Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/VbATSa43xr_xggoShZAYs-KqTqM.roa
File: VbATSa43xr_xggoShZAYs-KqTqM.roa (raw, json)
Hash identifier: f4eiSTbI/p7kaFwIM47SWFT+n9GeVLtiCsCjZ07Q9F8=
Subject key identifier: 55:B0:13:49:AE:37:C6:BF:F1:82:0A:12:85:90:18:B3:E2:AA:4E:A3
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A07C0DD556CAFA0022B9FE85E24A2D8C94
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/VbATSa43xr_xggoShZAYs-KqTqM.roa
Signing time: Mon 07 Sep 2026 13:27:56 +0000
ROA not before: Mon 07 Sep 2026 13:27:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207569
IP address blocks: 46.243.1.0/24 maxlen: 24
46.243.4.0/24 maxlen: 24
46.243.6.0/24 maxlen: 24
89.44.86.0/24 maxlen: 24
95.81.79.0/24 maxlen: 24
95.81.113.0/24 maxlen: 24
95.81.126.0/24 maxlen: 24
95.81.127.0/24 maxlen: 24
103.71.22.0/24 maxlen: 24
103.71.23.0/24 maxlen: 24
103.85.114.0/24 maxlen: 24
103.85.115.0/24 maxlen: 24
104.128.132.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
104.128.136.0/24 maxlen: 24
104.128.137.0/24 maxlen: 24
104.128.138.0/24 maxlen: 24
104.128.139.0/24 maxlen: 24
104.128.140.0/24 maxlen: 24
104.128.141.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.24.0/24 maxlen: 24
132.243.25.0/24 maxlen: 24
135.136.176.0/24 maxlen: 24
135.136.177.0/24 maxlen: 24
135.136.186.0/24 maxlen: 24
135.136.187.0/24 maxlen: 24
157.228.142.0/24 maxlen: 24
157.228.143.0/24 maxlen: 24
157.228.146.0/23 maxlen: 23
157.228.146.0/24 maxlen: 24
157.228.147.0/24 maxlen: 24
157.228.184.0/23 maxlen: 23
157.228.184.0/24 maxlen: 24
157.228.185.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
2a0c:5d00:1002::/48 maxlen: 48
2a0c:5d00:2002::/48 maxlen: 48
2a0c:5d06:2002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:0d:d5:56:ca:fa:00:22:b9:fe:85:e2:4a:2d:8c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 7 13:27:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55b01349ae37c6bff1820a12859018b3e2aa4ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:fe:c3:53:ee:7a:a0:c5:98:ba:16:ff:e3:
3b:47:fe:5a:00:15:0e:32:3c:5d:13:c2:b5:cc:61:
2a:75:39:60:5a:c3:25:a3:ca:32:76:cf:35:03:4b:
69:99:27:e7:e9:e2:4d:2d:56:cd:0c:68:15:0c:1b:
50:7b:b1:17:66:b0:43:40:aa:bc:56:25:c7:7e:e5:
ff:9d:ba:7b:21:8a:ca:1a:0d:f2:70:78:59:24:9b:
44:93:26:f8:3c:72:1b:b8:f2:f5:9d:32:47:89:88:
db:e4:77:a8:7d:58:c4:15:61:f7:75:e1:53:b2:43:
34:dc:5a:56:16:01:6d:f1:e5:80:c0:e8:17:2d:d0:
ff:92:b2:66:a4:91:33:85:7e:ba:97:c5:b2:5b:fe:
a3:f1:a5:f6:80:0a:09:c1:8e:80:9b:27:6d:29:0b:
3f:18:34:c2:f6:14:2a:dc:d4:a4:14:2a:82:57:e1:
42:ad:6f:55:42:a8:0a:4b:ee:52:34:9b:41:c1:30:
92:8e:8a:8d:d8:68:1e:d2:22:f2:16:37:fc:22:64:
f4:18:85:6f:02:11:d8:14:c5:24:9b:2a:04:1d:c0:
44:20:b8:74:a2:d3:01:2e:31:43:16:2a:7e:2e:8b:
b0:40:d1:ab:d1:09:49:93:43:0a:64:91:54:97:ae:
75:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B0:13:49:AE:37:C6:BF:F1:82:0A:12:85:90:18:B3:E2:AA:4E:A3
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/VbATSa43xr_xggoShZAYs-KqTqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.1.0/24
46.243.4.0/24
46.243.6.0/24
89.44.86.0/24
95.81.79.0/24
95.81.113.0/24
95.81.126.0/23
103.71.22.0/23
103.85.114.0/23
104.128.132.0-104.128.143.255
109.69.61.0/24
132.243.24.0/23
135.136.176.0/23
135.136.186.0/23
157.228.142.0/23
157.228.146.0/23
157.228.184.0/23
185.37.195.0/24
IPv6:
2a0c:5d00:1002::/48
2a0c:5d00:2002::/48
2a0c:5d06:2002::/48
Signature Algorithm: sha256WithRSAEncryption
aa:63:e3:b6:ea:c9:6f:d0:d1:14:30:8f:09:e3:8c:a2:a9:e7:
81:f2:4e:28:59:d9:ee:12:f6:c1:02:0b:c6:e7:12:84:b6:28:
4c:5d:f3:58:72:e0:e7:ba:f3:a1:5a:0e:bc:09:9b:18:6f:d4:
7e:7a:65:ab:0a:81:65:cc:b8:0a:6b:71:b9:0f:4d:a7:f9:72:
7b:b4:32:5d:6f:43:55:1a:b9:e5:f7:8d:f3:ae:10:84:2a:9b:
8c:68:fa:2a:1c:69:c1:51:cc:43:2d:aa:af:3d:d8:bc:e1:d4:
96:96:cb:7b:01:7a:9e:de:dd:2b:c2:4a:ee:e3:71:ea:79:be:
a3:56:e7:e7:f7:13:63:d7:17:f7:74:1e:50:00:8e:4f:eb:0c:
24:90:bd:c7:a9:93:f2:3c:6b:90:11:43:52:79:e3:7c:53:55:
72:ff:73:94:ea:db:b4:6d:38:f7:a7:28:eb:b2:85:d3:81:f2:
d4:ec:44:ce:90:2e:b5:1f:e5:f5:5d:3f:11:f9:4b:17:60:3d:
66:b6:dd:66:71:c0:49:65:77:3a:9a:bc:d0:27:d1:db:af:85:
85:96:10:3e:b6:52:9a:98:04:76:eb:70:cb:eb:4b:b4:22:ed:
15:3d:51:e0:c3:4f:2a:d7:24:1a:5c:a2:4e:dd:2c:9f:ee:58:
ab:97:7d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:00:15 2026 by rpki-client