
91:82:4e:0e:51:63:a3:05:d0:39:15:97:8f:f3:b8:7e:1b:d5:
86:77:c7:b2:e0:19:f8:25:2b:9d:12:83:22:41:64:b9:82:87:
67:e7:ae:39:42:bf:3f:7c:d7:c4:90:3d:70:a5:0f:64:2b:ff:
9e:d9:18:8d:fb:11:e2:30:53:34:e4:72:67:44:2d:97:1b:2f:
2d:03:2d:47:61:81:9e:62:b4:53:55:98:0a:15:44:43:72:46:
17:fb:16:cf:8d:78:16:1f:8b:96:0f:46:98:43:75:78:d7:e3:
72:e0:92:f6:23:b8:73:d3:35:be:16:da:c4:7c:48:e8:f9:56:
17:2d:81:c9:2e:88:8d:45:1f:63:ed:07:48:28:a0:04:29:1b:
21:e0:71:10:e9:36:b6:22:97:c5:2d:8f:a9:9f:6d:a2:16:f5:
32:ef:ac:88:09:37:09:bc:1f:60:4c:81:16:0a:07:ca:c1:6d:
9a:17:19:90:a3:a8:87:7a:c1:5c:78:01:d3:d5:37:c3:79:72:
b4:7c:e2:f7:7b:03:8e:6d:a2:ba:73:9c:8c:41:10:a3:fc:39:
e6:2c:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:42 2026 by rpki-client