Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FTzMwfF-YSFrBZgWpXVel0lDwDk.roa
File: FTzMwfF-YSFrBZgWpXVel0lDwDk.roa (raw, json)
Hash identifier: ZICwmtZEbViZfQRBiR/sN0HX4v1NhcSRhGMhtSd2lJw=
Subject key identifier: 15:3C:CC:C1:F1:7E:61:21:6B:05:98:16:A5:75:5E:97:49:43:C0:39
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019CAF3EB8E7BA151D9F66C210F9E2AC38B8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FTzMwfF-YSFrBZgWpXVel0lDwDk.roa
Signing time: Mon 02 Mar 2026 15:50:49 +0000
ROA not before: Mon 02 Mar 2026 15:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 00:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:3e:b8:e7:ba:15:1d:9f:66:c2:10:f9:e2:ac:38:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 2 15:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=153cccc1f17e61216b059816a5755e974943c039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:8a:ee:eb:f1:c0:86:d2:dd:ca:8e:5f:2c:
37:ae:af:fb:ab:50:19:61:5a:7f:7a:27:a0:fe:99:
0e:92:f9:48:ef:41:5a:34:85:2d:5b:45:e6:67:59:
c2:f1:27:83:be:19:3b:bd:7d:2a:45:40:ce:c9:b6:
14:3f:f1:ba:90:41:54:6a:14:62:10:14:7b:b9:00:
f3:7a:b5:34:83:61:73:f3:44:3e:e3:90:42:7c:b9:
13:4e:cc:a4:b4:c5:3f:e4:1a:aa:c0:b3:64:d1:e9:
01:ae:72:76:87:7a:62:44:51:1c:e9:f8:ed:99:94:
cf:da:7a:76:55:e5:8e:67:18:93:ee:c1:7e:68:09:
43:ac:79:24:55:a3:f0:3a:42:ba:46:06:70:36:2c:
de:bd:d0:7e:dd:5f:68:84:47:4e:43:66:ef:79:c8:
46:99:e9:be:cc:0b:b6:5d:77:0b:1b:8d:76:f9:54:
ff:6b:9f:87:47:57:5a:39:16:65:46:c4:5d:03:da:
83:49:42:1a:3c:f2:73:f4:d3:20:4a:fd:2c:10:6a:
db:54:f1:f8:04:f0:47:85:ea:6e:e9:1f:94:7e:9d:
e1:1d:bd:ad:c7:b2:09:be:7d:aa:2e:9d:7d:fd:89:
f2:34:bc:c2:3d:b2:39:eb:c8:65:3d:cd:58:f2:82:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:CC:C1:F1:7E:61:21:6B:05:98:16:A5:75:5E:97:49:43:C0:39
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FTzMwfF-YSFrBZgWpXVel0lDwDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.210.235.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.82.0/24
185.223.155.0/24
185.225.0.0/22
185.226.104.0/23
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.67.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:93:a1:51:ca:02:0d:9c:7b:78:30:30:46:19:8b:be:5e:e5:
77:38:07:a3:53:e4:59:15:12:29:5a:8a:d0:73:a2:83:67:3a:
67:cc:c3:d6:7f:45:c4:af:50:6b:9b:54:ee:6f:0c:a4:fa:23:
d3:ed:c6:80:3a:cb:06:d7:f6:a9:e3:4f:9d:99:cb:e8:2a:5a:
e8:f0:71:c3:82:dd:14:4c:cc:f4:77:61:eb:20:4a:8b:ee:bb:
65:b7:bd:62:fe:7d:e7:f1:9d:3d:71:8f:18:d5:bc:64:9f:f4:
36:b9:33:9b:2d:ea:e2:03:f9:aa:05:5c:16:b6:b6:66:a9:dd:
87:97:a6:5c:3c:0e:18:fd:e5:e3:99:c8:f2:cb:45:ac:bf:16:
24:90:b5:e2:da:58:cd:f9:16:eb:52:c5:a1:6f:d5:d6:85:72:
01:5c:d1:52:7e:30:b7:60:a9:7c:bc:ee:6d:0d:71:aa:c6:b3:
92:35:91:44:d2:62:28:b0:38:59:2b:fb:7b:08:21:dd:98:ad:
b0:e0:d7:92:8a:e8:69:3c:bc:b9:d1:e6:d7:27:0b:23:3d:94:
a4:fe:53:c7:5a:9a:92:e5:b7:b1:ff:0f:61:8f:5f:47:b2:d7:
2f:69:dc:95:14:0f:17:9f:5f:4a:f5:78:32:c5:6c:2e:ef:01:
3f:db:ca:aa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Mar 3 09:31:58 2026 by rpki-client