Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-KT0eNpGCixHZi9U48DNDkpqRDQ.roa
File: 1-KT0eNpGCixHZi9U48DNDkpqRDQ.roa (raw, json)
Hash identifier: PNCVwMIxNMOO5Zfa1XPzpkF4KoQdwmsipdtzEL+QCYU=
Subject key identifier: F8:A4:F4:78:DA:46:0A:2C:47:66:2F:54:E3:C0:CD:0E:4A:6A:44:34
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019CD7B1AD4E44BD917450E532792149EEE5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-KT0eNpGCixHZi9U48DNDkpqRDQ.roa
Signing time: Tue 10 Mar 2026 12:21:11 +0000
ROA not before: Tue 10 Mar 2026 12:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:b1:ad:4e:44:bd:91:74:50:e5:32:79:21:49:ee:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 10 12:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8a4f478da460a2c47662f54e3c0cd0e4a6a4434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:d6:e5:0a:ea:57:cd:69:3a:1c:f3:40:e7:
75:eb:3c:57:1e:cb:a0:c0:e4:61:d5:1c:7b:d7:a0:
f8:75:ca:a6:44:47:2b:2c:df:41:1d:f0:07:fa:85:
1e:98:b4:c8:08:37:23:1a:35:8d:44:14:9e:4b:15:
a6:c1:20:42:2f:62:4f:4c:73:ea:8a:c6:42:e6:21:
cd:6e:33:74:ac:ab:fb:e6:fb:7f:a8:97:95:b2:74:
0a:fb:eb:ef:90:6f:7c:b3:ac:7b:10:4e:39:32:34:
cf:6c:22:a1:2d:ec:71:03:9c:d0:91:e3:9b:71:f0:
2e:bc:e9:aa:37:f5:d2:ad:24:53:09:7b:c1:ae:92:
39:a4:3c:79:3b:40:c2:03:3b:d2:fe:bb:63:f3:9f:
5e:1c:14:cd:03:fa:3c:40:bb:c5:4c:22:ae:19:84:
f9:df:8d:e8:4b:ad:d5:9b:df:fb:c9:4e:43:77:e8:
42:b3:bc:52:c5:56:54:b0:77:f7:fa:fc:f2:20:e6:
15:d5:ca:3f:53:f5:76:82:fe:47:81:c1:a5:37:ed:
00:53:20:72:f5:c2:94:c3:87:d1:c6:60:b2:8a:d5:
17:5f:63:1b:ed:d3:1e:c8:e5:72:98:8d:41:4f:0a:
e7:ae:82:a7:03:97:c7:c4:2d:fb:48:e4:8c:70:c9:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A4:F4:78:DA:46:0A:2C:47:66:2F:54:E3:C0:CD:0E:4A:6A:44:34
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-KT0eNpGCixHZi9U48DNDkpqRDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.210.235.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.226.104.0/23
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.67.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
60:23:5a:42:bf:ed:0f:72:a4:f1:ac:06:e8:98:ff:33:45:36:
33:5b:14:4b:97:8b:14:b8:af:75:34:6e:78:12:2d:ff:a9:0c:
32:5a:db:2d:31:15:a1:e8:c7:9e:13:1f:8a:c5:23:06:5f:b3:
e0:6a:93:cf:96:63:8e:98:70:3b:d7:e3:27:67:92:7b:b4:32:
eb:b7:c9:e5:3d:28:4f:7e:00:d6:db:92:f2:9d:20:d2:f6:2a:
37:87:87:c3:c0:eb:93:5c:19:8e:fc:d4:4a:ed:60:83:7e:d9:
92:9f:89:d4:ac:ea:3c:2b:87:76:b4:39:88:bb:41:9e:7f:ef:
93:8a:db:0c:b0:76:55:06:35:86:40:7e:dc:38:3b:a8:0a:79:
23:17:8d:c8:be:44:aa:5b:f4:af:86:70:70:40:54:fb:ab:69:
8a:a8:11:88:b2:c5:c0:91:9b:43:83:9e:7a:9e:29:3f:1d:bf:
72:60:e1:b3:fd:9d:ec:e9:5d:4a:7e:bf:ac:43:48:7f:94:66:
0f:89:1f:45:71:5a:0e:17:e3:31:41:70:8a:98:8f:76:c6:57:
f0:0f:53:bc:6a:12:e3:c2:e6:24:1e:59:01:5a:ac:70:9a:da:
f6:da:0c:a6:81:c2:32:da:70:14:3a:8b:6a:a7:1a:31:51:26:
5c:41:d8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:07:42 2026 by rpki-client