Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PQyBu1XU4Bd51Cx1cLdDCSgGPqo.roa
File: PQyBu1XU4Bd51Cx1cLdDCSgGPqo.roa (raw, json)
Hash identifier: D7ONNsPFYSwMWvRAXYPdXq+dhus3BtCFlnBmnJgcWj4=
Subject key identifier: 3D:0C:81:BB:55:D4:E0:17:79:D4:2C:75:70:B7:43:09:28:06:3E:AA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A09F2920D11638CB29974F1E03CDB6227B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PQyBu1XU4Bd51Cx1cLdDCSgGPqo.roa
Signing time: Mon 14 Sep 2026 09:04:27 +0000
ROA not before: Mon 14 Sep 2026 09:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:29:20:d1:16:38:cb:29:97:4f:1e:03:cd:b6:22:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 14 09:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d0c81bb55d4e01779d42c7570b7430928063eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cd:6b:d9:09:ce:48:16:a8:51:03:f3:c5:ed:
04:43:f2:b1:3e:95:0f:96:c0:bc:0c:68:a2:2c:5b:
23:23:31:a8:3c:c2:04:fe:ec:6b:50:91:23:35:df:
5e:af:55:55:39:c9:7d:03:d3:97:ea:20:67:68:94:
cd:03:95:04:71:42:50:ef:61:d8:a6:95:15:c0:bb:
ba:a3:2b:e3:3d:5c:3a:15:07:e2:8a:80:b5:4c:c5:
fe:9d:82:fe:7a:e3:3f:f7:1e:59:13:ce:2c:23:7c:
75:39:52:8e:db:dd:e1:e1:df:a0:35:18:a3:4a:e7:
01:e5:90:a4:10:ef:e3:7a:6b:2e:c4:e7:28:3f:6b:
aa:da:28:43:a9:ad:82:64:6d:68:96:b2:07:50:1c:
01:38:92:58:39:1f:e6:c4:e1:70:3a:0d:5e:94:1f:
c6:4d:3b:ab:ba:12:af:90:58:9a:2f:1f:4c:18:b0:
03:d3:95:ed:66:13:7e:37:aa:26:dd:87:65:78:7d:
6a:6d:d7:33:22:ec:08:8f:a0:4d:5a:37:43:58:d2:
12:fb:0b:e1:7d:66:5f:7a:c6:bc:89:7f:4b:47:e0:
14:ad:27:66:47:78:5d:1a:a2:da:f9:f2:d9:a4:f4:
ce:87:a0:ad:a1:0c:ba:3a:0b:e2:9f:8d:f9:a4:da:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:81:BB:55:D4:E0:17:79:D4:2C:75:70:B7:43:09:28:06:3E:AA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PQyBu1XU4Bd51Cx1cLdDCSgGPqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
92:60:da:e5:09:b0:7f:c7:45:ab:d4:31:f3:ab:0c:f4:5c:d3:
6e:51:c7:83:d1:79:20:c1:ab:cc:bd:7a:af:12:c0:6d:ca:09:
13:a1:b4:3d:3e:36:07:a1:bf:9d:f7:47:d0:20:dd:5a:45:ab:
12:17:45:6a:3b:46:f7:4b:58:e5:c8:db:ad:9a:92:64:77:9f:
bb:80:dc:7a:cf:c0:90:85:35:c1:47:d7:ce:d9:29:37:7d:3b:
25:2b:b1:10:74:ec:8d:7e:4d:c8:8e:72:8b:37:1b:14:19:fa:
55:31:18:fd:26:88:a8:74:a5:17:00:e2:10:54:69:8a:2d:14:
7e:64:c8:67:d9:a5:fd:f7:5b:2e:63:d9:ee:83:8a:ab:ae:97:
9c:ef:eb:f1:55:11:f1:22:4d:83:7a:7f:21:e6:69:53:98:23:
35:76:f4:61:88:b2:b0:46:4d:07:23:d0:1e:89:21:37:bd:73:
aa:60:31:4e:d8:58:cf:28:63:79:0a:65:21:25:88:d9:b3:37:
09:9e:66:2f:4d:6d:f7:1a:d4:02:b3:d1:19:04:5c:81:1b:5d:
24:b5:ad:de:3a:d8:04:51:72:c5:43:33:bf:d7:de:2f:71:6c:
88:ec:9f:1a:55:cc:a7:54:b7:63:ad:f6:08:07:21:76:62:be:
8b:a3:29:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 20:40:40 2026 by rpki-client