Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KhKzGXuw_69h2db4Xe95h11aLyw.roa
File: KhKzGXuw_69h2db4Xe95h11aLyw.roa (raw, json)
Hash identifier: t7ieYcGIg9et5VUXqvI75CxBL28Xm5RyqiciMzzpoC0=
Subject key identifier: 2A:12:B3:19:7B:B0:FF:AF:61:D9:D6:F8:5D:EF:79:87:5D:5A:2F:2C
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0E8377749F22BF400C60ECC5A11475414
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KhKzGXuw_69h2db4Xe95h11aLyw.roa
Signing time: Mon 28 Sep 2026 13:32:24 +0000
ROA not before: Mon 28 Sep 2026 13:32:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.13.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
104.128.131.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.20.0/24 maxlen: 24
132.243.21.0/24 maxlen: 24
132.243.22.0/24 maxlen: 24
132.243.23.0/24 maxlen: 24
135.136.181.0/24 maxlen: 24
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.128.0/23 maxlen: 23
157.228.128.0/24 maxlen: 24
157.228.129.0/24 maxlen: 24
157.228.152.0/23 maxlen: 23
157.228.152.0/24 maxlen: 24
157.228.153.0/24 maxlen: 24
157.228.178.0/23 maxlen: 23
157.228.178.0/24 maxlen: 24
157.228.179.0/24 maxlen: 24
157.228.188.0/23 maxlen: 23
157.228.188.0/24 maxlen: 24
157.228.189.0/24 maxlen: 24
185.114.74.0/24 maxlen: 24
2a0c:5d00:ff06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:37:77:49:f2:2b:f4:00:c6:0e:cc:5a:11:47:54:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 28 13:32:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a12b3197bb0ffaf61d9d6f85def79875d5a2f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:96:a6:64:18:ad:d5:cb:fa:16:67:0e:87:a3:
11:60:14:b0:a3:ff:b4:e2:9d:63:5a:e0:33:b3:76:
af:0c:f9:93:aa:fa:bf:59:0f:4d:47:ba:b9:5d:44:
1f:f2:a1:99:cf:75:2f:02:06:08:27:42:dd:76:18:
92:c1:3f:cb:ff:f2:49:b3:cc:b0:5a:7c:29:ab:a9:
ae:39:a4:9c:9a:6d:5a:ad:44:26:a0:65:72:55:16:
3f:bc:ee:dc:93:9f:52:7b:12:8f:98:ec:7c:99:cd:
7e:3b:99:2b:8a:5f:96:2a:8e:e0:27:09:0e:70:12:
b3:e3:e5:ca:83:da:bf:51:b4:8c:bb:ef:2d:6d:22:
d8:30:4f:d3:0f:dd:81:b3:cb:50:12:c4:98:78:1c:
48:e6:c0:10:b6:df:7b:ed:c8:d2:46:53:90:02:3f:
87:b3:a2:a5:d8:24:fd:e0:72:85:af:e7:42:1a:47:
0e:0a:e9:f9:3a:10:d3:27:f9:ef:84:1c:d5:42:a3:
64:e2:6b:3a:f7:76:27:0c:cb:47:29:e2:7a:b3:a3:
51:d0:54:2e:0b:26:66:15:c2:3a:91:bf:91:e8:b7:
28:a9:54:fb:78:4b:ea:b6:16:64:b7:57:91:bc:f5:
3e:f1:df:9a:bc:50:e7:11:b7:6f:e1:e8:93:65:ee:
84:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:12:B3:19:7B:B0:FF:AF:61:D9:D6:F8:5D:EF:79:87:5D:5A:2F:2C
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KhKzGXuw_69h2db4Xe95h11aLyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/23
95.81.93.0/24
95.81.119.0-95.81.120.255
103.85.112.0/23
104.128.131.0/24
104.128.142.0/23
109.69.61.0/24
132.243.20.0/22
135.136.181.0-135.136.183.255
135.136.189.0/24
157.228.128.0/23
157.228.152.0/23
157.228.178.0/23
157.228.188.0/23
185.114.74.0/24
IPv6:
2a0c:5d00:ff06::/48
Signature Algorithm: sha256WithRSAEncryption
40:51:31:b3:89:62:a8:cc:c1:83:5b:d7:93:14:e7:f1:29:7a:
46:c2:54:16:0a:d6:bb:dc:74:a4:08:67:b2:0b:24:5a:01:93:
27:ae:38:6f:41:3d:94:38:48:c0:1d:81:55:8d:a2:b2:a3:00:
51:f1:39:8d:c7:dc:1e:7a:dc:1e:37:55:36:a1:b3:f9:fa:44:
0b:01:f0:67:25:29:10:c8:20:87:8d:cb:ae:97:75:3f:72:f2:
4d:80:94:33:e3:5c:54:ea:a3:e7:51:46:7d:6a:b0:ae:73:5d:
3b:84:fe:8c:19:92:47:13:fa:68:8a:b5:32:33:91:a6:49:e5:
54:7f:b2:ba:7a:27:7e:37:f7:82:86:02:39:78:7a:0a:5d:ea:
64:a6:eb:61:09:29:ca:2b:47:78:e8:9a:ba:a9:d1:6e:29:cd:
4b:e3:74:d6:ed:73:91:85:f9:ab:ce:9e:6d:66:ba:d4:8a:60:
cf:61:41:39:b4:87:91:f3:41:de:bb:22:d9:b0:45:58:f8:4d:
b6:ed:e7:2c:db:60:69:4c:6a:73:7f:32:89:fc:46:e7:90:81:
63:95:b4:58:cf:7a:4c:97:51:d9:d4:3f:d4:16:01:1c:df:a3:
94:e7:22:3b:45:02:c9:35:61:55:97:d6:42:a4:37:70:1d:c0:
41:14:73:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:13 2026 by rpki-client