Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DkuVYpx1A8vTl_JwhJRwFF-Nhzg.roa
File: DkuVYpx1A8vTl_JwhJRwFF-Nhzg.roa (raw, json)
Hash identifier: 1R/o0jEAAZ7DPkcOm+6bMfTa//6IQhuXncVXFoRGnM8=
Subject key identifier: 0E:4B:95:62:9C:75:03:CB:D3:97:F2:70:84:94:70:14:5F:8D:87:38
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019CD7B1AE1410403DA6982CFF2070C496AB
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DkuVYpx1A8vTl_JwhJRwFF-Nhzg.roa
Signing time: Tue 10 Mar 2026 12:21:11 +0000
ROA not before: Tue 10 Mar 2026 12:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:b1:ae:14:10:40:3d:a6:98:2c:ff:20:70:c4:96:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 10 12:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e4b95629c7503cbd397f270849470145f8d8738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:7f:a9:b1:92:d4:c7:38:51:b3:63:fd:fb:
6f:ab:6f:19:78:0d:1a:b4:5e:a1:34:e4:38:93:80:
ed:fa:88:50:3e:72:e8:67:b9:12:9e:eb:98:fb:bf:
ac:c1:b0:2d:da:74:28:88:18:8f:56:63:7f:99:1b:
06:ee:67:09:70:bd:34:3f:4c:ef:5d:9c:d8:7a:76:
f2:4b:cc:db:d7:42:a3:29:74:bc:b5:c3:7a:fd:5f:
2f:16:f1:28:95:2b:59:d8:cd:d7:c8:31:4a:59:32:
36:bc:c9:fb:82:32:00:18:d3:a8:ac:2e:c1:67:d8:
4a:89:da:ea:af:da:02:98:e6:17:a4:d8:e6:bc:7b:
70:8a:37:62:d8:d0:79:09:31:a6:a4:d2:05:c2:a0:
14:6c:7b:e2:f5:fc:01:5e:02:4c:d4:12:83:ac:8e:
ca:1f:e4:75:33:ea:04:fd:48:83:ce:f2:26:08:da:
b1:cc:73:58:50:81:43:b9:df:47:18:66:e9:cf:d8:
bd:63:9b:ce:88:79:7c:4d:7a:ff:32:45:dc:78:a7:
88:56:bf:02:dd:29:99:f2:68:2a:8b:8b:7c:26:cd:
03:7a:2d:52:b5:8f:43:67:bc:cc:41:5e:70:70:30:
0c:5f:57:f7:a0:38:82:42:f3:e1:6a:5c:8c:36:42:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4B:95:62:9C:75:03:CB:D3:97:F2:70:84:94:70:14:5F:8D:87:38
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DkuVYpx1A8vTl_JwhJRwFF-Nhzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.218.16.0/24
185.218.19.0/24
185.223.82.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.245.34.0/23
185.250.180.0/24
193.17.183.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
02:25:cf:fc:22:4c:65:77:89:66:ad:ed:e6:33:11:da:93:3d:
27:d4:26:a2:4f:5b:9f:61:e7:6a:a9:0d:a5:1d:52:29:8f:52:
0d:db:8a:35:ad:7f:8d:71:86:80:ae:9f:ce:19:17:25:d4:59:
60:b5:64:a1:47:ec:5e:bb:1d:83:c5:12:88:7d:cb:35:aa:b2:
5b:a2:0d:23:80:fa:9c:6e:f2:29:2d:43:d3:84:29:ba:df:3e:
cc:81:f8:78:67:fe:01:c0:67:7d:4e:c0:e5:5c:d6:1e:94:67:
ba:52:73:35:a4:eb:98:32:8f:65:fb:64:c8:23:86:b0:f2:8b:
de:a9:b1:10:59:f7:c2:c4:f1:87:49:8b:a0:b8:49:53:78:56:
57:db:d7:9a:c9:bb:ff:ba:e7:55:cf:fe:a1:b2:50:7e:14:a1:
d5:51:ca:02:e8:3f:cf:bc:01:bd:6c:f1:5b:67:90:f9:1e:bd:
33:75:6f:aa:4e:b5:88:74:af:f9:09:8c:0e:fd:44:d3:c4:dc:
2f:f9:ab:dc:ca:5a:de:79:ea:40:c5:eb:d5:7a:40:a2:bf:62:
11:ed:66:92:ef:6a:e3:70:9a:7b:33:fe:be:82:da:47:2d:f7:
3d:1b:ae:de:50:70:1d:cf:ac:51:18:ec:a7:5b:1e:5f:4d:3e:
8e:ac:d3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 11:07:42 2026 by rpki-client