Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KVbwZCi2ivY2zZ1JHVRmW5UJdGQ.roa
File: KVbwZCi2ivY2zZ1JHVRmW5UJdGQ.roa (raw, json)
Hash identifier: 0QImYQmyje6za7PNL/+Ub/Rhsy6yV1OzWeRqrUjmltI=
Subject key identifier: 29:56:F0:64:28:B6:8A:F6:36:CD:9D:49:1D:54:66:5B:95:09:74:64
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019FA06755357131EF79B47D0F1A7C52B40D
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KVbwZCi2ivY2zZ1JHVRmW5UJdGQ.roa
Signing time: Sun 26 Jul 2026 21:49:14 +0000
ROA not before: Sun 26 Jul 2026 21:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200740
IP address blocks: 45.134.12.0/23 maxlen: 23
45.134.14.0/23 maxlen: 23
80.76.32.0/23 maxlen: 23
80.76.34.0/23 maxlen: 23
89.44.84.0/23 maxlen: 23
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.118.8.0/23 maxlen: 23
95.81.77.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.94.0/23 maxlen: 23
95.81.112.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
103.249.132.0/23 maxlen: 23
103.249.134.0/23 maxlen: 23
104.128.131.0/24 maxlen: 24
104.128.138.0/23 maxlen: 23
104.128.142.0/23 maxlen: 23
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.56.0/23 maxlen: 23
109.69.58.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.184.0/23 maxlen: 23
135.136.184.0/24 maxlen: 24
135.136.185.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.132.0/23 maxlen: 23
157.228.132.0/24 maxlen: 24
157.228.133.0/24 maxlen: 24
185.103.252.0/23 maxlen: 23
185.103.254.0/23 maxlen: 23
185.114.72.0/23 maxlen: 23
193.239.160.0/23 maxlen: 23
193.239.166.0/23 maxlen: 23
2a0c:5d00:3002::/48 maxlen: 48
2a0c:5d00:3004::/48 maxlen: 48
2a0c:5d00:3005::/48 maxlen: 48
2a0c:5d00:3007::/48 maxlen: 48
2a0c:5d00:3008::/48 maxlen: 48
2a0c:5d00:3010::/48 maxlen: 48
2a0c:5d00:3012::/48 maxlen: 48
2a0c:5d00:ff08::/48 maxlen: 48
2a0c:5d00:ff09::/48 maxlen: 48
2a0c:5d00:ff0a::/48 maxlen: 48
2a0c:5d00:ff0b::/48 maxlen: 48
2a0c:5d00:ff0c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:67:55:35:71:31:ef:79:b4:7d:0f:1a:7c:52:b4:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jul 26 21:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2956f06428b68af636cd9d491d54665b95097464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:ce:d2:7c:1d:4a:73:ed:8c:48:71:38:94:
4d:76:69:f8:a3:7a:61:d8:ad:bb:50:02:58:ab:88:
76:20:9f:7c:3e:1c:6d:17:cd:9f:24:9e:e9:59:53:
9e:e3:b1:1d:67:3b:d0:11:23:59:1d:78:ca:5a:92:
ec:97:47:2e:5d:cc:3f:f5:88:ad:79:cb:ae:a5:77:
0e:16:b2:09:7a:e6:66:78:d6:de:1e:a1:82:0e:63:
76:5e:15:6b:bc:17:b1:4d:87:cf:32:21:2d:96:ca:
f3:27:d5:6d:c0:eb:18:9f:63:6e:87:f4:8c:f3:7b:
02:11:06:42:0c:ce:bd:72:fd:4f:34:29:45:49:a9:
57:be:96:15:29:f8:b7:16:9c:9a:6b:9f:24:99:d7:
c1:2a:57:5e:95:fa:08:43:d3:b5:ba:83:2b:4f:73:
38:27:b1:3e:a9:c9:7b:c0:0d:cd:58:37:46:37:65:
1d:27:81:8a:60:ca:98:53:8f:15:b3:1d:d3:e1:4a:
56:83:f9:64:b7:35:3a:ba:56:05:a6:9a:9f:27:31:
e7:a6:24:27:45:6a:bf:5d:52:8d:b3:37:da:00:94:
31:52:90:24:03:bd:4b:ae:1d:53:86:d0:eb:43:31:
9a:2f:7b:81:f5:92:a4:fa:c7:58:3d:47:74:3a:fb:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:F0:64:28:B6:8A:F6:36:CD:9D:49:1D:54:66:5B:95:09:74:64
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/KVbwZCi2ivY2zZ1JHVRmW5UJdGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/22
80.76.32.0/22
89.44.84.0/23
91.200.14.0/23
92.118.8.0/23
95.81.77.0/24
95.81.93.0-95.81.95.255
95.81.112.0/23
95.81.119.0-95.81.120.255
103.85.112.0/23
103.249.132.0/22
104.128.131.0/24
104.128.138.0/23
104.128.142.0/23
109.69.56.0/22
135.136.182.0-135.136.185.255
135.136.189.0/24
157.228.132.0/23
185.103.252.0/22
185.114.72.0/23
193.239.160.0/23
193.239.166.0/23
IPv6:
2a0c:5d00:3002::/48
2a0c:5d00:3004::/47
2a0c:5d00:3007::-2a0c:5d00:3008:ffff:ffff:ffff:ffff:ffff
2a0c:5d00:3010::/48
2a0c:5d00:3012::/48
2a0c:5d00:ff08::-2a0c:5d00:ff0c:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
34:46:5b:0e:69:9d:47:b2:00:a3:83:57:40:58:da:2b:f7:2e:
3e:a4:fd:dd:50:82:8f:3d:42:9a:23:b5:c4:2b:27:4c:21:51:
89:d0:c0:d2:19:a9:84:15:02:af:9b:a9:ce:09:e2:88:9f:23:
d9:8e:9d:02:e4:59:72:a5:cc:fc:fd:47:98:28:6f:d1:8c:4e:
d7:60:14:38:a9:38:46:01:09:99:6d:9e:a0:85:75:2e:6c:43:
84:cf:63:45:99:40:b3:eb:1f:d8:04:dc:81:47:97:98:bc:56:
30:1e:2c:3a:55:7e:87:f4:c8:23:b9:59:06:43:b6:45:0b:53:
a7:c7:84:90:45:11:be:16:cc:f6:d5:5e:8c:62:0b:8f:46:d3:
54:2f:6e:b6:ac:b1:2e:50:9d:45:7c:68:ee:0d:19:45:ca:6f:
63:1d:ba:b0:f9:df:27:7d:b1:09:65:df:b7:4e:49:8a:3b:1f:
20:a3:2f:f2:07:2f:91:76:85:be:2c:22:5b:54:99:d9:23:05:
72:5d:5b:7d:e5:14:6b:c4:63:f0:b7:a7:7e:38:30:f4:98:25:
70:67:38:f2:a3:5e:e0:74:29:89:ef:fe:e9:8e:3b:38:d2:9c:
7f:dd:df:06:a1:92:11:e6:c5:9e:b4:8b:c4:52:d8:2e:23:b5:
6c:4a:4c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:20:03 2026 by rpki-client