Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AneoVt5J1GkscbpG2e2zK7nqOyI.roa
File: AneoVt5J1GkscbpG2e2zK7nqOyI.roa (raw, json)
Hash identifier: qipe2+HOLpTF01cy6BYuRV8lKgBxNcDQcz+YLNG0wr0=
Subject key identifier: 02:77:A8:56:DE:49:D4:69:2C:71:BA:46:D9:ED:B3:2B:B9:EA:3B:22
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0F6E504F7B0198916D25B04CDF5F9688D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AneoVt5J1GkscbpG2e2zK7nqOyI.roa
Signing time: Thu 01 Oct 2026 09:56:39 +0000
ROA not before: Thu 01 Oct 2026 09:56:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.81.154.0/24 maxlen: 24
45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.227.174.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
195.34.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e5:04:f7:b0:19:89:16:d2:5b:04:cd:f5:f9:68:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 1 09:56:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0277a856de49d4692c71ba46d9edb32bb9ea3b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:99:54:90:b3:01:84:dd:12:f2:a3:49:85:
0e:e9:00:cc:0f:cd:77:67:41:18:be:59:33:be:3c:
de:26:8d:61:54:73:98:09:5f:9f:d5:1a:3c:73:c2:
c9:b0:d4:d3:3e:3d:9d:0f:b5:aa:d5:72:fc:57:11:
0e:55:17:98:4a:51:f2:38:71:22:6d:03:96:e7:6c:
28:7d:cd:6a:15:04:5d:f3:4c:a2:f6:5c:6b:6e:a1:
55:05:70:80:68:7b:f5:b0:79:a5:4f:af:50:3b:a1:
93:f3:85:4f:06:08:13:e0:54:f5:c4:7f:01:62:e7:
37:92:a5:37:d4:c6:42:d9:6b:3d:cd:3d:e8:fa:05:
9d:e4:9f:09:40:a1:29:f5:98:85:e6:63:4a:0a:7c:
1e:1d:92:69:16:b9:ca:a1:ab:39:10:d1:9c:dc:0e:
37:bc:d8:bc:55:b7:0a:c4:47:6a:81:02:08:09:cb:
1f:c6:8c:8f:29:9d:34:90:37:90:0f:83:c0:c9:ba:
69:44:4b:90:cc:4d:96:77:0f:45:c6:ee:a7:b0:66:
a1:37:5c:05:88:db:63:25:fa:fe:d1:ab:00:66:c9:
77:5c:99:3d:6f:de:fa:b6:17:10:a0:62:e0:cb:7a:
59:da:ce:b3:b6:19:1d:bd:d8:a6:d0:3f:87:14:1e:
d0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:77:A8:56:DE:49:D4:69:2C:71:BA:46:D9:ED:B3:2B:B9:EA:3B:22
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/AneoVt5J1GkscbpG2e2zK7nqOyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.227.174.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
195.34.67.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:92:2d:5a:63:8a:ce:61:48:dd:72:36:79:82:af:d2:5f:3b:
ab:f0:f7:35:32:26:90:e4:ce:3e:ff:e4:9e:1a:d7:b0:fe:fd:
73:e3:fe:97:6d:ce:56:c8:3d:9b:fe:98:45:49:13:78:08:b7:
b0:ca:d8:73:8e:5d:99:6d:df:b7:05:37:c2:46:06:37:f9:18:
df:9b:e2:a0:75:08:39:a2:65:98:c8:ee:96:a5:91:cd:95:e0:
ad:6a:c5:63:00:5f:68:58:55:03:76:f7:cc:f2:f3:05:d2:e5:
a4:08:e1:75:c5:e8:d5:d2:19:e7:21:46:27:b3:11:0f:9a:68:
72:98:8c:de:34:26:06:8f:35:8b:e6:5d:ba:d7:a2:ce:74:f0:
46:ef:50:67:ae:0d:be:d2:d7:22:50:a9:33:62:83:07:71:ed:
02:dc:64:a0:05:6c:71:51:12:23:35:a4:29:9c:f5:ae:0b:5f:
29:ac:61:0c:bf:27:94:66:f5:13:ac:98:0b:80:b0:bd:cd:e8:
3e:83:52:91:9a:7b:8e:9e:09:5b:4a:98:14:df:19:df:01:36:
10:2b:2c:9f:f4:43:e7:02:d5:3e:5e:2a:43:f8:ef:91:c3:7e:
37:34:b5:0b:10:59:42:ed:5f:9c:f1:8b:70:e6:55:84:fa:db:
4b:6b:df:35
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAaD25QT3sBmJFtJbBM31+WiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDAxMDk1NjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjc3YTg1NmRlNDlkNDY5MmM3MWJhNDZkOWVkYjMyYmI5ZWEzYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaOZVJCzAYTdEvKjSYUO6QDMD813
Z0EYvlkzvjzeJo1hVHOYCV+f1Ro8c8LJsNTTPj2dD7Wq1XL8VxEOVReYSlHyOHEi
bQOW52wofc1qFQRd80yi9lxrbqFVBXCAaHv1sHmlT69QO6GT84VPBggT4FT1xH8B
Yuc3kqU31MZC2Ws9zT3o+gWd5J8JQKEp9ZiF5mNKCnweHZJpFrnKoas5ENGc3A43
vNi8VbcKxEdqgQIICcsfxoyPKZ00kDeQD4PAybppREuQzE2Wdw9Fxu6nsGahN1wF
iNtjJfr+0asAZsl3XJk9b976thcQoGLgy3pZ2s6zthkdvdim0D+HFB7QZwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAJ3qFbeSdRpLHG6Rtntsyu56jsiMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQW5lb1Z0NUoxR2tzY2JwRzJlMnpLN25xT3lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojCBnwQCAAEwgZgDBAAt
UZoDBAAtlsMDBAAtn08DBAC5eQwDBAC5eQ8DBAC5xCkDBAC50poDBAG52hADBAC5
2hMDBAC53PkDBAC53RYDBAC531IDBAC5464DBAC55EgDBAC56M0wDAMEALnsGQME
ArnsGAMEALnweAMEAbn1IgMEALn6tAMEAMERtAMEAMERtwMEAMIFQQMEAMIwjgME
AMMiQzANBgkqhkiG9w0BAQsFAAOCAQEAXZItWmOKzmFI3XI2eYKv0l87q/D3NTIm
kOTOPv/knhrXsP79c+P+l23OVsg9m/6YRUkTeAi3sMrYc45dmW3ftwU3wkYGN/kY
35vioHUIOaJlmMjulqWRzZXgrWrFYwBfaFhVA3b3zPLzBdLlpAjhdcXo1dIZ5yFG
J7MRD5pocpiM3jQmBo81i+ZduteiznTwRu9QZ64NvtLXIlCpM2KDB3HtAtxkoAVs
cVESIzWkKZz1rgtfKaxhDL8nlGb1E6yYC4Cwvc3oPoNSkZp7jp4JW0qYFN8Z3wE2
ECssn/RD5wLVPl4qQ/jvkcN+NzS1CxBZQu1fnPGLcOZVhPrbS2vfNQ==
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:16 2026 by rpki-client