Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WsEQQ7aULEFPvRbf4gDSoidqXEA.roa
File: WsEQQ7aULEFPvRbf4gDSoidqXEA.roa (raw, json)
Hash identifier: xcyH5WKe9hqHui+wyRN7tDNYTPXsHCw16IiHJKEo5Po=
Subject key identifier: 5A:C1:10:43:B6:94:2C:41:4F:BD:16:DF:E2:00:D2:A2:27:6A:5C:40
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A17EE874EA9D4CD5746350769F13DD4B44
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WsEQQ7aULEFPvRbf4gDSoidqXEA.roa
Signing time: Tue 27 Oct 2026 19:48:45 +0000
ROA not before: Tue 27 Oct 2026 19:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:e8:74:ea:9d:4c:d5:74:63:50:76:9f:13:dd:4b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 27 19:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ac11043b6942c414fbd16dfe200d2a2276a5c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:49:4c:23:5c:4f:33:a2:22:09:f1:0f:76:6a:
d9:eb:4c:cc:83:4e:cd:0e:35:a2:57:35:89:a0:a2:
6f:23:3d:a9:9f:5b:22:6b:4a:12:6a:29:62:98:12:
b4:09:88:97:b1:de:bd:2e:4d:6f:d8:d4:b3:01:8a:
f0:74:50:a8:cc:4f:65:44:a5:c1:81:be:2d:8b:b0:
60:f0:13:52:24:81:b9:af:81:d5:60:72:2c:1f:8f:
75:9e:ed:46:30:2b:6b:d3:2e:f7:99:f1:57:e4:0b:
61:ca:68:7b:ee:fa:b5:e1:09:81:4f:14:70:f2:5f:
b4:22:f9:94:b5:cf:73:c3:09:78:9f:f2:3c:e8:3f:
c7:d4:8e:3b:18:4c:f6:47:6b:00:11:11:6a:52:45:
47:10:71:84:24:2f:03:c9:c0:54:a3:b3:1b:f9:9f:
a6:62:56:9a:1d:77:08:ac:f2:f5:a4:25:67:ed:f9:
5d:9a:45:cb:6e:bb:a6:39:47:b8:fd:e2:c9:eb:35:
76:c3:aa:8f:ed:e3:d7:14:86:9b:5a:1f:15:6a:0d:
e2:49:c3:9c:7e:c2:1e:6c:19:5d:0c:32:40:23:fe:
c3:59:ba:df:5a:0e:d7:4f:d9:ec:66:9d:8a:61:b9:
50:1b:f6:dd:e4:bb:cc:3c:40:1a:b0:c0:71:97:3c:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:10:43:B6:94:2C:41:4F:BD:16:DF:E2:00:D2:A2:27:6A:5C:40
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WsEQQ7aULEFPvRbf4gDSoidqXEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0-185.222.30.255
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.74.0/23
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c6:b7:b2:5f:73:1c:2b:14:7b:bc:2b:5f:3c:ea:e4:b1:1b:
49:98:75:b5:8b:b8:b9:cb:63:03:28:e5:21:02:7c:f3:6b:f5:
ef:1f:82:7b:19:73:02:72:0c:8b:2b:63:fe:63:2c:e1:96:b7:
2d:e9:97:f4:dc:ee:03:d7:1e:a7:9e:09:3a:b8:c1:de:17:36:
eb:9a:4d:95:98:65:fa:11:10:cb:7e:54:81:43:4d:af:6f:88:
dc:a8:9c:0d:46:03:b7:3c:83:14:54:bc:8f:3e:71:d5:f2:b7:
79:f1:87:e4:62:d0:57:21:d0:c7:8a:ec:ff:c7:47:05:02:da:
5b:e6:e5:10:76:3d:e6:1c:55:eb:18:44:b6:0e:8b:77:ed:22:
8b:40:7d:92:a0:eb:c4:a7:bf:8c:c3:cc:35:d2:f4:d3:af:93:
3a:7c:d7:ac:1c:69:42:35:b9:30:a1:28:26:21:72:d6:6b:56:
9e:c7:ad:6f:f8:5f:c8:0d:6d:0c:4a:57:53:ca:f8:40:20:a3:
95:f2:d7:e4:c4:bf:ab:6d:07:0c:3b:70:a0:72:be:c7:8a:1c:
d0:e6:33:31:13:dc:73:6a:6f:a0:01:4e:de:b5:f7:8a:6f:87:
05:da:59:28:5c:0d:1a:72:d9:6b:bb:ed:74:16:0d:c7:7a:cc:
f3:4c:73:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:59:15 2026 by rpki-client