Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/taBQ3Oj7_Re93JIcbSVehzQ2CNU.roa
File: taBQ3Oj7_Re93JIcbSVehzQ2CNU.roa (raw, json)
Hash identifier: nyijyvwYW+4RPXp8n0y6tMXH3vZZEL7Dn3BWxijWgYM=
Subject key identifier: B5:A0:50:DC:E8:FB:FD:17:BD:DC:92:1C:6D:25:5E:87:34:36:08:D5
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019EF942A4163ACB2C68F4165B24716E5DE9
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/taBQ3Oj7_Re93JIcbSVehzQ2CNU.roa
Signing time: Wed 24 Jun 2026 10:52:34 +0000
ROA not before: Wed 24 Jun 2026 10:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 45.134.12.0/23 maxlen: 23
45.134.14.0/23 maxlen: 23
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
89.44.84.0/23 maxlen: 23
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
95.81.77.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.94.0/23 maxlen: 23
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
103.249.132.0/23 maxlen: 23
103.249.134.0/23 maxlen: 23
104.128.131.0/24 maxlen: 24
104.128.138.0/23 maxlen: 23
104.128.142.0/23 maxlen: 23
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.56.0/23 maxlen: 23
109.69.58.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.184.0/23 maxlen: 23
135.136.184.0/24 maxlen: 24
135.136.185.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.254.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
2a0c:5d00:3002::/48 maxlen: 48
2a0c:5d00:3004::/48 maxlen: 48
2a0c:5d00:3005::/48 maxlen: 48
2a0c:5d00:3007::/48 maxlen: 48
2a0c:5d00:3008::/48 maxlen: 48
2a0c:5d00:3010::/48 maxlen: 48
2a0c:5d00:3012::/48 maxlen: 48
2a0c:5d00:ff08::/48 maxlen: 48
2a0c:5d00:ff09::/48 maxlen: 48
2a0c:5d00:ff0a::/48 maxlen: 48
2a0c:5d00:ff0b::/48 maxlen: 48
2a0c:5d00:ff0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:42:a4:16:3a:cb:2c:68:f4:16:5b:24:71:6e:5d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 24 10:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5a050dce8fbfd17bddc921c6d255e87343608d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:36:2d:97:e8:33:4a:d1:3c:e4:cf:4a:1f:d9:
86:60:c7:51:9e:e8:37:68:ca:f1:a9:27:d2:9e:b3:
9e:89:e3:9c:57:42:08:85:09:06:19:30:68:8a:20:
c7:71:e1:0a:8b:28:e2:52:df:65:9e:ec:6c:11:d8:
54:84:6c:8f:3c:01:37:64:23:c5:95:17:1e:99:4c:
a6:69:c7:26:16:41:a6:29:75:be:6a:67:34:8e:cf:
72:6b:ac:79:aa:16:0a:90:99:26:1f:ce:3f:8b:da:
6c:a9:c5:37:e7:c5:6e:8d:dc:d5:2a:09:08:25:05:
da:7a:8b:e2:d2:5d:64:86:fe:65:14:10:ca:fe:91:
c1:62:84:3e:b6:b8:44:45:35:47:3b:37:40:9f:1f:
b9:c9:3a:d5:99:cb:b1:23:9f:4c:99:59:1f:88:b0:
c1:14:74:66:e0:8d:49:91:86:a1:1d:9d:90:80:f7:
92:c9:fd:32:6e:22:fa:b9:b2:9b:75:57:b0:b9:75:
99:cb:f2:60:eb:47:59:42:7e:6a:61:4e:ec:0c:fd:
4e:bb:dc:e2:64:a2:4f:b3:a8:0c:67:31:26:19:5e:
de:1b:e9:96:16:4a:77:77:5f:93:d6:4a:c2:83:ca:
17:58:69:6b:50:a0:03:73:e1:7f:8f:7b:fb:06:7d:
f3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A0:50:DC:E8:FB:FD:17:BD:DC:92:1C:6D:25:5E:87:34:36:08:D5
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/taBQ3Oj7_Re93JIcbSVehzQ2CNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/22
80.76.32.0/22
89.44.84.0/23
91.200.14.0/23
92.118.8.0/23
95.81.77.0/24
95.81.93.0-95.81.95.255
95.81.112.0/23
95.81.119.0-95.81.120.255
103.85.112.0/23
103.249.132.0/22
104.128.131.0/24
104.128.138.0/23
104.128.142.0/23
109.69.56.0/22
135.136.182.0-135.136.185.255
135.136.189.0/24
185.103.252.0/22
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
IPv6:
2a0c:5d00:3002::/48
2a0c:5d00:3004::/47
2a0c:5d00:3007::-2a0c:5d00:3008:ffff:ffff:ffff:ffff:ffff
2a0c:5d00:3010::/48
2a0c:5d00:3012::/48
2a0c:5d00:ff08::-2a0c:5d00:ff0c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:46:29:b1:d2:39:39:2f:92:c5:d6:52:46:aa:a3:4e:22:2c:
66:66:1e:81:5b:a8:2c:a7:19:a9:d5:d4:06:80:46:59:9a:0b:
1a:6d:51:b7:58:2d:91:aa:15:3b:7e:10:ac:2c:74:7a:ee:cf:
44:f5:d1:92:c5:55:a0:6d:9f:1d:49:de:01:00:a9:7c:9b:09:
e4:10:7c:62:e4:a5:20:cb:25:7a:86:89:b5:38:ea:1f:10:70:
a3:1b:fc:28:e5:d8:a8:26:78:48:7e:27:21:9d:75:08:31:fb:
1d:e5:d2:84:04:3e:c4:f5:20:e7:ec:61:36:d1:f6:fc:1c:6c:
c6:58:c7:4d:08:7f:5c:f2:98:07:45:1c:af:4e:35:1e:de:0f:
74:cf:ea:7a:b1:24:33:43:11:19:2a:c2:60:a6:30:80:56:d9:
2b:92:59:2c:60:88:23:68:65:53:50:d4:e4:96:74:29:04:d0:
41:55:9d:f0:57:68:91:16:16:c0:33:86:ce:b5:3e:08:2c:f9:
78:71:8d:53:bf:af:3f:ce:2b:f7:25:57:ba:41:59:c5:a5:0d:
34:23:1a:8e:83:17:89:cb:62:43:d8:24:f4:ca:44:17:a0:83:
c3:c3:85:5b:f5:15:11:a9:21:d3:f9:33:0c:12:05:df:6c:ff:
2d:07:20:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:31 2026 by rpki-client