Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VCSE2jedMVmqKHv-rAIUp_pPhjw.roa
File: VCSE2jedMVmqKHv-rAIUp_pPhjw.roa (raw, json)
Hash identifier: tkXDwsLAh5Phd6u3F9OFccWDTSVrAknFkIsgVymhhQ8=
Subject key identifier: 54:24:84:DA:37:9D:31:59:AA:28:7B:FE:AC:02:14:A7:FA:4F:86:3C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0C9862856207FE2DFE8AE8F0AC3C78A6F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VCSE2jedMVmqKHv-rAIUp_pPhjw.roa
Signing time: Tue 22 Sep 2026 14:30:07 +0000
ROA not before: Tue 22 Sep 2026 14:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.81.154.0/24 maxlen: 24
45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:25:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:86:28:56:20:7f:e2:df:e8:ae:8f:0a:c3:c7:8a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 22 14:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=542484da379d3159aa287bfeac0214a7fa4f863c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9e:80:7e:1e:08:8b:02:ee:95:f9:d3:54:2e:
98:04:cf:78:0b:bc:96:01:3c:cc:27:40:5f:06:09:
b0:37:8f:e2:91:db:67:57:b8:8d:57:f0:f2:5e:11:
36:e6:5a:3a:92:8e:05:91:02:24:31:bf:fd:20:03:
34:d4:ee:b9:2d:d9:44:05:6a:a9:0c:0d:52:35:5f:
41:d2:e0:8c:1e:6e:1c:22:67:cf:f9:86:51:2f:a8:
31:93:5c:0d:b7:38:c8:c5:f6:a7:c8:01:89:15:ff:
e6:fa:f7:35:b5:f5:60:94:ed:8d:51:45:c2:3d:c2:
13:7f:e3:83:ae:45:53:9c:f4:86:12:73:f8:d0:8d:
72:57:5d:18:e1:29:8c:02:a3:e6:c4:69:9a:59:51:
0b:68:a2:15:d8:44:c0:d5:d6:94:ae:e8:81:01:e0:
87:2f:bb:7b:6e:90:ad:84:53:08:ae:f1:3e:22:36:
af:83:1a:4c:49:24:ac:d0:f0:86:4f:e9:35:26:f4:
5e:2d:a9:99:b3:f8:b8:bd:20:80:f7:46:3a:d5:f8:
b5:bf:67:01:81:9b:49:81:81:87:f4:89:48:f6:c7:
13:ce:9c:27:20:b7:3a:c6:a0:7b:9e:f8:09:b2:d3:
77:17:0f:4e:d8:0a:50:12:54:0c:0a:e3:4a:c0:a5:
1b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:84:DA:37:9D:31:59:AA:28:7B:FE:AC:02:14:A7:FA:4F:86:3C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/VCSE2jedMVmqKHv-rAIUp_pPhjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e7:65:df:fa:19:64:31:55:c3:83:76:43:8c:40:e4:cd:fc:
8a:9e:16:78:db:9d:c9:01:c0:48:77:68:ed:7d:19:c0:6c:04:
19:11:28:2a:07:33:ef:51:12:dd:bd:66:a6:cf:6f:2c:02:ce:
4d:28:f8:22:d3:d1:3d:19:95:39:38:55:b6:02:b7:93:95:a7:
5f:71:17:9c:09:cc:cc:b6:95:06:ba:10:8b:bb:f5:27:01:d4:
cf:fe:6d:24:40:c3:40:67:e9:41:ad:ae:32:0a:cd:eb:02:be:
6c:2e:04:e2:12:ea:6c:64:37:cf:63:34:54:87:7c:5c:2d:7c:
24:21:6f:8f:ea:8f:9f:dd:44:d9:0a:f9:02:70:22:69:ba:f2:
d0:7d:44:18:3d:4d:02:ec:b9:23:2d:33:9d:05:b2:3f:a2:5a:
b9:cf:ca:c7:9a:0c:8c:a8:27:9e:5c:fb:16:59:dd:94:60:c2:
a5:af:6e:68:c0:7e:24:27:74:4b:5d:e9:9f:ce:5d:b1:ae:3e:
df:a1:38:e3:92:a1:88:dc:60:a2:fc:e3:5c:06:ea:0e:eb:aa:
3f:72:be:6e:5a:30:25:28:a1:1d:57:17:70:0a:6c:c5:fa:d4:
c8:7f:14:74:08:c2:52:8e:74:0c:3b:a9:12:dd:68:fd:26:d5:
ed:ae:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:30:29 2026 by rpki-client