Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UUA4JLJhcMPlsAiLuy7UpjXQEmU.roa
File: UUA4JLJhcMPlsAiLuy7UpjXQEmU.roa (raw, json)
Hash identifier: Ix71Hk2tuqeH3BTLYxD2fQ/e43tBhXT17t7/Gex6ldQ=
Subject key identifier: 51:40:38:24:B2:61:70:C3:E5:B0:08:8B:BB:2E:D4:A6:35:D0:12:65
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0D36A4E51B94F25383FB57638749F4C9D
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UUA4JLJhcMPlsAiLuy7UpjXQEmU.roa
Signing time: Thu 24 Sep 2026 12:35:54 +0000
ROA not before: Thu 24 Sep 2026 12:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 45.134.12.0/23 maxlen: 23
45.134.14.0/23 maxlen: 23
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
89.44.84.0/23 maxlen: 23
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
95.81.77.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.94.0/23 maxlen: 23
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
103.249.132.0/23 maxlen: 23
103.249.134.0/23 maxlen: 23
104.128.131.0/24 maxlen: 24
104.128.138.0/23 maxlen: 23
104.128.142.0/23 maxlen: 23
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.56.0/23 maxlen: 23
109.69.58.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.184.0/23 maxlen: 23
135.136.184.0/24 maxlen: 24
135.136.185.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.130.0/23 maxlen: 23
157.228.130.0/24 maxlen: 24
157.228.131.0/24 maxlen: 24
157.228.132.0/23 maxlen: 23
157.228.132.0/24 maxlen: 24
157.228.133.0/24 maxlen: 24
157.228.148.0/23 maxlen: 23
157.228.148.0/24 maxlen: 24
157.228.149.0/24 maxlen: 24
157.228.150.0/23 maxlen: 23
157.228.150.0/24 maxlen: 24
157.228.151.0/24 maxlen: 24
157.228.154.0/23 maxlen: 23
157.228.154.0/24 maxlen: 24
157.228.155.0/24 maxlen: 24
157.228.160.0/23 maxlen: 23
157.228.160.0/24 maxlen: 24
157.228.161.0/24 maxlen: 24
157.228.162.0/23 maxlen: 23
157.228.162.0/24 maxlen: 24
157.228.163.0/24 maxlen: 24
157.228.164.0/23 maxlen: 23
157.228.164.0/24 maxlen: 24
157.228.165.0/24 maxlen: 24
157.228.166.0/23 maxlen: 23
157.228.166.0/24 maxlen: 24
157.228.167.0/24 maxlen: 24
157.228.180.0/23 maxlen: 23
157.228.180.0/24 maxlen: 24
157.228.181.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.254.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
2a0c:5d00:3002::/48 maxlen: 48
2a0c:5d00:3004::/48 maxlen: 48
2a0c:5d00:3005::/48 maxlen: 48
2a0c:5d00:3007::/48 maxlen: 48
2a0c:5d00:3008::/48 maxlen: 48
2a0c:5d00:3010::/48 maxlen: 48
2a0c:5d00:3012::/48 maxlen: 48
2a0c:5d00:ff08::/48 maxlen: 48
2a0c:5d00:ff09::/48 maxlen: 48
2a0c:5d00:ff0a::/48 maxlen: 48
2a0c:5d00:ff0b::/48 maxlen: 48
2a0c:5d00:ff0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:6a:4e:51:b9:4f:25:38:3f:b5:76:38:74:9f:4c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 24 12:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51403824b26170c3e5b0088bbb2ed4a635d01265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:08:cf:b8:43:68:10:24:cd:11:17:6d:0a:
33:21:3c:0c:04:4c:d6:a8:62:c3:df:69:60:4c:bd:
0a:1e:b2:fe:0e:49:41:1d:3a:dc:f1:7a:76:5c:16:
43:0e:b2:b3:14:dc:09:a1:33:5b:63:e9:9d:c4:dd:
e5:4d:10:69:eb:6c:8e:c2:d2:68:b4:79:c2:79:f4:
18:e6:1c:88:89:4c:25:e9:42:8c:98:dc:eb:2b:f1:
d1:62:35:c0:d3:b4:36:af:7b:20:2a:5f:9a:ce:87:
a0:ce:16:29:48:b7:c6:5b:ca:56:df:34:5b:7e:09:
63:ac:9f:8a:70:d0:4f:a2:d4:ab:80:82:a5:d3:7d:
e7:db:1e:cb:61:1a:35:3a:5a:4b:f9:b3:72:c7:9e:
0c:01:04:57:8b:d8:b6:1a:d6:62:9d:b6:a4:be:ed:
86:69:80:c6:ec:e3:8e:5c:46:10:1b:ff:92:53:6c:
89:06:1b:d0:11:8a:22:5e:d7:79:c9:e2:c7:20:fb:
f0:8d:fd:88:5f:7a:e7:f8:88:2c:6a:5e:e5:e8:ab:
ba:78:94:62:5c:d5:36:d7:16:79:71:35:1a:e2:59:
18:2a:a4:36:8b:d8:20:e9:ee:9c:45:46:4d:2e:10:
fe:4f:72:a7:5e:aa:5b:88:ca:31:aa:28:6d:af:16:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:38:24:B2:61:70:C3:E5:B0:08:8B:BB:2E:D4:A6:35:D0:12:65
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/UUA4JLJhcMPlsAiLuy7UpjXQEmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/22
80.76.32.0/22
89.44.84.0/23
91.200.14.0/23
92.118.8.0/23
95.81.77.0/24
95.81.93.0-95.81.95.255
95.81.112.0/23
95.81.119.0-95.81.120.255
103.85.112.0/23
103.249.132.0/22
104.128.131.0/24
104.128.138.0/23
104.128.142.0/23
109.69.56.0/22
135.136.182.0-135.136.185.255
135.136.189.0/24
157.228.130.0-157.228.133.255
157.228.148.0/22
157.228.154.0/23
157.228.160.0/21
157.228.180.0/23
185.103.252.0/22
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
IPv6:
2a0c:5d00:3002::/48
2a0c:5d00:3004::/47
2a0c:5d00:3007::-2a0c:5d00:3008:ffff:ffff:ffff:ffff:ffff
2a0c:5d00:3010::/48
2a0c:5d00:3012::/48
2a0c:5d00:ff08::-2a0c:5d00:ff0c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1a:47:4f:91:7a:29:8f:2d:a4:cf:50:61:a4:20:1f:78:f8:be:
d9:9b:da:c6:c5:45:5c:64:c8:24:f5:e2:73:18:b7:20:cd:cb:
9f:f6:1e:f3:d5:72:86:5f:17:12:78:de:9f:57:83:80:d1:3f:
81:a8:1d:b1:f6:ae:91:bf:02:37:63:b6:a5:af:c5:85:a2:c7:
18:8b:fe:a1:ea:0b:77:13:a5:6f:01:19:f0:14:82:7b:72:34:
0d:ee:c9:c9:d5:fb:19:c6:43:ef:8d:d6:13:1c:3f:f1:82:8a:
8f:f8:64:2a:62:bd:0b:ad:a8:e1:0c:52:60:15:9c:1f:2d:01:
88:cb:e2:a8:84:a2:95:aa:1c:b3:3b:53:2e:44:c1:e2:f7:80:
7f:df:9f:45:0d:14:ab:20:c9:6b:f9:65:bf:c3:a1:ad:ab:47:
9d:7d:c8:68:34:50:f8:17:2c:48:09:8c:87:56:ed:19:c5:64:
95:8d:31:cc:07:2b:36:ee:3c:62:0f:4b:3b:2e:2d:e6:23:27:
5e:be:73:8e:f6:c4:97:5b:92:26:71:27:af:a3:61:8d:af:57:
e5:8d:b4:95:e9:92:d9:33:36:9b:a7:8e:92:c6:45:91:ec:2f:
64:fc:8c:e1:88:a4:88:eb:fc:46:06:01:17:6f:98:92:3d:3d:
af:1e:c5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:35:14 2026 by rpki-client