Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/24wC4Ajqb9prKD2nyb7xlGe1gEw.roa
File: 24wC4Ajqb9prKD2nyb7xlGe1gEw.roa (raw, json)
Hash identifier: 2iiIFfhhRE3KQqaMVplhLzqfuFf+pAGPrqLR0bVPTgs=
Subject key identifier: DB:8C:02:E0:08:EA:6F:DA:6B:28:3D:A7:C9:BE:F1:94:67:B5:80:4C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019DDE60A832EE06AFB656F616121F5A102C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/24wC4Ajqb9prKD2nyb7xlGe1gEw.roa
Signing time: Thu 30 Apr 2026 12:32:49 +0000
ROA not before: Thu 30 Apr 2026 12:32:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.9.12.0/24 maxlen: 24
45.9.13.0/24 maxlen: 24
45.9.14.0/24 maxlen: 24
45.9.15.0/24 maxlen: 24
45.9.16.0/24 maxlen: 24
45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.86.71.0/24 maxlen: 24
45.86.76.0/24 maxlen: 24
45.86.77.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.88.170.0/24 maxlen: 24
45.88.171.0/24 maxlen: 24
45.88.178.0/24 maxlen: 24
45.88.179.0/24 maxlen: 24
45.88.181.0/24 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.197.0/24 maxlen: 24
45.89.198.0/24 maxlen: 24
45.89.199.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
213.59.113.0/24 maxlen: 24
213.59.114.0/24 maxlen: 24
213.59.115.0/24 maxlen: 24
213.59.116.0/24 maxlen: 24
213.59.117.0/24 maxlen: 24
213.59.118.0/24 maxlen: 24
213.59.121.0/24 maxlen: 24
213.59.122.0/24 maxlen: 24
213.59.123.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:60:a8:32:ee:06:af:b6:56:f6:16:12:1f:5a:10:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Apr 30 12:32:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db8c02e008ea6fda6b283da7c9bef19467b5804c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b8:9d:a2:6a:f1:0f:ce:5f:9a:6c:f3:fb:23:
9c:a9:52:a4:6a:11:d9:c0:91:b9:c9:d2:b0:bf:1f:
68:82:2f:e7:92:3a:e8:f4:91:e5:3e:e7:8b:b7:e3:
f6:e8:21:34:b2:08:6d:f8:a1:16:e6:33:29:16:48:
89:0e:d9:fa:af:02:e7:c9:c2:44:00:95:68:24:94:
10:a2:e8:97:b9:9f:cd:e1:a4:7b:d7:24:5d:36:90:
94:b1:ca:2a:d7:84:69:a8:d8:ec:3c:4c:18:db:c6:
a3:56:4a:75:f3:18:04:9f:c1:18:5e:af:47:1b:b0:
39:32:7f:36:37:44:ec:6f:1e:7b:22:4b:f4:9a:49:
3f:db:a1:47:32:7e:7c:d0:62:9e:c9:bf:a1:61:bf:
1d:dd:66:08:b9:77:62:57:94:5d:b0:a0:93:67:de:
07:83:ee:b4:c8:04:a4:7c:6f:e3:37:c5:04:1b:2e:
96:d8:9f:dc:5e:04:09:44:ba:1b:84:a1:ba:9f:ec:
b6:a2:55:d5:28:06:72:1a:fa:26:f9:43:58:f8:e7:
de:e6:a9:8f:89:d9:c4:16:76:dd:9c:72:f0:54:1c:
7a:bf:83:3a:96:5f:75:e2:07:7e:d1:84:ec:a2:72:
e3:7c:f2:e7:98:28:d6:e4:b9:f4:1e:46:0d:23:38:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:02:E0:08:EA:6F:DA:6B:28:3D:A7:C9:BE:F1:94:67:B5:80:4C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/24wC4Ajqb9prKD2nyb7xlGe1gEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.12.0-45.9.16.255
45.12.112.0/23
45.12.128.0/24
45.15.153.0/24
45.83.27.0/24
45.83.84.0/22
45.83.150.0/23
45.86.71.0/24
45.86.76.0/22
45.88.168.0/22
45.88.178.0/23
45.88.181.0/24
45.89.96.0/24
45.89.98.0/24
45.89.197.0-45.89.199.255
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
171.22.128.0/24
185.106.97.0/24
185.161.71.0/24
213.59.113.0-213.59.118.255
213.59.121.0-213.59.125.255
Signature Algorithm: sha256WithRSAEncryption
cf:6e:a9:7c:77:1d:d8:e0:f3:3d:6b:d6:f6:f8:94:b4:d1:9d:
72:61:65:20:4f:45:0a:e0:3f:e2:05:a2:3c:76:f6:b2:ed:8d:
84:42:f1:bb:97:bb:3a:e5:9f:ee:16:5e:2a:16:08:a8:1e:8d:
68:53:01:cb:11:69:cc:86:de:d4:95:d5:6e:0b:44:d1:e1:95:
02:58:46:dc:7f:b2:d5:ca:93:c0:76:77:ed:48:e4:8f:e1:7a:
a0:08:99:28:55:97:fe:65:56:f4:4f:88:78:fa:e8:0a:96:aa:
8b:c8:8c:4c:1a:ac:7f:bd:86:bb:b9:a1:ad:4b:ae:d4:1b:fa:
70:51:5c:6d:5b:9e:f0:aa:b1:8b:15:0b:ea:95:b9:20:cc:f4:
3a:71:17:95:26:5a:c6:e1:9c:65:3b:98:60:db:43:cc:27:27:
0a:34:90:21:51:7d:59:2c:b5:eb:15:cc:d5:d5:8f:29:35:64:
fb:1a:9a:0b:b8:62:91:45:72:ed:ab:ec:3d:90:2b:17:5a:98:
79:cf:94:88:43:12:79:c2:bb:52:13:f0:76:86:38:aa:15:74:
db:8b:7c:cb:84:7d:7c:59:bb:8a:0a:ab:84:e4:2f:1e:12:91:
f8:84:91:66:77:19:a7:b6:73:00:41:50:bb:a3:b2:cd:fa:f1:
94:0e:6d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:06:21 2026 by rpki-client