Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YqNmPzbRk_E9DycAG56B2G0UFTY.roa
File: YqNmPzbRk_E9DycAG56B2G0UFTY.roa (raw, json)
Hash identifier: P0nZahogj6MHOtebxjUBjV9PMH59ICAAPon1aFkRUfg=
Subject key identifier: 62:A3:66:3F:36:D1:93:F1:3D:0F:27:00:1B:9E:81:D8:6D:14:15:36
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A19849A88A22C24A9D1823E3190B4DA98E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YqNmPzbRk_E9DycAG56B2G0UFTY.roa
Signing time: Sun 01 Nov 2026 18:05:26 +0000
ROA not before: Sun 01 Nov 2026 18:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.81.154.0/24 maxlen: 24
45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.227.174.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
195.34.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:49:a8:8a:22:c2:4a:9d:18:23:e3:19:0b:4d:a9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 1 18:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62a3663f36d193f13d0f27001b9e81d86d141536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8b:44:3e:53:a8:45:a6:16:a8:2f:d5:1f:ea:
ba:0e:72:0d:ce:e2:1e:cf:77:73:52:7e:76:f3:d6:
7e:d7:f3:c9:22:43:76:2c:82:a0:fe:dd:02:89:71:
14:08:47:f1:bf:a6:6d:ca:b5:a7:4b:a2:57:7b:35:
c1:f4:37:a6:a4:f7:52:98:3c:21:64:3f:29:bd:47:
63:bd:87:95:dc:07:b2:9f:f0:eb:68:63:af:22:36:
99:cf:97:f9:63:3e:91:f3:78:71:ef:80:4f:47:71:
ce:15:03:ea:14:33:d9:7d:79:19:ac:2c:53:0d:75:
f2:53:e4:52:bc:4c:af:88:75:aa:f7:f2:f0:f5:c7:
72:6d:41:33:c9:a9:bf:00:01:d4:49:4d:e2:9e:08:
c6:cd:61:99:89:ab:ac:fb:8b:ed:ac:1e:b1:91:6e:
c7:16:8c:6e:5a:fd:ef:b8:5a:d0:5c:2f:0a:e4:be:
2d:b1:79:40:be:7a:5e:bd:ce:a6:1a:af:70:3f:08:
fb:68:c5:f2:ce:c9:db:2b:bc:b9:26:fe:84:f2:cf:
59:bc:07:39:eb:13:1d:a9:51:df:e1:41:35:f6:8e:
36:6c:44:ef:36:6f:0b:4c:b3:0d:c8:e5:2a:e8:d5:
e2:7f:23:dc:51:46:db:35:76:cb:21:4f:1f:6c:1e:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A3:66:3F:36:D1:93:F1:3D:0F:27:00:1B:9E:81:D8:6D:14:15:36
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YqNmPzbRk_E9DycAG56B2G0UFTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.209.74.0/24
185.210.154.0/24
185.214.102.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.227.174.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.8.112.0/23
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
195.34.67.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:85:75:c9:62:87:ce:37:c6:6e:7f:3f:40:19:73:51:16:1f:
46:59:6a:3d:ac:8a:2d:78:52:1c:95:b1:97:51:da:2e:f8:1b:
a2:62:be:55:a7:f7:dc:91:93:35:39:09:a7:2a:00:1a:80:52:
c6:5c:07:1e:fb:e1:eb:04:ca:f3:e4:b1:ce:94:80:82:08:d5:
23:9a:2d:54:2b:61:5f:a7:fb:f4:59:23:db:17:c9:dc:1f:91:
2a:ca:cd:10:53:cd:b5:38:8e:b6:94:78:c7:55:32:cd:2f:81:
98:5f:9d:64:79:84:2b:86:15:a7:3a:76:2a:c5:4e:49:23:9d:
e4:1c:9b:1a:98:51:22:63:e5:cb:58:5e:39:f9:86:95:8f:66:
5c:8e:6f:18:61:1b:c3:c9:22:a5:cb:e5:f8:b0:85:34:e1:da:
5e:b4:94:79:b2:a8:d2:e4:cc:83:36:61:9d:bc:8d:7e:c8:2f:
04:15:b2:ec:b4:e5:46:06:83:3e:ec:ba:be:5e:0f:21:2b:08:
89:d1:c2:49:ba:31:08:2b:7d:27:bb:d5:41:22:fc:66:0c:d6:
14:fe:05:57:91:45:3c:98:84:99:aa:9b:c7:62:56:f9:06:b4:
47:ac:59:1d:81:76:29:de:f6:b9:ea:91:c0:59:04:53:41:34:
d4:5a:42:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 03:19:45 2026 by rpki-client