Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/b2eyCOQOIfre_BT-wmn6KHp2dtA.roa
File: b2eyCOQOIfre_BT-wmn6KHp2dtA.roa (raw, json)
Hash identifier: L09JhGv7Bsbdv/3nAbANt8icKWpsX4VZAZIrFgMXJHc=
Subject key identifier: 6F:67:B2:08:E4:0E:21:FA:DE:FC:14:FE:C2:69:FA:28:7A:76:76:D0
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A155BD1A3D006E87E43A15F947B017A23A
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/b2eyCOQOIfre_BT-wmn6KHp2dtA.roa
Signing time: Mon 19 Oct 2026 19:56:58 +0000
ROA not before: Mon 19 Oct 2026 19:56:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205090
IP address blocks: 89.44.86.0/24 maxlen: 24
89.44.87.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
91.200.13.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
103.71.20.0/24 maxlen: 24
103.71.21.0/24 maxlen: 24
104.128.130.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
109.69.63.0/24 maxlen: 24
132.243.16.0/24 maxlen: 24
132.243.17.0/24 maxlen: 24
132.243.18.0/24 maxlen: 24
132.243.19.0/24 maxlen: 24
135.136.178.0/24 maxlen: 24
135.136.179.0/24 maxlen: 24
135.136.190.0/24 maxlen: 24
157.228.138.0/24 maxlen: 24
157.228.139.0/24 maxlen: 24
157.228.182.0/24 maxlen: 24
157.228.183.0/24 maxlen: 24
157.228.187.0/24 maxlen: 24
157.228.191.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.128.104.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
2a0c:5d00:2004::/48 maxlen: 48
2a0c:5d00:3013::/48 maxlen: 48
2a0c:5d00:ff04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:bd:1a:3d:00:6e:87:e4:3a:15:f9:47:b0:17:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Oct 19 19:56:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f67b208e40e21fadefc14fec269fa287a7676d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:b4:c2:91:d1:2f:64:9e:ba:ee:87:b8:bb:
f3:9e:10:bb:ac:01:a7:56:e5:b3:e2:a2:89:c2:97:
20:25:4f:15:63:73:c1:9e:5c:57:4d:94:8f:d0:01:
07:23:fa:22:2d:95:8f:15:5b:a8:07:36:53:ff:cf:
a7:80:aa:24:1e:f9:72:1b:a0:81:15:63:8b:d3:5e:
4a:a2:8c:7c:b9:60:ac:d8:9f:2f:53:51:31:e2:ea:
6e:21:3b:e8:56:b4:34:b2:86:06:65:bb:5f:d7:16:
95:f3:b4:05:01:31:f2:fb:85:45:0f:e7:b1:d3:17:
dc:eb:77:20:cf:1e:83:c4:85:35:b3:e5:66:42:c3:
dc:5a:98:e3:0e:99:cc:85:07:56:ef:16:af:28:d6:
1b:c4:6a:28:b7:3c:d8:9a:12:59:6b:3a:fd:45:0d:
90:8d:a0:74:fe:c9:36:b5:83:0f:a2:35:09:24:3c:
b5:d7:22:a2:b2:2e:97:b4:83:ca:20:de:7a:5c:fd:
7f:b9:98:b6:1e:4a:b0:a6:f0:9f:1e:90:ba:d4:77:
a9:b0:53:fe:8a:c3:7d:c5:fe:74:23:b2:73:2e:71:
f1:35:c7:b5:8c:dc:5a:e4:ee:d7:9b:8d:b7:93:19:
aa:a3:7d:9b:09:f7:92:d9:25:84:06:e1:a1:21:e0:
57:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:67:B2:08:E4:0E:21:FA:DE:FC:14:FE:C2:69:FA:28:7A:76:76:D0
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/b2eyCOQOIfre_BT-wmn6KHp2dtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.86.0/23
91.200.12.0/23
95.81.121.0-95.81.122.255
103.71.20.0/23
104.128.130.0/24
104.128.133.0-104.128.135.255
109.69.62.0/23
132.243.16.0/22
135.136.178.0/23
135.136.190.0/24
157.228.138.0/23
157.228.182.0/23
157.228.187.0/24
157.228.191.0/24
185.105.88.0/22
185.128.104.0/22
IPv6:
2a0c:5d00:2004::/48
2a0c:5d00:3013::/48
2a0c:5d00:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
4d:58:23:31:18:8e:98:50:dd:db:71:da:5a:d8:16:a2:22:95:
12:63:e3:13:08:24:4b:86:6b:d2:14:3e:0e:59:98:cb:0c:aa:
8d:f6:53:9c:56:c9:d8:57:72:e1:b6:6b:e8:a4:43:21:93:31:
de:96:c6:aa:b8:d7:30:84:9e:85:6a:9d:77:42:9f:9e:6e:cf:
97:2a:f7:f4:9b:ad:3c:40:bd:4e:65:5b:29:32:56:8b:33:0a:
f9:73:66:ba:d7:f1:77:73:d9:da:d2:45:0e:9f:c3:98:85:77:
f4:9a:25:a0:fa:a3:c8:aa:db:58:22:e0:55:34:d3:d3:12:2d:
4f:60:0d:7e:d4:28:5f:26:5e:4c:f8:37:2e:65:9b:85:f1:ce:
ee:07:78:0c:7d:be:58:96:9c:c9:78:f8:df:01:c1:2a:c8:29:
47:03:17:17:e0:b3:7c:b3:99:64:d3:b7:14:07:33:00:99:6a:
67:0a:72:cd:1a:fb:b2:5b:12:8b:dd:84:63:8f:16:d0:91:6a:
60:40:3c:90:fb:6d:98:5c:1a:ec:a7:79:13:cd:a6:77:99:94:
94:08:56:f4:26:b6:bf:47:3d:96:20:8d:ea:f4:8c:3e:f0:b7:
58:2e:7f:d8:36:16:3e:69:7d:62:47:70:4a:34:0e:35:fe:5f:
b2:28:e0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:39 2026 by rpki-client