Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/s9g6Q1NQ4yb28lHF75axCewjx8U.roa
File: s9g6Q1NQ4yb28lHF75axCewjx8U.roa (raw, json)
Hash identifier: UUpso05TQjy3kJshrbn/8sNy3+XDJPOq+76ixgcq7uw=
Subject key identifier: B3:D8:3A:43:53:50:E3:26:F6:F2:51:C5:EF:96:B1:09:EC:23:C7:C5
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A047E8159FC2DE0D3C094B87B695356704
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/s9g6Q1NQ4yb28lHF75axCewjx8U.roa
Signing time: Fri 28 Aug 2026 10:26:27 +0000
ROA not before: Fri 28 Aug 2026 10:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 45.134.12.0/23 maxlen: 23
45.134.14.0/23 maxlen: 23
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
89.44.84.0/23 maxlen: 23
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
95.81.77.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.94.0/23 maxlen: 23
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
103.249.132.0/23 maxlen: 23
103.249.134.0/23 maxlen: 23
104.128.131.0/24 maxlen: 24
104.128.138.0/23 maxlen: 23
104.128.142.0/23 maxlen: 23
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.56.0/23 maxlen: 23
109.69.58.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.184.0/23 maxlen: 23
135.136.184.0/24 maxlen: 24
135.136.185.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.130.0/23 maxlen: 23
157.228.130.0/24 maxlen: 24
157.228.131.0/24 maxlen: 24
157.228.132.0/23 maxlen: 23
157.228.132.0/24 maxlen: 24
157.228.133.0/24 maxlen: 24
157.228.148.0/23 maxlen: 23
157.228.148.0/24 maxlen: 24
157.228.149.0/24 maxlen: 24
157.228.150.0/23 maxlen: 23
157.228.150.0/24 maxlen: 24
157.228.151.0/24 maxlen: 24
157.228.154.0/23 maxlen: 23
157.228.154.0/24 maxlen: 24
157.228.155.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.254.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
2a0c:5d00:3002::/48 maxlen: 48
2a0c:5d00:3004::/48 maxlen: 48
2a0c:5d00:3005::/48 maxlen: 48
2a0c:5d00:3007::/48 maxlen: 48
2a0c:5d00:3008::/48 maxlen: 48
2a0c:5d00:3010::/48 maxlen: 48
2a0c:5d00:3012::/48 maxlen: 48
2a0c:5d00:ff08::/48 maxlen: 48
2a0c:5d00:ff09::/48 maxlen: 48
2a0c:5d00:ff0a::/48 maxlen: 48
2a0c:5d00:ff0b::/48 maxlen: 48
2a0c:5d00:ff0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:e8:15:9f:c2:de:0d:3c:09:4b:87:b6:95:35:67:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 28 10:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d83a435350e326f6f251c5ef96b109ec23c7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:11:8d:67:f0:94:02:37:2b:6c:03:9c:61:
81:1b:03:f1:90:79:b2:73:bb:41:35:d3:02:e1:e2:
cd:bd:e9:2e:34:d0:b2:a5:5f:68:a2:e7:40:61:ae:
5f:b9:a1:23:54:a7:15:96:77:5b:0b:10:99:27:d0:
7d:28:71:5d:7c:3b:67:7a:43:97:91:3c:74:a9:7a:
48:77:83:db:4d:21:0c:df:1f:28:4d:b2:55:b6:f0:
a1:3a:a8:c6:46:cf:0b:1c:57:84:10:d1:19:e7:6e:
87:49:33:90:5d:0d:4d:10:29:f7:b4:d5:17:4a:1c:
f4:8b:0f:7b:6c:a8:f0:07:59:57:ba:22:86:b5:c4:
31:8e:ab:41:71:e8:c5:ab:a3:54:ff:76:9e:e2:75:
a8:26:be:31:3a:d8:dd:ce:59:c3:a5:d2:3c:88:19:
f0:cb:75:90:f4:27:7f:62:63:6b:a3:5d:ab:5f:2a:
c7:3a:62:48:91:15:6d:8c:fc:54:ca:d7:42:73:b9:
93:e5:63:8e:a3:88:9a:90:52:b5:ec:96:60:50:8d:
04:23:ed:0f:bd:eb:6e:16:be:ba:d8:38:c0:36:12:
7b:18:2a:38:92:61:4f:74:f3:fe:37:a5:bf:d8:e1:
a2:56:92:d7:2c:70:1a:3d:cf:b9:f6:fa:c8:8f:ca:
21:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D8:3A:43:53:50:E3:26:F6:F2:51:C5:EF:96:B1:09:EC:23:C7:C5
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/s9g6Q1NQ4yb28lHF75axCewjx8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/22
80.76.32.0/22
89.44.84.0/23
91.200.14.0/23
92.118.8.0/23
95.81.77.0/24
95.81.93.0-95.81.95.255
95.81.112.0/23
95.81.119.0-95.81.120.255
103.85.112.0/23
103.249.132.0/22
104.128.131.0/24
104.128.138.0/23
104.128.142.0/23
109.69.56.0/22
135.136.182.0-135.136.185.255
135.136.189.0/24
157.228.130.0-157.228.133.255
157.228.148.0/22
157.228.154.0/23
185.103.252.0/22
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
IPv6:
2a0c:5d00:3002::/48
2a0c:5d00:3004::/47
2a0c:5d00:3007::-2a0c:5d00:3008:ffff:ffff:ffff:ffff:ffff
2a0c:5d00:3010::/48
2a0c:5d00:3012::/48
2a0c:5d00:ff08::-2a0c:5d00:ff0c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:ee:d4:c1:c3:7a:82:0b:48:1c:ad:c1:9f:1f:5e:20:ad:21:
e7:97:a0:3b:36:f3:c0:b0:e2:1b:3d:df:05:b3:2d:69:6f:53:
46:35:b7:13:e0:60:83:3b:6d:f8:10:9f:ea:75:c9:4a:da:67:
b7:5e:51:9b:be:e1:44:8d:7c:95:28:28:41:63:5e:5b:e4:dd:
4d:33:b8:71:5d:60:34:16:4b:fe:50:e1:52:2c:c7:52:b9:2a:
4c:ac:92:e3:ed:30:08:f4:07:11:4d:74:66:be:ba:03:cd:88:
1e:f4:b5:98:56:e4:4a:03:2b:f7:ab:10:61:8e:83:5b:e8:4a:
7e:d6:eb:0d:6c:da:64:18:f5:01:a6:bd:cb:ad:b5:be:00:e9:
bc:48:d0:35:7f:26:f5:df:82:3e:93:40:ec:bb:95:3b:9e:18:
b0:b8:37:06:cd:96:dc:cb:ee:fd:6d:3f:b3:90:4b:1f:86:5c:
31:31:1c:f1:4a:8d:c8:ce:a6:09:4f:91:6f:e4:22:ab:22:4e:
77:bc:72:6a:e0:33:b3:68:b2:07:08:b2:c8:e5:62:74:7c:fb:
70:8d:47:4d:c0:39:d1:62:9f:41:ba:59:19:ce:79:49:af:8a:
3e:3f:35:1e:fd:1b:9c:a8:03:c0:38:c0:bd:b3:47:a9:0e:47:
3c:e6:da:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:29 2026 by rpki-client