Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b9efvFHCu7xEK8dtKNrV2nex30I.roa
File: b9efvFHCu7xEK8dtKNrV2nex30I.roa (raw, json)
Hash identifier: 9dmlr7+lA+JiajEG6LIzXqefSAp3P/h6cVrQNwynpCU=
Subject key identifier: 6F:D7:9F:BC:51:C2:BB:BC:44:2B:C7:6D:28:DA:D5:DA:77:B1:DF:42
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0D7A1B9023F3CC436A8F4E6567999142A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b9efvFHCu7xEK8dtKNrV2nex30I.roa
Signing time: Fri 25 Sep 2026 08:14:54 +0000
ROA not before: Fri 25 Sep 2026 08:14:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.81.154.0/24 maxlen: 24
45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.227.174.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:a1:b9:02:3f:3c:c4:36:a8:f4:e6:56:79:99:14:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 25 08:14:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fd79fbc51c2bbbc442bc76d28dad5da77b1df42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:e3:d5:b6:31:f4:01:3d:e6:37:47:b2:84:
43:75:2d:29:53:c3:f4:08:5f:0e:60:af:5b:af:37:
fb:67:2a:68:23:9d:72:87:ae:c8:7a:56:45:e7:25:
21:39:94:24:4e:49:40:ae:22:fb:7b:6a:ca:0a:0c:
14:19:a4:e5:8a:a8:37:ef:89:d4:04:70:31:e0:07:
88:3e:5c:c8:cb:c1:12:91:fc:24:c2:f9:fb:3e:69:
60:74:ed:22:a8:e2:2a:cc:6a:cf:97:b0:7e:fd:49:
35:0f:d3:6b:eb:ca:4c:96:ae:a1:39:24:49:74:88:
44:7b:f1:6e:81:3a:02:14:d9:ff:5e:99:f3:e1:78:
67:64:99:ea:ba:43:56:a3:6a:29:14:4d:0b:df:b3:
4c:ab:00:a0:5b:20:4d:af:67:2e:3e:08:c8:63:12:
cf:a0:4c:9b:23:68:f6:dc:2b:4c:ad:f8:cd:73:ae:
bc:d9:ef:b9:d7:77:e4:72:74:67:ab:82:c2:38:02:
6a:a7:05:ec:ec:f6:a9:78:e3:cd:19:03:40:91:f5:
0c:1f:41:fa:14:18:07:5d:09:22:bf:40:26:55:d3:
b6:38:54:b9:71:ad:9c:6d:8d:1f:ea:1a:45:75:9e:
bf:62:7a:1f:32:e5:7b:8b:c0:06:82:8f:cc:55:8b:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:9F:BC:51:C2:BB:BC:44:2B:C7:6D:28:DA:D5:DA:77:B1:DF:42
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/b9efvFHCu7xEK8dtKNrV2nex30I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.227.174.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3d:d0:eb:58:f0:6f:69:2a:e5:c2:4d:72:08:96:91:55:f6:
a9:2d:12:31:62:19:6e:73:86:a7:12:29:ea:f6:b6:54:93:7d:
61:97:ca:7b:49:c7:0d:6e:d5:17:47:3c:0f:47:93:10:4a:d8:
35:a0:f6:a1:1d:26:e2:52:c0:51:27:74:19:46:15:b2:04:47:
a4:4e:bd:d0:f2:02:45:e1:77:b3:fb:02:e1:a1:aa:e0:7b:2b:
f0:4f:18:57:79:89:e0:1a:64:1d:c7:82:ed:c4:1a:27:b6:13:
a7:6f:36:34:78:ec:c7:2b:be:60:a8:7a:47:76:e9:93:6b:8d:
36:6c:53:84:20:b4:45:e7:7c:ec:60:4b:af:d3:e3:81:6e:97:
ac:44:98:57:9d:ea:e5:c6:00:6f:da:27:5a:15:9d:5f:41:a9:
7f:06:e3:31:71:a6:a3:86:51:55:3c:c0:47:40:16:a1:4e:6c:
16:fb:3b:c8:69:8f:56:4e:39:15:6c:d9:7b:9b:94:78:16:f5:
9e:c9:39:ca:9e:d8:40:ce:0c:b1:52:3a:5a:24:29:97:b0:d9:
74:b9:bb:87:bb:f1:0a:21:d3:79:a1:28:5a:32:e8:d6:b4:fe:
1f:86:cb:09:dc:56:9c:24:e7:26:76:b3:2a:a6:72:6a:15:80:
22:bd:25:33
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAaDXobkCPzzENqj05lZ5mRQqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwOTI1MDgxNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQ3OWZiYzUxYzJiYmJjNDQyYmM3NmQyOGRhZDVkYTc3YjFkZjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Svj1bYx9AE95jdHsoRDdS0pU8P0
CF8OYK9brzf7ZypoI51yh67IelZF5yUhOZQkTklAriL7e2rKCgwUGaTliqg374nU
BHAx4AeIPlzIy8ESkfwkwvn7PmlgdO0iqOIqzGrPl7B+/Uk1D9Nr68pMlq6hOSRJ
dIhEe/FugToCFNn/Xpnz4XhnZJnqukNWo2opFE0L37NMqwCgWyBNr2cuPgjIYxLP
oEybI2j23CtMrfjNc6682e+513fkcnRnq4LCOAJqpwXs7PapeOPNGQNAkfUMH0H6
FBgHXQkiv0AmVdO2OFS5ca2cbY0f6hpFdZ6/YnofMuV7i8AGgo/MVYvH0wIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFG/Xn7xRwru8RCvHbSja1dp3sd9CMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvYjllZnZGSEN1N3hFSzhkdEtOclYybmV4MzBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBAAt
UZoDBAAtlsMDBAAtn08DBAC5eQwDBAC5eQ8DBAC5xCkDBAC50poDBAG52hADBAC5
2hMDBAC53PkDBAC53RYDBAC531IDBAC5464DBAC55EgDBAC56M0wDAMEALnsGQME
ArnsGAMEALnweAMEAbn1IgMEALn6tAMEAMERtAMEAMERtwMEAMIFQQMEAMIwjjAN
BgkqhkiG9w0BAQsFAAOCAQEASz3Q61jwb2kq5cJNcgiWkVX2qS0SMWIZbnOGpxIp
6va2VJN9YZfKe0nHDW7VF0c8D0eTEErYNaD2oR0m4lLAUSd0GUYVsgRHpE690PIC
ReF3s/sC4aGq4Hsr8E8YV3mJ4BpkHceC7cQaJ7YTp282NHjsxyu+YKh6R3bpk2uN
NmxThCC0Red87GBLr9PjgW6XrESYV53q5cYAb9onWhWdX0GpfwbjMXGmo4ZRVTzA
R0AWoU5sFvs7yGmPVk45FWzZe5uUeBb1nsk5yp7YQM4MsVI6WiQpl7DZdLm7h7vx
CiHTeaEoWjLo1rT+H4bLCdxWnCTnJnazKqZyahWAIr0lMw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:48:05 2026 by rpki-client