Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FRCuzDBoMJ12BYeNygkHzkvZjg0.roa
File: FRCuzDBoMJ12BYeNygkHzkvZjg0.roa (raw, json)
Hash identifier: DjWHoHuzLZcOiuNfTkjkgbpnuRACONQpb17CCBURXVE=
Subject key identifier: 15:10:AE:CC:30:68:30:9D:76:05:87:8D:CA:09:07:CE:4B:D9:8E:0D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1983EAAD16F2309CBEEDE21B344C7E251
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FRCuzDBoMJ12BYeNygkHzkvZjg0.roa
Signing time: Sun 01 Nov 2026 17:53:26 +0000
ROA not before: Sun 01 Nov 2026 17:53:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 45.90.236.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.236.24.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.240.121.0/24 maxlen: 24
185.250.181.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/23 maxlen: 24
194.48.143.0/24 maxlen: 24
194.76.168.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.210.0/24 maxlen: 24
194.124.211.0/24 maxlen: 24
194.146.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:3e:aa:d1:6f:23:09:cb:ee:de:21:b3:44:c7:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 1 17:53:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1510aecc3068309d7605878dca0907ce4bd98e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:32:e2:d3:9e:16:d8:19:df:25:7f:77:4c:d9:
dc:10:9f:da:0a:c4:20:5d:20:3e:91:cc:3a:df:a4:
c0:15:47:4f:b6:b5:6d:c6:71:62:e6:34:97:79:57:
38:8f:86:b0:cf:20:de:c3:e2:b6:a4:97:6c:ec:dc:
60:ab:21:7f:9b:e0:b3:b1:04:0c:9f:e4:0f:7c:04:
83:13:07:23:dd:a4:58:c9:4a:6f:19:da:de:f1:06:
76:45:6f:f6:b7:e3:94:c2:56:f1:3a:c1:32:98:9a:
72:00:f5:b0:f9:4d:a3:21:04:86:ac:a4:f1:c2:da:
91:f1:24:d4:3f:a6:fe:10:89:63:82:ad:a9:08:57:
2c:d4:1c:b2:2e:56:3c:56:63:9b:5a:8f:e6:3a:f9:
50:54:ce:21:7f:90:18:a1:f9:17:d4:ab:6c:cc:3d:
1a:af:ab:cb:6f:b7:f0:00:39:ef:6c:73:b1:e7:a4:
a0:d3:a1:86:f0:90:fd:10:fc:2d:bf:2b:a7:3c:be:
7f:ed:c4:66:ca:b8:01:0b:dc:7e:b3:c1:24:b3:b2:
69:65:a6:2c:f9:51:97:78:e2:4c:dd:8e:ff:44:c0:
3a:cf:ea:fd:5c:19:52:e0:cb:68:a7:2f:4e:6d:22:
36:2c:86:7f:fd:a3:18:47:18:1b:15:94:f6:47:5e:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:10:AE:CC:30:68:30:9D:76:05:87:8D:CA:09:07:CE:4B:D9:8E:0D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FRCuzDBoMJ12BYeNygkHzkvZjg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/24
45.131.135.0/24
185.121.13.0-185.121.14.255
185.196.41.0/24
185.199.158.0/24
185.202.207.0/24
185.218.17.0/24
185.218.19.0/24
185.221.23.0/24
185.222.30.0/24
185.227.144.0/24
185.230.67.0/24
185.232.204.0/24
185.236.24.0/24
185.239.141.0-185.239.142.255
185.240.121.0/24
185.250.181.0/24
185.254.158.0/24
193.8.114.0/24
193.17.182.0/24
194.48.140.0/23
194.48.143.0/24
194.76.168.0/24
194.76.172.0/24
194.124.210.0/23
194.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:33:b3:37:87:3d:de:e0:e5:b9:d2:15:19:f1:87:4e:09:e2:
43:e5:cb:43:b1:4f:22:47:d1:00:32:b2:27:2a:e6:eb:ed:9d:
36:09:6d:44:f2:2d:8d:fe:e1:8d:ce:eb:fb:11:45:32:2d:65:
0f:4b:a1:19:70:20:a9:91:a8:23:e9:5a:2b:16:82:a5:43:a9:
cf:6a:fa:1c:f7:2a:73:71:fd:e7:02:97:35:40:4b:a6:ba:ed:
35:25:9d:c4:49:36:35:1c:f8:6d:9a:69:de:ba:f4:ce:5a:ec:
60:0b:22:b5:d4:b2:9e:e6:9a:b0:68:c0:ca:43:17:5c:dc:28:
7e:a8:c5:0e:15:9b:a5:36:25:56:32:b3:27:20:4a:ec:48:88:
b0:63:1d:45:30:ea:0f:38:17:2c:35:8f:16:a3:aa:d2:57:79:
d7:8e:86:82:bc:7c:a7:2e:71:3a:9c:b7:35:91:9c:bb:da:d6:
40:3d:11:d1:2c:56:2c:8d:66:f8:c1:32:d3:df:04:b4:fa:7e:
0a:25:86:d5:7b:4d:ff:80:5e:a6:00:9e:d9:c9:ee:81:c1:c4:
09:f8:e7:fe:b2:f0:08:c4:f9:4f:7d:c0:0d:ec:e9:de:57:d4:
94:52:74:ec:94:d4:6e:4e:0a:7b:f2:7e:e1:fd:e1:d7:bc:2a:
7f:34:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 10:47:26 2026 by rpki-client