Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZFugbepKYTyLHjNQ_A_Spcy85fw.roa
File: ZFugbepKYTyLHjNQ_A_Spcy85fw.roa (raw, json)
Hash identifier: Lpy9yyaswfsBLVkwAC3kl/YWo2ay9+3uy935D949Kvg=
Subject key identifier: 64:5B:A0:6D:EA:4A:61:3C:8B:1E:33:50:FC:0F:D2:A5:CC:BC:E5:FC
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019EEEC4C7A6B0E3F75B9EFA2D451FC76741
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZFugbepKYTyLHjNQ_A_Spcy85fw.roa
Signing time: Mon 22 Jun 2026 09:58:54 +0000
ROA not before: Mon 22 Jun 2026 09:58:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208258
IP address blocks: 45.141.204.0/23 maxlen: 24
45.144.244.0/23 maxlen: 24
45.144.246.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.156.0/24 maxlen: 24
45.151.158.0/24 maxlen: 24
45.151.159.0/24 maxlen: 24
45.154.238.0/24 maxlen: 24
45.154.239.0/24 maxlen: 24
45.159.192.0/23 maxlen: 23
45.159.194.0/24 maxlen: 24
109.206.248.0/22 maxlen: 22
185.208.208.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.228.80.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.232.85.0/24 maxlen: 24
185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
195.88.226.0/23 maxlen: 23
213.185.86.0/23 maxlen: 23
213.185.88.0/22 maxlen: 22
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:7::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0b:3c40:14::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0b:3c40:25::/48 maxlen: 48
2a0b:3c40:f1::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:c4:c7:a6:b0:e3:f7:5b:9e:fa:2d:45:1f:c7:67:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jun 22 09:58:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=645ba06dea4a613c8b1e3350fc0fd2a5ccbce5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:3c:16:59:97:8f:54:91:e8:38:55:e6:46:
2b:eb:58:a9:31:26:6b:7b:c9:16:00:e0:e9:c5:73:
df:fb:f2:a5:5e:45:a8:f3:29:f5:c0:16:b9:a8:96:
93:08:da:22:d0:3a:c2:2c:85:78:cb:65:e9:ae:21:
1a:97:91:52:16:a5:fe:85:2b:78:9c:0e:b8:69:a6:
bb:42:96:5d:b6:30:7d:79:8d:e2:50:6a:84:02:15:
fc:df:34:ca:37:dc:5d:82:10:84:a9:78:ca:40:76:
5f:fa:a0:2d:85:5a:db:45:c0:15:d0:48:ad:dc:31:
56:7a:44:e1:4a:ca:6f:59:8c:e0:6c:04:19:6c:84:
61:0d:66:46:b6:5b:36:13:8a:13:52:e2:73:56:c7:
05:bd:ca:f5:8d:be:e3:42:33:8e:5a:60:95:ae:4b:
cb:3b:c2:16:e5:3b:51:26:d4:fd:cd:4d:e7:d4:dc:
fb:60:c2:63:51:9c:78:fc:83:9d:f8:cd:4f:08:42:
78:f2:44:f8:97:f1:15:8d:5c:62:07:5a:6b:fe:5b:
40:f1:f2:26:a6:61:d7:5f:29:37:1f:53:0c:b3:30:
51:45:52:cd:6f:59:1b:0a:e0:31:3f:36:2d:32:61:
93:fa:f6:ed:6a:f2:c7:ab:c3:4f:c8:36:a9:8c:ed:
ab:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5B:A0:6D:EA:4A:61:3C:8B:1E:33:50:FC:0F:D2:A5:CC:BC:E5:FC
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZFugbepKYTyLHjNQ_A_Spcy85fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
45.144.244.0-45.144.246.255
45.151.156.0/22
45.154.238.0/23
45.159.192.0-45.159.194.255
109.206.248.0/22
185.208.208.0/24
185.208.210.0/24
185.227.82.0/24
185.228.80.0/24
185.228.83.0/24
185.232.85.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/23
195.88.226.0/23
213.185.86.0-213.185.91.255
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:7::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:14::/46
2a0b:3c40:20::/47
2a0b:3c40:25::/48
2a0b:3c40:f1::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
67:b6:7f:b7:c4:5a:b6:65:90:0c:3e:fd:db:49:35:b7:d1:89:
d1:17:6c:f7:7d:b5:81:be:15:a3:d0:53:68:10:df:70:10:a4:
6d:e7:97:22:d6:5e:23:b3:73:07:3c:eb:02:ae:5b:58:62:6a:
1c:64:a4:1a:b4:1f:59:18:95:d5:c7:d3:18:d2:d9:fa:9c:77:
84:76:23:f3:39:25:d3:5f:3a:2f:e0:3a:b6:9e:b0:0b:b7:6d:
69:54:22:76:42:94:cb:9c:71:ab:c9:e6:c0:2a:ac:ea:89:06:
d9:00:a8:70:19:89:34:19:d2:6e:97:75:4c:62:95:ae:f3:a0:
69:e6:0c:db:ed:4e:17:39:a1:ee:0b:94:02:ff:df:71:6b:9f:
23:78:5d:7c:bb:5e:2e:ed:0a:a2:51:ab:3d:da:2d:dc:cf:71:
23:eb:da:09:cc:44:ff:50:00:8d:96:95:5c:d3:67:4f:75:52:
f0:e0:ff:e1:e5:61:0e:30:f8:60:60:bc:07:50:82:be:57:18:
7f:03:73:10:64:0b:06:06:b8:fd:be:71:d5:fc:b9:82:d1:35:
60:d4:9e:11:38:5f:1e:06:a4:40:6c:85:23:31:4b:d4:69:f1:
90:6b:2c:38:d5:6e:47:91:21:d7:57:2e:82:c4:42:97:e4:8e:
46:bc:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:50 2026 by rpki-client