Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/twOFpP4Zmt7CfY3O6cHd2FdpZvo.roa
File: twOFpP4Zmt7CfY3O6cHd2FdpZvo.roa (raw, json)
Hash identifier: Qkpto/YAYIhJcoF+8LvUj0jhV8uIHXxE4G4oLtmDeUQ=
Subject key identifier: B7:03:85:A4:FE:19:9A:DE:C2:7D:8D:CE:E9:C1:DD:D8:57:69:66:FA
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A043F4D7BCA8DF2FB6499DF13DF415A3E0
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/twOFpP4Zmt7CfY3O6cHd2FdpZvo.roa
Signing time: Thu 27 Aug 2026 16:01:54 +0000
ROA not before: Thu 27 Aug 2026 16:01:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
95.81.79.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.126.0/24 maxlen: 24
95.81.127.0/24 maxlen: 24
103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.85.114.0/24 maxlen: 24
103.85.115.0/24 maxlen: 24
104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.138.0/24 maxlen: 24
104.128.139.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.24.0/24 maxlen: 24
132.243.25.0/24 maxlen: 24
135.136.176.0/24 maxlen: 24
135.136.177.0/24 maxlen: 24
135.136.186.0/24 maxlen: 24
135.136.187.0/24 maxlen: 24
157.228.142.0/24 maxlen: 24
157.228.143.0/24 maxlen: 24
157.228.146.0/23 maxlen: 23
157.228.146.0/24 maxlen: 24
157.228.147.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
2a0c:5d00:1002::/48 maxlen: 48
2a0c:5d00:2002::/48 maxlen: 48
2a0c:5d06:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:f4:d7:bc:a8:df:2f:b6:49:9d:f1:3d:f4:15:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Aug 27 16:01:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b70385a4fe199adec27d8dcee9c1ddd8576966fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:19:08:ed:d2:55:09:fe:d8:96:0a:08:34:
15:ff:3f:fb:d0:a2:ab:84:09:b2:bf:f1:50:b1:e2:
5b:7b:55:7a:73:cc:c9:8a:d8:d6:d0:b8:36:4f:20:
16:b4:94:74:66:aa:64:25:47:5f:8d:a2:f7:ae:7b:
02:5c:c8:61:f1:12:75:81:80:23:fb:c4:ad:55:61:
72:85:99:3b:68:ce:1b:9f:41:ed:4c:38:bb:78:d7:
b1:31:5d:7a:63:0c:2a:d3:46:54:d2:9f:91:42:e8:
95:19:3b:26:ed:cf:f4:ab:bf:2e:40:d5:a8:89:03:
cb:d5:04:a9:7f:42:34:ff:12:fa:8e:5b:90:76:bd:
1b:25:3b:33:5d:0a:00:eb:5a:73:d7:9e:f4:86:59:
02:b3:b1:f2:98:75:20:ed:d9:ba:6f:46:a1:76:8f:
da:9b:fe:18:8d:00:36:5b:9a:05:1a:eb:de:32:08:
39:7a:64:f1:13:46:0e:21:22:d9:e1:f2:9a:1d:8c:
65:85:f7:be:75:6b:93:02:88:63:b4:c5:e7:e0:54:
73:cf:3a:16:61:8e:6a:5a:21:6b:bb:15:0c:7a:6e:
48:6a:61:39:dd:db:4e:c4:02:40:af:5c:9d:c1:74:
35:cc:4f:36:41:93:ca:72:91:4c:e1:f3:21:98:b6:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:85:A4:FE:19:9A:DE:C2:7D:8D:CE:E9:C1:DD:D8:57:69:66:FA
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/twOFpP4Zmt7CfY3O6cHd2FdpZvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.86.0/24
95.81.79.0/24
95.81.113.0/24
95.81.126.0/23
103.71.22.0/23
103.85.114.0/23
104.128.132.0-104.128.143.255
109.69.61.0/24
132.243.24.0/23
135.136.176.0/23
135.136.186.0/23
157.228.142.0/23
157.228.146.0/23
185.37.195.0/24
IPv6:
2a0c:5d00:1002::/48
2a0c:5d00:2002::/48
2a0c:5d06:2002::/48
Signature Algorithm: sha256WithRSAEncryption
62:b7:60:7b:6a:c4:14:2b:b9:27:50:72:a6:8e:1e:77:5e:ed:
70:7c:b3:0e:17:59:13:77:ba:9f:9b:57:95:d7:37:5a:72:a6:
84:80:a1:0f:dc:79:08:05:f5:d3:34:cc:1f:d8:5f:33:3a:b8:
90:b2:95:6e:8e:9a:33:c5:29:ed:5d:f0:cb:95:82:10:0e:2f:
af:58:07:d7:f0:67:4d:d6:f2:83:e4:e6:18:c8:3f:af:15:7c:
f6:b4:ae:3c:ed:85:ce:81:ca:ad:71:70:d1:7b:65:d2:3f:34:
59:ce:93:bb:95:09:7b:05:3a:14:0e:10:43:49:6d:9a:45:eb:
13:c6:04:79:aa:81:63:d0:3f:3b:b6:e6:5b:80:7a:68:bf:e8:
5c:db:7a:0d:5b:2b:98:52:aa:a0:9e:95:46:fe:79:48:5d:f8:
2f:ea:6e:bf:f1:45:00:d7:cf:25:c1:89:a5:1e:15:a4:78:be:
46:cc:ab:2c:5d:40:a3:64:53:84:23:49:01:49:e9:b8:0d:47:
e4:44:f8:72:d2:c4:13:28:9d:12:8b:80:76:01:5e:66:06:ac:
7c:1d:e7:05:80:5d:97:5d:6e:7a:90:b6:ac:87:f3:ee:51:85:
ae:d6:08:8d:4d:92:1d:4d:7f:d9:ee:83:fb:8b:38:ef:07:8b:
39:14:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:05 2026 by rpki-client