Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W_Za9dV2AbyRy4FvsXiyu61aOEQ.roa
File: W_Za9dV2AbyRy4FvsXiyu61aOEQ.roa (raw, json)
Hash identifier: VN5Te+54nETK8f9YEusMSrgVd8SnzizKxCex7raJAp0=
Subject key identifier: 5B:F6:5A:F5:D5:76:01:BC:91:CB:81:6F:B1:78:B2:BB:AD:5A:38:44
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1DDFE9E01AE5034309801EB05413952B7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W_Za9dV2AbyRy4FvsXiyu61aOEQ.roa
Signing time: Sun 15 Nov 2026 06:56:53 +0000
ROA not before: Sun 15 Nov 2026 06:56:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:fe:9e:01:ae:50:34:30:98:01:eb:05:41:39:52:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 15 06:56:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5bf65af5d57601bc91cb816fb178b2bbad5a3844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:5f:d3:37:52:7b:f6:4e:fa:c1:65:a5:7e:
41:8a:1e:48:1a:29:05:9c:d4:f3:18:cc:71:c3:9c:
aa:df:8c:2b:6d:bb:08:91:44:a4:fc:9e:69:67:f3:
69:94:fb:1c:07:8e:6b:c4:4b:01:69:3c:79:8a:b7:
6f:81:05:93:df:35:7f:cd:87:d9:4c:7e:65:2a:85:
87:8b:8d:39:63:53:b9:70:32:cb:03:4f:b0:87:2b:
5c:bf:1c:ff:e7:68:de:38:b1:35:35:8d:0c:39:84:
f2:32:40:7b:51:80:e9:f1:71:7f:19:87:f6:2f:9a:
56:64:dd:d6:db:ca:09:b0:e2:1d:77:d5:0b:7c:ea:
79:3f:32:f0:8b:cf:17:c0:c6:27:52:fe:38:d2:af:
23:ab:7e:07:69:8f:ce:65:64:58:6d:61:ab:c5:28:
f5:95:94:78:80:7c:cc:48:c4:19:9f:1b:74:30:a4:
48:7c:fb:32:4b:9d:be:05:10:85:b4:a2:c4:c3:30:
47:de:f8:3c:65:35:dc:63:64:73:e6:e9:3d:12:76:
bb:2d:3e:a7:85:da:eb:f1:f9:72:20:67:55:54:11:
24:f3:5a:bd:b6:90:be:79:43:43:a7:6d:7b:bb:ba:
a8:18:c8:d8:d4:88:7b:6f:14:23:42:25:70:a8:df:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F6:5A:F5:D5:76:01:BC:91:CB:81:6F:B1:78:B2:BB:AD:5A:38:44
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/W_Za9dV2AbyRy4FvsXiyu61aOEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.251.0/24
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.152.0-185.210.154.255
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.74.0/23
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
73:7a:9c:b4:3b:02:e8:1d:e0:f7:ed:4c:09:c0:a8:b4:a2:20:
75:ea:15:c5:72:d1:07:8a:4e:24:a4:82:92:47:9c:a8:f0:87:
db:52:aa:f8:e8:69:f8:d4:7a:f0:9e:bd:e4:a2:bf:56:84:dd:
e8:68:11:3a:d3:5a:04:ba:a8:7c:c8:d3:b3:d5:ff:4c:f6:61:
21:d9:e8:d2:ea:76:72:20:2a:2e:77:c5:9e:84:aa:c0:c0:ef:
5b:75:8f:0b:0f:c4:52:8f:8d:b0:8b:b2:d1:ad:4c:f2:3d:f1:
bc:d7:c4:95:fa:c6:cd:06:2c:ff:ce:ae:78:aa:80:17:8c:a8:
ce:d6:9c:0f:2e:fb:14:2c:12:58:5b:20:23:df:b9:e4:8e:e7:
66:60:ba:62:26:f9:d7:f0:bf:17:78:c9:f3:a0:7a:2f:57:21:
84:dc:cc:e2:f0:d2:ed:57:a6:48:fc:2c:d9:7c:a3:8f:a4:db:
37:7c:84:81:74:88:0f:63:ef:5b:ab:74:33:7e:76:e6:80:ef:
dd:ab:3a:54:f8:76:9e:ac:24:83:a3:e7:a1:cd:2a:7f:5a:07:
f0:89:05:a1:97:26:fe:87:42:4d:c2:5f:92:cd:4b:89:86:8b:
52:bc:33:af:eb:49:b0:e9:6e:9a:dd:82:56:9e:b8:04:3b:93:
17:90:e8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:50:49 2026 by rpki-client