Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/J3vcRzoLZZIb0ZQHi9qyBnsKJPs.roa
File: J3vcRzoLZZIb0ZQHi9qyBnsKJPs.roa (raw, json)
Hash identifier: Lm1oUtDUmgw3vhJ43CSkMIHIudD1+gecZtQDjLiPXjw=
Subject key identifier: 27:7B:DC:47:3A:0B:65:92:1B:D1:94:07:8B:DA:B2:06:7B:0A:24:FB
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D6BC44DC1D5DDCC49D128EE9CD7AF66E9
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/J3vcRzoLZZIb0ZQHi9qyBnsKJPs.roa
Signing time: Wed 08 Apr 2026 06:25:20 +0000
ROA not before: Wed 08 Apr 2026 06:25:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
95.81.79.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.126.0/24 maxlen: 24
95.81.127.0/24 maxlen: 24
103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.85.114.0/24 maxlen: 24
103.85.115.0/24 maxlen: 24
104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.138.0/24 maxlen: 24
104.128.139.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
132.243.24.0/24 maxlen: 24
132.243.25.0/24 maxlen: 24
135.136.176.0/24 maxlen: 24
135.136.177.0/24 maxlen: 24
135.136.186.0/24 maxlen: 24
135.136.187.0/24 maxlen: 24
2a0c:5d00:1002::/48 maxlen: 48
2a0c:5d00:2002::/48 maxlen: 48
2a0c:5d06:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:c4:4d:c1:d5:dd:cc:49:d1:28:ee:9c:d7:af:66:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Apr 8 06:25:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277bdc473a0b65921bd194078bdab2067b0a24fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:03:8e:a8:b7:ae:1c:bb:f7:c5:27:08:4e:
98:65:00:56:4b:d9:d0:85:1e:32:42:76:b0:93:5a:
b0:f6:a3:21:6b:ea:e5:b1:6b:4b:f4:75:4a:1a:76:
d7:4c:25:93:4f:8e:92:f9:1b:19:4c:d5:59:19:23:
10:b9:e8:d2:1d:4a:b0:2d:66:04:91:77:d3:6b:7d:
96:fe:1a:c4:b8:9c:b4:d8:e6:5c:f6:28:66:db:87:
f5:55:36:12:30:be:68:29:46:94:6f:9d:f1:3d:b4:
e8:b2:fe:63:36:09:33:5a:e2:26:bb:64:0e:95:d7:
17:fa:6d:63:bf:5c:18:99:81:41:d2:17:5f:25:87:
54:2a:02:cd:7a:ff:df:a3:58:ea:69:a8:f4:bf:51:
d1:a4:1c:c1:5e:e5:e1:9a:2c:69:5c:86:5a:80:62:
c1:ad:09:51:43:82:f2:53:de:c9:dc:57:18:d5:ff:
1e:40:c3:36:c2:80:91:4a:72:cf:cd:f9:b9:ae:46:
f0:75:6b:80:eb:8a:2c:58:98:39:f9:bd:8f:f7:f9:
a7:37:3c:30:1a:23:02:e6:ef:fe:b0:87:d6:1c:c8:
0d:0c:9d:cf:ec:ea:ea:72:7b:82:77:de:4d:f9:86:
c4:ab:67:04:b3:f7:cb:d0:8e:e2:d7:53:fe:0a:38:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7B:DC:47:3A:0B:65:92:1B:D1:94:07:8B:DA:B2:06:7B:0A:24:FB
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/J3vcRzoLZZIb0ZQHi9qyBnsKJPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.86.0/24
95.81.79.0/24
95.81.113.0/24
95.81.126.0/23
103.71.22.0/23
103.85.114.0/23
104.128.132.0-104.128.143.255
132.243.24.0/23
135.136.176.0/23
135.136.186.0/23
IPv6:
2a0c:5d00:1002::/48
2a0c:5d00:2002::/48
2a0c:5d06:2002::/48
Signature Algorithm: sha256WithRSAEncryption
07:af:45:5f:1d:e6:59:bd:1c:fd:f9:6d:78:38:c3:cd:ab:8e:
f8:5a:c1:7c:5e:12:06:49:92:38:ee:c5:3b:79:d4:5c:0b:a9:
fa:fc:fa:e7:cf:18:e1:0d:cf:db:88:9d:36:e0:12:63:f2:76:
02:35:7a:74:92:7b:36:f7:24:5f:57:c9:0a:56:55:f5:56:d9:
bf:28:04:57:64:a6:14:72:94:2f:e2:46:d1:74:46:11:ad:68:
39:ab:2e:77:17:b7:b3:e2:cc:84:db:c3:7e:e8:00:ca:27:4c:
7c:2a:ad:ee:8c:04:5b:7a:4e:e3:4b:e8:ea:f2:97:f5:38:c8:
c9:93:e4:db:ff:ad:11:a5:44:60:15:27:51:5f:a7:38:65:20:
a8:23:66:77:d8:89:fd:70:64:d4:60:30:a6:90:20:d4:00:41:
81:93:b5:33:51:bb:9f:a0:99:ef:08:6f:91:5e:f0:42:19:82:
e3:8b:26:89:0d:71:dc:84:75:6f:62:71:fc:23:ea:0b:bd:bb:
12:95:b0:35:52:a2:a0:5b:85:e3:58:4f:49:af:19:ac:15:c2:
60:68:72:31:5c:ef:7b:ba:c0:6c:57:8e:11:ec:e9:35:82:5a:
9e:49:59:79:ef:37:5b:08:e7:83:07:4c:04:7e:52:42:af:ec:
0d:80:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:28:12 2026 by rpki-client