Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GYa4uWH_JMx_UNwE5dP5MtuF-ic.roa
File: GYa4uWH_JMx_UNwE5dP5MtuF-ic.roa (raw, json)
Hash identifier: MIz+PoeXOyvr0e/s8a7+8Xtpampjl/SAgBOTxmhTOVk=
Subject key identifier: 19:86:B8:B9:61:FF:24:CC:7F:50:DC:04:E5:D3:F9:32:DB:85:FA:27
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019EA16599034C45F23106AE20FD063667F2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GYa4uWH_JMx_UNwE5dP5MtuF-ic.roa
Signing time: Sun 07 Jun 2026 09:24:10 +0000
ROA not before: Sun 07 Jun 2026 09:24:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50053
IP address blocks: 45.90.236.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.121.13.0/24 maxlen: 24
185.121.14.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.202.207.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.221.23.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.204.0/24 maxlen: 24
185.236.24.0/24 maxlen: 24
185.239.141.0/24 maxlen: 24
185.239.142.0/24 maxlen: 24
185.250.181.0/24 maxlen: 24
185.254.158.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/23 maxlen: 24
194.48.143.0/24 maxlen: 24
194.76.168.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.210.0/24 maxlen: 24
194.124.211.0/24 maxlen: 24
194.146.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:65:99:03:4c:45:f2:31:06:ae:20:fd:06:36:67:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 7 09:24:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1986b8b961ff24cc7f50dc04e5d3f932db85fa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:b0:6d:a5:ef:35:0f:1a:c0:83:6f:f4:62:
9f:dc:f3:15:d2:22:ec:93:81:37:7c:82:b8:b1:61:
9f:1b:2d:51:df:4c:44:70:35:c4:cc:37:b0:80:ba:
c9:a7:19:0a:a6:ba:ea:52:9d:6f:24:dd:68:81:98:
5a:05:31:b9:c7:bf:b7:dc:b7:93:0a:f8:48:7c:96:
6d:82:e4:a2:bd:4d:7c:d5:e9:02:1c:43:85:75:d6:
63:e5:77:f8:e1:7c:80:94:6f:43:d7:30:d1:18:74:
25:75:77:bd:95:7f:44:1f:df:2a:49:b9:5c:18:8d:
2b:d2:3c:52:47:fb:72:0f:97:b6:ad:66:bf:8e:74:
7c:e5:10:0b:62:45:cd:fd:f4:a8:04:68:96:cb:11:
9c:0f:87:1a:8b:c2:95:f7:cd:37:8d:5a:40:a5:0a:
87:35:e4:c5:80:02:17:e5:97:51:82:c1:b8:d3:0d:
b8:47:15:f3:7b:00:10:fc:59:be:7a:d3:53:de:09:
f5:56:df:56:97:32:65:a4:b8:66:ca:52:29:c9:27:
3f:51:53:e3:35:55:ae:ef:e4:f1:d0:44:ec:e5:0a:
e2:f6:3d:7b:80:77:c8:6b:79:f8:52:28:b6:f6:c3:
5f:ab:4d:22:2a:af:94:88:fd:2f:26:68:18:c3:00:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:86:B8:B9:61:FF:24:CC:7F:50:DC:04:E5:D3:F9:32:DB:85:FA:27
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/GYa4uWH_JMx_UNwE5dP5MtuF-ic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/24
45.131.135.0/24
185.121.13.0-185.121.14.255
185.196.41.0/24
185.199.158.0/24
185.202.207.0/24
185.214.108.0/24
185.218.17.0/24
185.218.19.0/24
185.221.23.0/24
185.227.144.0/24
185.230.67.0/24
185.232.204.0/24
185.236.24.0/24
185.239.141.0-185.239.142.255
185.250.181.0/24
185.254.158.0/24
193.17.182.0/24
194.48.140.0/23
194.48.143.0/24
194.76.168.0/24
194.76.172.0/24
194.124.210.0/23
194.146.223.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9c:fb:dd:c8:a6:c9:6f:63:7f:57:59:6a:00:e6:2e:83:fb:
5a:72:03:e9:b2:db:9a:ce:04:f5:5d:05:45:b0:6a:fc:13:63:
ff:02:81:1a:76:64:bd:95:26:16:de:a3:1f:1a:ba:17:3a:c4:
85:03:63:14:1c:90:9b:91:f0:ad:06:68:03:20:93:3b:e9:bb:
d3:4b:ae:9e:60:3f:f1:e1:e0:2b:61:2a:3b:c5:a2:53:bc:22:
5f:63:91:23:09:9e:f7:e3:0b:2c:5f:41:29:8d:34:39:e9:21:
27:12:82:97:88:ab:f4:a5:9c:d0:fa:04:83:9f:1e:74:42:d3:
bc:ef:ac:80:0a:ef:de:60:ae:c7:ce:6c:49:46:f6:f1:7f:63:
53:d8:70:01:c2:e5:d1:90:55:64:96:5a:51:07:09:18:ce:3c:
15:28:39:0b:3b:88:41:b9:c5:8a:75:52:7d:1a:d0:6c:36:68:
59:07:ed:09:4c:88:01:a6:c0:59:74:06:7f:23:68:1f:9b:6f:
77:91:12:94:6f:df:c5:66:92:73:df:ea:59:c2:c1:12:5a:b6:
43:1d:36:de:20:d6:7d:f9:fb:f5:b4:7a:91:77:f5:c6:42:d8:
7c:a7:b3:cb:bb:54:9e:8d:98:7c:a7:a9:cf:eb:c2:d4:b5:0b:
f6:af:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 04:51:19 2026 by rpki-client