Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/gBc_ZN4jcpB3k5bsEPiUgdfatxQ.roa
File: gBc_ZN4jcpB3k5bsEPiUgdfatxQ.roa (raw, json)
Hash identifier: y2XulVt8OQfyX7bbNrULXyrX790u45FVtecWpPDsEHE=
Subject key identifier: 80:17:3F:64:DE:23:72:90:77:93:96:EC:10:F8:94:81:D7:DA:B7:14
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A0A047AF5A9E572D144806514AE72B0F77
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/gBc_ZN4jcpB3k5bsEPiUgdfatxQ.roa
Signing time: Mon 14 Sep 2026 14:17:27 +0000
ROA not before: Mon 14 Sep 2026 14:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
104.128.128.0/24 maxlen: 24
104.128.129.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
132.243.26.0/24 maxlen: 24
157.228.140.0/24 maxlen: 24
157.228.141.0/24 maxlen: 24
157.228.144.0/24 maxlen: 24
157.228.145.0/24 maxlen: 24
157.228.186.0/24 maxlen: 24
185.37.195.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5d00:2001::/48 maxlen: 48
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:47:af:5a:9e:57:2d:14:48:06:51:4a:e7:2b:0f:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 14 14:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80173f64de237290779396ec10f89481d7dab714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:d8:69:c1:ee:78:93:73:31:3b:a4:96:f4:
be:cb:9b:76:00:c3:0a:48:67:e6:90:0a:1c:1e:23:
45:26:54:9d:b6:b2:a1:c6:8a:54:f1:31:59:39:c2:
91:af:5b:bf:d5:4e:d8:ab:62:0e:0e:24:e7:70:91:
9e:34:53:82:76:d8:ca:a4:41:a8:88:2e:8c:5a:74:
1c:75:b8:bd:28:cb:9b:f1:77:75:bc:ec:8d:50:b1:
1d:82:da:5e:a9:cc:b5:8f:9c:40:c3:1e:7d:68:87:
c0:71:8f:7e:79:29:61:cd:1c:0d:09:a3:b7:48:91:
35:e7:83:6a:bb:35:d4:c4:de:1c:9a:ea:27:59:00:
16:3c:9e:ea:b9:ca:39:e8:d7:bc:5b:88:58:41:12:
6e:e0:fd:cd:7b:c6:34:ad:5b:15:c3:ed:56:0a:3d:
d6:1c:df:1a:45:2f:07:92:5b:52:4e:30:e8:77:e3:
8f:7f:d1:42:e6:9e:5d:59:7a:86:89:ed:1d:15:41:
9c:83:10:0b:5d:b8:db:70:f7:77:c5:34:cb:4b:40:
22:6b:0a:24:6a:c4:10:b4:8f:c8:40:af:9b:0d:bc:
69:25:43:13:d1:36:3d:f4:d3:4c:36:da:e1:b9:dd:
c6:50:1e:99:c8:8b:bd:c5:07:e1:a2:96:cf:b0:73:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:3F:64:DE:23:72:90:77:93:96:EC:10:F8:94:81:D7:DA:B7:14
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/gBc_ZN4jcpB3k5bsEPiUgdfatxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.14.0/23
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
103.82.103.0/24
104.128.128.0/23
109.69.60.0/24
132.243.26.0/24
157.228.140.0/23
157.228.144.0/23
157.228.186.0/24
185.37.195.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0c:5d00:2001::/48
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
b5:d8:b3:60:71:6f:c5:d4:c5:44:7f:49:1a:86:f4:ea:f6:22:
39:f4:14:cf:57:25:46:78:f3:78:c2:ce:4c:46:23:61:0b:99:
1b:e2:61:3f:6b:9d:4c:54:07:78:46:79:3a:9f:b9:dd:60:03:
5e:d5:34:04:7e:bb:bc:05:d2:93:a1:c4:0f:93:e8:06:b6:d8:
4b:3a:ec:5f:13:03:03:0c:22:78:a8:d7:64:21:b4:a7:27:83:
5f:0b:a5:cf:9c:bb:53:4d:90:6f:a0:40:df:9d:3c:4e:0a:aa:
67:a8:e2:8c:12:60:5d:a5:ab:3a:96:a9:17:a3:fe:55:0b:d8:
28:2f:b9:2a:21:b5:c1:e7:c5:8a:3d:8c:1b:b4:6f:15:81:09:
97:02:5e:30:e3:f2:ae:e1:cf:a3:8d:2f:44:7c:e5:6a:4e:eb:
05:0e:7e:4e:61:4a:01:77:2f:40:48:b9:9e:0a:12:a3:71:29:
ba:ad:5c:7c:52:7b:ad:ef:16:64:b8:be:d0:fc:57:73:66:32:
6c:62:43:2d:e2:1c:6c:0a:71:a7:2b:d3:2a:ba:cf:1b:e9:e6:
cc:9a:01:7f:75:f4:ee:2a:18:28:14:55:fd:51:c6:28:15:c4:
4f:e4:11:b9:f8:6e:bf:3c:5b:22:78:ce:cc:64:3e:e2:97:80:
08:c6:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:07 2026 by rpki-client