Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SdBbVrVOgzfDj7kNJ-zNxBy_FLs.roa
File: SdBbVrVOgzfDj7kNJ-zNxBy_FLs.roa (raw, json)
Hash identifier: MKjLEelT9EhC0X+nBg1wbCcL3KB/jMNJmAKB+SHGlAo=
Subject key identifier: 49:D0:5B:56:B5:4E:83:37:C3:8F:B9:0D:27:EC:CD:C4:1C:BF:14:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D68E4B0AB04D04CB6FD6B535570F7B637
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SdBbVrVOgzfDj7kNJ-zNxBy_FLs.roa
Signing time: Tue 07 Apr 2026 17:01:51 +0000
ROA not before: Tue 07 Apr 2026 17:01:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 23:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:e4:b0:ab:04:d0:4c:b6:fd:6b:53:55:70:f7:b6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 7 17:01:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49d05b56b54e8337c38fb90d27eccdc41cbf14bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a0:22:d4:92:cc:9c:10:f0:a1:5c:b7:f9:2d:
38:f0:fd:c7:83:7d:7d:7f:21:dd:98:2c:c1:3f:2d:
56:20:d0:f3:34:b3:e8:b7:f2:b9:9b:4d:4e:25:df:
ea:2d:57:ad:2f:27:91:6b:a3:d2:d1:f7:40:1c:f5:
e2:d0:7e:57:ed:86:fc:65:e6:79:49:13:d6:fb:12:
fa:8f:e0:50:d9:5d:e9:76:17:85:4e:35:bf:f7:b4:
63:7b:e4:5d:94:b6:cd:4c:0a:5e:5a:2b:a3:2e:c3:
91:3e:61:24:0d:a2:06:1c:16:08:e3:a4:c6:8a:3d:
87:cf:50:3d:d2:42:59:e9:1f:38:4f:c1:df:a2:2d:
46:20:df:bd:90:5c:6f:c5:af:24:d0:b4:38:be:65:
f4:c5:ac:c2:b0:c2:c6:ea:b2:ae:d9:d3:41:ad:39:
c5:3d:1d:be:95:75:ee:7b:19:d3:c2:bf:b6:0f:1e:
75:0c:dd:7d:8d:e5:a2:e7:55:bd:17:89:46:a4:79:
77:e8:3c:60:a6:38:28:d3:0a:3d:a9:2b:56:54:a5:
f2:01:e8:a1:4b:c8:e4:2a:ba:d8:8e:f4:1f:62:bc:
cc:dd:f2:15:18:92:2b:d0:76:5f:bf:f7:9c:b7:10:
eb:44:6d:2c:09:4f:48:c1:43:f8:ea:61:61:7e:49:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D0:5B:56:B5:4E:83:37:C3:8F:B9:0D:27:EC:CD:C4:1C:BF:14:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SdBbVrVOgzfDj7kNJ-zNxBy_FLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.22.0/24
185.226.104.0/23
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:ad:80:e9:f9:05:04:c5:e5:1f:f3:db:18:6f:66:ff:fa:27:
69:9b:f8:83:91:49:65:d4:88:f0:d2:09:69:74:3f:6f:17:65:
b8:cc:93:4b:6a:af:1c:60:0d:67:a5:08:29:1a:6c:9e:7a:f5:
a9:10:e1:0e:11:1e:a4:ce:ed:ff:d8:d4:58:da:0d:21:e5:04:
ba:ae:f0:8e:9e:e6:35:b9:96:b9:89:bd:ff:9d:66:49:7a:a9:
8b:50:7a:b0:06:3f:09:e7:b3:cc:ec:e7:25:14:48:7a:59:b4:
86:d3:fc:4f:25:cf:48:9a:a9:f2:18:43:f7:e6:0c:95:bd:06:
4f:45:c5:c3:14:f0:0e:b6:9d:e0:32:0a:0c:ef:b8:28:69:00:
e8:33:dc:34:88:a4:0d:ec:85:03:13:53:81:8b:b0:aa:a1:58:
66:6b:4e:12:d4:c8:6e:1b:ff:13:06:76:20:0e:93:8d:f9:a2:
15:04:34:a5:12:55:96:33:10:61:23:1f:36:3a:6a:43:3e:23:
36:f9:23:27:c8:41:39:a6:81:03:31:b9:99:d1:6f:c7:52:cb:
26:29:c7:6d:47:7a:86:2e:3b:eb:55:ee:dc:6f:5a:c0:94:27:
84:4e:1e:45:65:70:2c:7e:31:fe:4e:b3:46:c8:7e:47:7e:d7:
71:0f:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 06:07:12 2026 by rpki-client