Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/2hF8o3nRCJeM-T2KUqB72EQXa3E.roa
File: 2hF8o3nRCJeM-T2KUqB72EQXa3E.roa (raw, json)
Hash identifier: AMf4zC4JBXPeXIjLuCvMdhg4jyKKMdkmmnMx34J32GM=
Subject key identifier: DA:11:7C:A3:79:D1:08:97:8C:F9:3D:8A:52:A0:7B:D8:44:17:6B:71
Certificate issuer: /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial: 01A13541260F43F9095BA2C6B955909E90BB
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/2hF8o3nRCJeM-T2KUqB72EQXa3E.roa
Signing time: Tue 13 Oct 2026 12:33:44 +0000
ROA not before: Tue 13 Oct 2026 12:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.117.53.0/24 maxlen: 24
45.123.145.0/24 maxlen: 24
72.63.110.0/23 maxlen: 23
189.81.0.0/23 maxlen: 23
189.81.16.0/23 maxlen: 23
189.81.24.0/23 maxlen: 23
189.81.26.0/23 maxlen: 23
189.81.30.0/23 maxlen: 23
189.81.32.0/23 maxlen: 23
189.81.50.0/23 maxlen: 23
189.81.60.0/23 maxlen: 23
189.81.68.0/23 maxlen: 23
189.81.104.0/23 maxlen: 23
189.81.112.0/23 maxlen: 23
189.81.120.0/23 maxlen: 23
189.81.122.0/23 maxlen: 23
189.81.130.0/23 maxlen: 23
189.81.132.0/23 maxlen: 23
189.81.136.0/23 maxlen: 23
189.81.140.0/23 maxlen: 23
189.81.158.0/23 maxlen: 23
189.81.160.0/23 maxlen: 23
189.81.168.0/23 maxlen: 23
189.81.194.0/23 maxlen: 23
189.81.198.0/23 maxlen: 23
189.81.202.0/23 maxlen: 23
189.81.218.0/23 maxlen: 23
189.81.224.0/23 maxlen: 23
189.81.226.0/23 maxlen: 23
189.81.228.0/23 maxlen: 23
189.81.232.0/23 maxlen: 23
189.104.2.0/23 maxlen: 23
189.104.8.0/23 maxlen: 23
189.104.12.0/23 maxlen: 23
189.104.14.0/23 maxlen: 23
189.104.16.0/23 maxlen: 23
189.104.22.0/23 maxlen: 23
189.104.30.0/23 maxlen: 23
189.104.32.0/23 maxlen: 23
189.104.48.0/23 maxlen: 23
189.104.56.0/23 maxlen: 23
189.104.60.0/23 maxlen: 23
189.104.64.0/23 maxlen: 23
189.104.74.0/23 maxlen: 23
189.104.94.0/23 maxlen: 23
189.104.96.0/23 maxlen: 23
189.104.98.0/23 maxlen: 23
189.104.106.0/23 maxlen: 23
189.104.112.0/23 maxlen: 23
189.104.114.0/23 maxlen: 23
189.104.120.0/23 maxlen: 23
189.104.122.0/23 maxlen: 23
189.104.126.0/23 maxlen: 23
189.104.130.0/23 maxlen: 23
189.104.138.0/23 maxlen: 23
189.104.144.0/23 maxlen: 23
189.104.146.0/23 maxlen: 23
189.104.150.0/23 maxlen: 23
189.104.154.0/23 maxlen: 23
189.104.156.0/23 maxlen: 23
189.104.168.0/23 maxlen: 23
189.104.170.0/23 maxlen: 23
189.104.180.0/23 maxlen: 23
189.104.182.0/23 maxlen: 23
189.104.192.0/23 maxlen: 23
189.104.200.0/23 maxlen: 23
189.104.236.0/23 maxlen: 23
189.104.242.0/23 maxlen: 23
189.104.250.0/23 maxlen: 23
189.104.254.0/23 maxlen: 23
203.78.166.0/23 maxlen: 23
205.188.4.0/23 maxlen: 23
205.188.12.0/22 maxlen: 22
205.188.24.0/22 maxlen: 22
205.188.28.0/22 maxlen: 22
205.188.32.0/22 maxlen: 22
205.188.36.0/22 maxlen: 22
205.188.40.0/22 maxlen: 22
205.188.48.0/22 maxlen: 22
205.188.56.0/22 maxlen: 22
205.188.64.0/22 maxlen: 22
205.188.68.0/22 maxlen: 22
205.188.72.0/22 maxlen: 22
205.188.76.0/23 maxlen: 23
205.188.78.0/23 maxlen: 23
205.188.84.0/22 maxlen: 22
205.188.88.0/22 maxlen: 22
205.188.92.0/23 maxlen: 23
205.188.94.0/23 maxlen: 23
205.188.124.0/22 maxlen: 22
205.188.132.0/22 maxlen: 22
205.188.214.0/23 maxlen: 23
205.188.216.0/22 maxlen: 22
205.188.240.0/22 maxlen: 22
205.188.252.0/22 maxlen: 22
2a0d:3900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:41:26:0f:43:f9:09:5b:a2:c6:b9:55:90:9e:90:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
Validity
Not Before: Oct 13 12:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da117ca379d108978cf93d8a52a07bd844176b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:dc:71:cc:d9:6b:ea:93:83:93:1e:1a:90:00:
f9:c7:6c:6a:9b:db:f0:63:b0:be:99:0c:56:48:51:
4a:19:a1:3b:e0:d2:d0:d7:19:7f:32:1e:aa:49:a7:
9c:3f:13:fd:a7:eb:20:46:56:d6:c1:a8:ad:57:ed:
95:32:62:4e:67:04:02:d3:52:ae:3e:b6:06:32:d1:
b6:23:20:4d:3f:7b:ef:37:83:20:a1:82:87:72:e3:
53:fc:97:ad:0b:60:f8:f6:67:e7:7b:f4:99:1a:d3:
bb:79:26:99:4e:4c:99:88:c0:06:ae:a4:ec:f5:ca:
39:42:01:91:4d:17:63:24:bb:f1:0b:9e:42:9e:87:
59:e6:13:f1:e9:f3:86:1b:cc:a1:0b:09:39:ae:1d:
88:f5:54:81:33:4a:5c:71:d7:7a:e5:60:aa:91:84:
2c:57:32:c3:df:6c:56:0e:66:16:4d:4c:7f:96:bb:
93:7e:ff:dd:09:5d:9c:f0:46:2e:f2:1c:e0:e1:d9:
1d:53:f8:7e:d6:f8:3f:7a:19:bf:7d:85:ce:e5:a8:
fe:ae:6e:5f:e8:7c:26:99:56:c1:16:8f:6b:eb:7f:
18:9e:49:86:90:f7:01:92:a9:57:03:a8:57:33:3e:
8b:fa:16:87:5f:2c:e1:10:e7:ec:ac:38:14:21:4d:
b6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:11:7C:A3:79:D1:08:97:8C:F9:3D:8A:52:A0:7B:D8:44:17:6B:71
X509v3 Authority Key Identifier:
keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/2hF8o3nRCJeM-T2KUqB72EQXa3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.53.0/24
45.123.145.0/24
72.63.110.0/23
189.81.0.0/23
189.81.16.0/23
189.81.24.0/22
189.81.30.0-189.81.33.255
189.81.50.0/23
189.81.60.0/23
189.81.68.0/23
189.81.104.0/23
189.81.112.0/23
189.81.120.0/22
189.81.130.0-189.81.133.255
189.81.136.0/23
189.81.140.0/23
189.81.158.0-189.81.161.255
189.81.168.0/23
189.81.194.0/23
189.81.198.0/23
189.81.202.0/23
189.81.218.0/23
189.81.224.0-189.81.229.255
189.81.232.0/23
189.104.2.0/23
189.104.8.0/23
189.104.12.0-189.104.17.255
189.104.22.0/23
189.104.30.0-189.104.33.255
189.104.48.0/23
189.104.56.0/23
189.104.60.0/23
189.104.64.0/23
189.104.74.0/23
189.104.94.0-189.104.99.255
189.104.106.0/23
189.104.112.0/22
189.104.120.0/22
189.104.126.0/23
189.104.130.0/23
189.104.138.0/23
189.104.144.0/22
189.104.150.0/23
189.104.154.0-189.104.157.255
189.104.168.0/22
189.104.180.0/22
189.104.192.0/23
189.104.200.0/23
189.104.236.0/23
189.104.242.0/23
189.104.250.0/23
189.104.254.0/23
203.78.166.0/23
205.188.4.0/23
205.188.12.0/22
205.188.24.0-205.188.43.255
205.188.48.0/22
205.188.56.0/22
205.188.64.0/20
205.188.84.0-205.188.95.255
205.188.124.0/22
205.188.132.0/22
205.188.214.0-205.188.219.255
205.188.240.0/22
205.188.252.0/22
IPv6:
2a0d:3900::/29
Signature Algorithm: sha256WithRSAEncryption
46:ca:c0:81:1a:c1:93:b7:7c:51:ab:6b:38:7d:14:6c:91:ea:
37:15:83:a3:ac:0b:bb:88:c0:26:de:dd:59:2d:89:aa:39:da:
e6:d2:71:da:e8:2f:9a:7a:36:94:10:59:70:0c:e4:c6:2f:8b:
65:8d:97:c4:aa:97:7a:44:83:34:ba:73:fd:6f:8e:3e:5e:e8:
1b:b4:46:1a:c5:12:34:58:0d:83:ad:4a:74:62:21:d9:1e:bb:
18:cb:e6:5e:e6:8d:83:10:d2:d9:b5:fb:7f:87:a5:e8:2e:ae:
7b:de:dc:dc:8f:a9:6b:d3:64:e3:69:4f:fa:66:7a:d1:21:ac:
df:6e:85:e0:c3:dd:17:72:f4:f2:0f:90:39:c7:6e:6b:57:6f:
5b:21:fb:e9:e4:fa:f1:74:63:e0:84:c0:bb:ec:ac:ef:bf:8d:
2c:37:bf:18:26:e3:fb:5d:0b:96:d7:fa:60:1e:3e:d7:80:5a:
01:d7:1f:d2:cf:ad:34:c8:d1:02:6d:2c:b2:aa:d3:95:58:f9:
50:62:78:78:0f:6a:04:d1:cd:65:ad:c7:90:36:23:97:64:59:
b7:dd:54:2e:79:5e:2b:32:34:6c:ba:11:92:be:1e:b1:19:2a:
84:74:dc:c9:95:81:f1:a7:df:15:d9:ed:e1:8b:c0:86:1c:54:
87:03:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:07:52 2026 by rpki-client