Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TNIdlZu70N4xaIFmu8ValGcye2Y.roa
File: TNIdlZu70N4xaIFmu8ValGcye2Y.roa (raw, json)
Hash identifier: BJSQwmxOVLk3/47V08XvYI+78Ky/oRP+zN+xh61GvqQ=
Subject key identifier: 4C:D2:1D:95:9B:BB:D0:DE:31:68:81:66:BB:C5:5A:94:67:32:7B:66
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A17EE20C50C658CE115A0C7038B1242196
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TNIdlZu70N4xaIFmu8ValGcye2Y.roa
Signing time: Tue 27 Oct 2026 19:41:45 +0000
ROA not before: Tue 27 Oct 2026 19:41:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.81.154.0/24 maxlen: 24
45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.227.174.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
195.34.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:e2:0c:50:c6:58:ce:11:5a:0c:70:38:b1:24:21:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 27 19:41:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cd21d959bbbd0de31688166bbc55a9467327b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:58:74:c3:86:1c:ad:28:4a:a4:a0:63:c5:94:
13:bb:46:b8:e4:07:c7:78:c8:1d:36:36:9c:16:58:
8d:56:d1:78:7c:f1:86:0e:f6:ea:f4:50:46:53:15:
02:48:00:fe:05:3d:f7:12:fc:8f:13:e7:98:3c:84:
6c:99:3b:fb:2b:d2:6e:79:06:d3:02:b2:f4:ab:b8:
09:35:c1:fa:2e:d4:5d:d9:ec:d3:ee:51:b2:ec:31:
7d:10:1b:38:c5:d4:e4:de:c7:3a:b0:00:0b:0d:bf:
50:9c:44:18:94:b7:0c:cf:97:5b:af:7a:81:59:1b:
a5:2d:d1:a9:31:25:2c:fa:73:42:6f:30:ab:50:09:
49:84:80:17:40:68:dc:f8:69:11:4b:4f:0d:2b:fe:
ad:c8:16:2f:f0:24:27:71:1f:5a:1e:f6:3d:8f:8c:
73:7a:77:d4:3c:61:e8:cc:e5:76:86:54:44:42:df:
d5:0f:4e:28:4f:7b:11:41:fb:a7:ef:f1:88:6c:38:
19:92:86:64:10:d7:69:0a:b8:9c:8f:f0:38:e7:c0:
ec:c8:09:7b:ae:c1:e6:47:ec:fd:22:47:c0:f9:6c:
f1:ec:ca:d4:fd:38:9d:0b:e0:59:9a:fc:0f:ed:f3:
aa:80:44:46:e6:96:f4:18:36:63:b1:2e:f7:f7:17:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:1D:95:9B:BB:D0:DE:31:68:81:66:BB:C5:5A:94:67:32:7B:66
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/TNIdlZu70N4xaIFmu8ValGcye2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.227.174.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.8.112.0/23
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
195.34.67.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f6:66:3b:47:6f:cb:2d:bb:3e:ac:73:e1:ae:f6:f2:54:61:
26:ed:05:5f:79:46:c2:c4:08:af:e9:58:11:19:ed:4c:7a:c4:
ba:04:32:b7:00:c7:a1:38:82:3f:a6:c5:5b:7b:76:89:2d:30:
65:df:80:da:fe:5e:40:73:65:13:bf:f6:bc:19:38:8a:a8:ae:
e0:8f:a1:ac:f1:b6:71:31:43:01:82:71:ed:a7:e8:c3:cc:fa:
fe:0e:6e:10:92:19:bc:d3:75:cd:f9:0e:6d:e5:ac:75:70:e4:
62:5e:c1:2f:09:19:0e:eb:ef:c2:08:c4:b2:4a:d2:cd:f5:a5:
4b:85:1a:69:cf:ef:3b:59:4a:b9:ec:ad:69:69:4a:46:78:76:
61:34:ee:c5:ce:38:fb:6a:8f:26:6c:c4:48:f4:75:98:e5:76:
c6:c6:04:35:a4:c3:8e:45:b4:2f:a0:a8:3d:e3:c1:5d:b8:b2:
aa:b2:0a:2d:eb:1d:5d:6d:13:c2:cb:fe:3f:2b:32:e4:41:3d:
3a:88:9e:b8:52:97:23:b2:e4:95:9d:c0:32:69:8d:fb:0e:91:
45:ad:24:68:b6:b9:f1:3a:41:7c:8b:ed:f7:b4:a9:37:f5:fb:
d3:20:be:55:70:68:82:a6:11:ea:8f:98:a9:3a:39:57:a8:11:
ea:72:5c:9a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:23 2026 by rpki-client