Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ixl4tC2z7bLaug_MDKxY__uKrEE.roa
File: ixl4tC2z7bLaug_MDKxY__uKrEE.roa (raw, json)
Hash identifier: DP4OnbA3RbhtsQrhG+3f0c64oAEhuLNKBOiIaKoS/tA=
Subject key identifier: 8B:19:78:B4:2D:B3:ED:B2:DA:BA:0F:CC:0C:AC:58:FF:FB:8A:AC:41
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019F672292D7C73ABF4C418C94F14255DA57
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ixl4tC2z7bLaug_MDKxY__uKrEE.roa
Signing time: Wed 15 Jul 2026 18:55:46 +0000
ROA not before: Wed 15 Jul 2026 18:55:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
95.81.79.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.126.0/24 maxlen: 24
95.81.127.0/24 maxlen: 24
103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.85.114.0/24 maxlen: 24
103.85.115.0/24 maxlen: 24
104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.138.0/24 maxlen: 24
104.128.139.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.24.0/24 maxlen: 24
132.243.25.0/24 maxlen: 24
135.136.176.0/24 maxlen: 24
135.136.177.0/24 maxlen: 24
135.136.186.0/24 maxlen: 24
135.136.187.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
2a0c:5d00:1002::/48 maxlen: 48
2a0c:5d00:2002::/48 maxlen: 48
2a0c:5d06:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:22:92:d7:c7:3a:bf:4c:41:8c:94:f1:42:55:da:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 15 18:55:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b1978b42db3edb2daba0fcc0cac58fffb8aac41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:12:1d:48:ea:41:2a:ce:9b:0a:74:be:15:70:
07:6b:9f:5b:d2:ab:53:25:55:c8:0f:39:83:49:21:
3b:49:93:8f:a9:95:ac:97:aa:39:3f:bc:d9:5b:b8:
76:13:f2:7c:49:f1:93:08:41:53:4a:03:94:b0:d4:
21:28:52:9f:ea:a5:36:93:0f:e2:9a:de:8d:1b:3b:
18:17:1f:1c:95:11:ff:c6:75:e6:af:44:eb:bd:4d:
9a:5c:9e:a6:6b:aa:d0:6b:09:1a:58:78:1f:27:df:
5b:f1:d0:7e:13:14:09:18:e7:67:c7:82:da:2c:10:
4e:b6:f2:2a:78:6f:e4:4c:4c:a2:eb:58:9d:34:c5:
01:85:2d:bb:78:2c:50:e3:93:7a:7d:af:c3:53:9f:
44:1d:20:79:4e:07:43:8a:2c:83:e5:fd:1b:b5:be:
58:ab:a8:9f:a4:62:28:92:9c:89:ee:24:1b:52:56:
e0:4c:9c:1b:db:06:fb:9d:d8:3c:0d:e6:3b:a6:c3:
73:a6:1f:4b:ed:0b:1c:f7:20:6a:1d:5d:db:20:62:
59:dc:2d:92:d9:cd:e8:dd:af:3c:3b:6a:94:4c:ad:
64:7e:24:ee:7a:e3:d4:9a:f9:a3:14:44:c9:17:08:
ff:8a:21:07:4a:1a:ff:81:9f:20:e6:b2:de:8a:e2:
d4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:19:78:B4:2D:B3:ED:B2:DA:BA:0F:CC:0C:AC:58:FF:FB:8A:AC:41
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/ixl4tC2z7bLaug_MDKxY__uKrEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.86.0/24
95.81.79.0/24
95.81.113.0/24
95.81.126.0/23
103.71.22.0/23
103.85.114.0/23
104.128.132.0-104.128.143.255
109.69.61.0/24
132.243.24.0/23
135.136.176.0/23
135.136.186.0/23
185.37.195.0/24
IPv6:
2a0c:5d00:1002::/48
2a0c:5d00:2002::/48
2a0c:5d06:2002::/48
Signature Algorithm: sha256WithRSAEncryption
b9:e5:88:8d:62:ec:0a:6c:2a:a5:19:b7:19:bf:11:66:cb:59:
78:ba:1f:d7:10:4f:21:a4:98:4e:e2:e9:0f:8c:7b:94:06:ab:
40:f8:b6:f7:91:5f:40:bb:71:93:5e:73:da:89:b2:05:bd:bf:
46:df:00:8c:c4:6d:50:93:d3:0b:0d:eb:7b:ad:f6:92:52:d8:
48:2a:79:b3:57:ea:f0:73:c4:06:2a:77:09:16:d2:07:39:a3:
2c:a8:01:a3:5f:1f:f5:e4:99:48:05:4d:4a:66:cc:d3:c9:9a:
98:63:84:cd:5b:6b:51:a7:26:f6:58:27:cf:71:8a:b6:13:36:
64:43:d3:45:b6:2b:9a:a3:25:07:ad:ba:cc:bc:a2:8a:02:13:
3f:a4:6a:3f:e1:57:82:31:9b:0e:fd:5d:9a:2b:92:ea:ff:a0:
de:46:14:29:2f:ec:43:2b:71:08:f9:41:be:98:99:b2:a6:b9:
50:45:45:4b:d8:6b:23:d6:05:89:51:a3:87:95:2c:44:d3:2c:
62:ee:91:93:a3:4e:83:99:63:26:3e:77:7e:0c:86:4c:00:42:
7a:97:e3:30:90:ca:f5:4a:dd:d9:49:90:41:3b:73:6e:ec:44:
aa:cb:a7:2b:67:3f:bd:62:d1:f6:13:90:57:af:71:a2:74:ed:
b6:1a:b3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:18 2026 by rpki-client