Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BkD52Dadj4p6Q0alcjqMiP5D2AE.roa
File: BkD52Dadj4p6Q0alcjqMiP5D2AE.roa (raw, json)
Hash identifier: dAO4/QMYjrg0ESz/KmZz1wxYdpjw+IyxMgy8j0SsRaw=
Subject key identifier: 06:40:F9:D8:36:9D:8F:8A:7A:43:46:A5:72:3A:8C:88:FE:43:D8:01
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0B37643C55E694199839506C09BE42452
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BkD52Dadj4p6Q0alcjqMiP5D2AE.roa
Signing time: Fri 18 Sep 2026 07:41:07 +0000
ROA not before: Fri 18 Sep 2026 07:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205090
IP address blocks: 89.44.86.0/24 maxlen: 24
89.44.87.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
91.200.13.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
103.71.20.0/24 maxlen: 24
103.71.21.0/24 maxlen: 24
104.128.130.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
109.69.63.0/24 maxlen: 24
132.243.16.0/24 maxlen: 24
132.243.17.0/24 maxlen: 24
132.243.18.0/24 maxlen: 24
132.243.19.0/24 maxlen: 24
135.136.178.0/24 maxlen: 24
135.136.179.0/24 maxlen: 24
135.136.190.0/24 maxlen: 24
157.228.138.0/24 maxlen: 24
157.228.139.0/24 maxlen: 24
157.228.182.0/24 maxlen: 24
157.228.183.0/24 maxlen: 24
157.228.191.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.128.104.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
2a0c:5d00:3013::/48 maxlen: 48
2a0c:5d00:ff04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:76:43:c5:5e:69:41:99:83:95:06:c0:9b:e4:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 18 07:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0640f9d8369d8f8a7a4346a5723a8c88fe43d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fa:ea:27:62:cf:0a:1b:e9:4b:c5:dc:bd:06:
91:81:32:fa:b7:8d:13:b9:dc:9f:d3:54:59:f4:c8:
fa:ff:be:aa:88:fe:10:61:ed:44:a8:6b:e5:7d:2f:
b9:35:13:02:a0:0b:02:d1:d9:6c:7a:cf:8f:f3:d0:
7a:45:a5:66:5e:03:62:9f:cc:ce:1a:d3:c3:53:7e:
6f:b3:ed:be:c9:5b:33:94:2e:81:37:6d:86:a4:b1:
ff:ba:e1:2e:92:5b:e1:49:00:7c:71:19:a9:62:c2:
b4:06:aa:27:c9:df:b3:14:2a:90:1e:b9:87:a6:a3:
ae:f9:b9:73:80:23:26:86:dd:a3:90:ba:1f:d3:df:
48:4f:e4:f3:76:c3:6c:c1:ac:08:ef:d2:ca:56:04:
6e:6a:0b:7f:75:2e:b6:99:38:15:dc:04:45:d9:26:
8e:97:19:73:31:31:74:80:8d:8e:a0:bb:dc:6d:6a:
fd:20:08:c0:e4:69:47:a2:98:f7:69:1a:e8:93:d9:
40:da:e8:ec:f5:b6:28:42:0d:ab:81:9e:f6:ae:77:
63:b8:e7:cf:24:da:63:24:5f:b7:b2:31:a1:93:22:
3c:c5:13:b2:2a:98:62:01:45:c1:4c:e4:71:fb:74:
07:a9:4b:4f:43:da:e3:3a:e1:12:93:f5:20:f5:22:
29:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:40:F9:D8:36:9D:8F:8A:7A:43:46:A5:72:3A:8C:88:FE:43:D8:01
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BkD52Dadj4p6Q0alcjqMiP5D2AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.86.0/23
91.200.12.0/23
95.81.121.0-95.81.122.255
103.71.20.0/23
104.128.130.0/24
104.128.133.0-104.128.135.255
109.69.62.0/23
132.243.16.0/22
135.136.178.0/23
135.136.190.0/24
157.228.138.0/23
157.228.182.0/23
157.228.191.0/24
185.105.88.0/22
185.128.104.0/22
IPv6:
2a0c:5d00:3013::/48
2a0c:5d00:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
6a:11:b2:4a:2f:e4:25:99:0d:a4:fe:cf:bd:04:47:00:68:a4:
26:b7:fd:af:80:5a:2c:79:a0:5f:be:ad:9f:10:7d:cc:cb:f4:
6f:f5:e5:9e:2e:f7:fd:34:78:e0:c0:2d:9b:86:3f:8e:24:0b:
3d:5a:4c:bd:1c:fc:b9:f9:b6:87:75:fd:1a:ce:b6:44:d3:61:
fb:87:63:01:b2:01:4b:ce:13:1a:31:04:c1:3f:96:65:71:d3:
01:e0:d9:22:d0:10:4c:d2:50:ad:29:ac:e9:45:b1:f1:2c:2b:
2c:84:76:8c:88:03:48:7d:88:0d:d6:18:e4:10:53:f7:49:0f:
61:c4:38:7a:8c:47:54:1a:b1:c9:8d:bd:5d:33:c9:64:9b:9c:
9d:2a:42:3f:c6:fe:75:0e:f8:e1:f7:80:b8:72:fd:04:75:f9:
e7:ba:54:ad:33:58:c0:ac:72:48:e9:fe:f8:25:d9:c9:07:f2:
78:df:ef:b6:b7:71:c9:8a:a5:3d:39:68:46:6d:2e:b1:2a:04:
8a:cd:7c:1e:bb:ac:b1:0b:5d:4e:4a:81:31:0e:4b:e5:21:07:
b5:fc:18:92:6f:17:58:1d:81:88:52:be:43:f6:cb:31:86:a0:
5d:ef:40:78:a4:b0:c7:1a:af:26:3b:56:2a:1e:f3:df:0c:37:
d2:4c:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:54:21 2026 by rpki-client