Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EWOkZFja1Bh2sy8XNzR8by0NGWc.roa
File: EWOkZFja1Bh2sy8XNzR8by0NGWc.roa (raw, json)
Hash identifier: epo2Kq8Kv6cGX9OoK2Zwzp/Ev6tHFDPkAvjKlU2s2PU=
Subject key identifier: 11:63:A4:64:58:DA:D4:18:76:B3:2F:17:37:34:7C:6F:2D:0D:19:67
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A075A0647BDD7E8C31CF95F7D06A9F7F03
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EWOkZFja1Bh2sy8XNzR8by0NGWc.roa
Signing time: Sun 06 Sep 2026 07:30:40 +0000
ROA not before: Sun 06 Sep 2026 07:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:a0:64:7b:dd:7e:8c:31:cf:95:f7:d0:6a:9f:7f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 6 07:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1163a46458dad41876b32f1737347c6f2d0d1967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:eb:dc:50:78:86:d8:df:3e:c4:f6:49:b4:47:
b8:cb:c1:2d:30:67:b3:38:77:8e:8d:9e:ba:6c:85:
9f:32:ec:ef:92:a0:55:15:f0:96:2b:af:25:66:15:
75:d1:ac:c9:e8:dc:8b:2d:ed:c6:36:e4:6b:b7:b7:
da:26:16:49:c0:06:ed:ce:d9:75:6e:62:7c:f6:2c:
be:5c:c2:63:da:2b:6d:0e:64:e5:9c:68:e5:c5:ac:
2f:cb:e1:c6:65:0b:fd:c5:34:1f:bf:67:f6:0a:bf:
b8:27:87:73:7a:00:86:fb:55:d9:5e:b4:cd:e2:ad:
a3:e2:50:45:8d:ea:60:c3:3c:b0:3d:99:ea:a7:af:
9f:c8:49:20:cb:02:49:36:38:41:7e:dc:11:ed:ad:
27:3e:9f:11:f6:62:3d:e5:a6:8d:d2:65:4d:d3:af:
ef:54:7f:0f:d3:ec:5b:80:70:3f:12:72:e7:7d:15:
d3:ba:94:31:75:4a:da:9d:e0:dd:bc:39:7e:4a:2c:
ab:e0:df:94:ee:72:82:7f:4c:97:32:1b:7c:d0:9d:
2f:15:74:3e:08:35:7f:40:5a:54:45:1a:44:e4:02:
f3:85:23:68:6f:62:dc:05:94:e5:2f:cd:8e:13:60:
94:8b:f2:96:7e:fa:80:68:b4:72:9d:56:7a:06:a6:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:63:A4:64:58:DA:D4:18:76:B3:2F:17:37:34:7C:6F:2D:0D:19:67
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/EWOkZFja1Bh2sy8XNzR8by0NGWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e3:c3:6d:a6:e1:d2:3c:08:84:65:d1:82:df:a9:02:48:5f:
9a:92:da:b0:ac:59:89:62:72:32:d2:27:0e:70:e7:bd:93:af:
1e:db:fd:b4:99:b0:37:a4:cb:fb:45:b8:e1:d5:b3:c9:fe:a7:
f8:f4:7a:85:77:7e:c3:5f:8f:ed:3f:03:7c:89:07:b9:dd:ab:
f9:8f:eb:5b:67:e9:96:ee:8f:f8:96:f7:c9:72:e4:3e:e3:f9:
7f:d0:83:65:01:e6:3a:9e:d7:0a:b3:32:47:e9:a5:fc:87:30:
6a:c3:92:e4:5b:9f:cc:36:1e:af:c8:51:bb:21:f3:d1:c7:62:
c1:8f:fb:7d:d4:1e:5a:ee:79:ce:12:32:87:e6:3c:2f:82:b4:
6e:58:e5:40:98:39:4f:4d:f1:fb:42:d8:ee:08:67:6a:49:87:
d9:0f:38:43:da:2a:32:cf:71:81:8d:eb:aa:8c:5a:d7:13:88:
8b:bb:3b:02:76:16:f8:ab:75:fb:7c:3c:d2:ef:20:63:e1:40:
c1:49:94:3c:a6:9d:52:4c:95:c6:e4:40:e9:24:49:26:da:21:
96:7c:bf:4d:b7:e3:49:77:93:09:99:42:25:ee:e5:b6:25:39:
2e:3f:95:c9:cc:e9:57:df:87:8d:e3:c8:76:50:d5:76:c0:e7:
3b:8c:62:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 13:23:26 2026 by rpki-client