Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C802HAZd0cn8p-_xvfiuNbKQaEw.roa
File: C802HAZd0cn8p-_xvfiuNbKQaEw.roa (raw, json)
Hash identifier: E+jkNGsK9yMdW1iMDk6Ciq4vRX6CxtEinXdkIVXkKZs=
Subject key identifier: 0B:CD:36:1C:06:5D:D1:C9:FC:A7:EF:F1:BD:F8:AE:35:B2:90:68:4C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A17EE20BBD9129EE6D610AA11F9AB4148C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C802HAZd0cn8p-_xvfiuNbKQaEw.roa
Signing time: Tue 27 Oct 2026 19:41:45 +0000
ROA not before: Tue 27 Oct 2026 19:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 45.90.236.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.236.24.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.240.121.0/24 maxlen: 24
185.250.181.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/23 maxlen: 24
194.48.143.0/24 maxlen: 24
194.76.168.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.210.0/24 maxlen: 24
194.124.211.0/24 maxlen: 24
194.146.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:e2:0b:bd:91:29:ee:6d:61:0a:a1:1f:9a:b4:14:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 27 19:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bcd361c065dd1c9fca7eff1bdf8ae35b290684c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6b:87:f0:b4:97:26:10:4d:c7:8e:09:f0:ea:
e6:f5:f5:f1:62:70:ab:86:42:5e:97:3e:7a:08:6c:
74:89:20:9e:c4:3f:9e:70:c9:d2:8c:96:13:63:ca:
f0:47:fc:a6:55:f2:69:04:0e:44:72:8e:b6:2f:b0:
fc:1a:da:fd:1a:e0:00:c6:de:3f:59:09:0a:df:d4:
07:04:1a:0a:2e:6b:7f:24:18:18:0c:77:88:13:70:
7d:a0:81:04:d8:cb:be:08:9a:3d:47:db:f5:a5:c4:
38:cf:b2:88:68:b1:d5:a1:34:8c:a7:cf:65:e4:78:
10:46:50:57:43:7b:51:86:c0:d1:57:49:4d:35:18:
b7:96:ba:2b:5a:da:17:92:bd:ce:a0:0b:ec:34:72:
81:a5:71:5d:d0:e0:2a:cf:c0:cb:b9:e8:fa:55:8e:
d0:e6:eb:32:b5:62:a5:da:ed:ad:5d:06:d3:5f:9c:
e6:d2:e0:d9:f3:c9:42:7f:fa:ff:dd:6a:a6:66:49:
ea:2f:20:66:18:66:c3:77:cd:53:4f:58:c9:d9:18:
3f:c3:1e:4b:22:26:2a:61:22:ff:cd:1c:60:83:87:
b5:a1:96:db:29:2a:af:e1:52:74:8f:e3:cd:da:32:
77:ea:94:f5:99:e2:e2:66:65:11:fb:8b:b5:18:f7:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:36:1C:06:5D:D1:C9:FC:A7:EF:F1:BD:F8:AE:35:B2:90:68:4C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/C802HAZd0cn8p-_xvfiuNbKQaEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/24
45.131.135.0/24
185.121.13.0-185.121.14.255
185.196.41.0/24
185.199.158.0/24
185.202.207.0/24
185.218.17.0/24
185.218.19.0/24
185.221.23.0/24
185.227.144.0/24
185.230.67.0/24
185.232.204.0/24
185.236.24.0/24
185.239.141.0-185.239.142.255
185.240.121.0/24
185.250.181.0/24
185.254.158.0/24
193.8.114.0/24
193.17.182.0/24
194.48.140.0/23
194.48.143.0/24
194.76.168.0/24
194.76.172.0/24
194.124.210.0/23
194.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:da:41:5a:0c:44:9e:32:60:3a:64:22:ab:a9:41:8d:61:5d:
03:ce:b1:8d:35:48:05:46:ec:83:33:1a:16:e6:2b:cc:1f:53:
36:7d:85:7f:33:c2:bb:56:dc:c5:b5:51:77:9e:a1:1f:a0:38:
08:75:82:82:f1:5c:1a:c5:24:2a:d1:fc:4d:ae:38:c2:49:d0:
27:29:51:6d:54:7d:f3:2f:a8:d5:0e:06:ba:6b:0f:3e:8f:df:
12:0e:3f:ff:eb:64:a9:8f:da:a4:76:2e:63:6c:7c:48:34:51:
e7:d9:8e:51:90:a5:8e:85:d0:c3:a0:e3:84:57:2b:ef:fe:29:
b8:bb:03:a2:7d:97:d3:e6:f7:89:1d:10:ca:c4:90:c9:71:9f:
98:ca:8a:1b:e6:a1:1b:23:11:f5:65:74:49:1f:03:8e:03:f6:
07:25:a5:4a:4a:6d:0d:b7:cf:bd:c8:18:72:f5:46:4b:e4:0a:
33:11:8b:ff:cb:36:d1:f3:86:16:a7:df:f9:92:11:8c:0a:f3:
e6:3d:19:a9:78:36:73:d6:b2:62:a7:fc:60:dd:c8:8b:be:76:
78:66:ba:45:55:ef:09:aa:d4:93:a9:10:28:32:16:3f:3a:0f:
d7:18:df:70:a3:49:e8:d2:8f:ca:1f:f5:40:8f:1b:ba:a2:8e:
8b:c5:d2:61
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAaF+4gu9kSnubWEKoR+atBSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDI3MTk0MTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmNkMzYxYzA2NWRkMWM5ZmNhN2VmZjFiZGY4YWUzNWIyOTA2ODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmuH8LSXJhBNx44J8Orm9fXxYnCr
hkJelz56CGx0iSCexD+ecMnSjJYTY8rwR/ymVfJpBA5Eco62L7D8Gtr9GuAAxt4/
WQkK39QHBBoKLmt/JBgYDHeIE3B9oIEE2Mu+CJo9R9v1pcQ4z7KIaLHVoTSMp89l
5HgQRlBXQ3tRhsDRV0lNNRi3lrorWtoXkr3OoAvsNHKBpXFd0OAqz8DLuej6VY7Q
5usytWKl2u2tXQbTX5zm0uDZ88lCf/r/3WqmZknqLyBmGGbDd81TT1jJ2Rg/wx5L
IiYqYSL/zRxgg4e1oZbbKSqv4VJ0j+PN2jJ36pT1meLiZmUR+4u1GPcBywIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFAvNNhwGXdHJ/Kfv8b34rjWykGhMMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvQzgwMkhBWmQwY244cC1feHZmaXVOYktRYUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAAt
WuwDBAAtg4cwDAMEALl5DQMEALl5DgMEALnEKQMEALnHngMEALnKzwMEALnaEQME
ALnaEwMEALndFwMEALnjkAMEALnmQwMEALnozAMEALnsGDAMAwQAue+NAwQAue+O
AwQAufB5AwQAufq1AwQAuf6eAwQAwQhyAwQAwRG2AwQBwjCMAwQAwjCPAwQAwkyo
AwQAwkysAwQBwnzSAwQAwpLfMA0GCSqGSIb3DQEBCwUAA4IBAQBd2kFaDESeMmA6
ZCKrqUGNYV0DzrGNNUgFRuyDMxoW5ivMH1M2fYV/M8K7VtzFtVF3nqEfoDgIdYKC
8VwaxSQq0fxNrjjCSdAnKVFtVH3zL6jVDga6aw8+j98SDj//62Spj9qkdi5jbHxI
NFHn2Y5RkKWOhdDDoOOEVyvv/im4uwOifZfT5veJHRDKxJDJcZ+Yyoob5qEbIxH1
ZXRJHwOOA/YHJaVKSm0Nt8+9yBhy9UZL5AozEYv/yzbR84YWp9/5khGMCvPmPRmp
eDZz1rJip/xg3ciLvnZ4ZrpFVe8JqtSTqRAoMhY/Og/XGN9wo0no0o/KH/VAjxu6
oo6LxdJh
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:23 2026 by rpki-client