Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bRJ0P1jdgntAtockVVSSPzn06YU.roa
File: bRJ0P1jdgntAtockVVSSPzn06YU.roa (raw, json)
Hash identifier: Iz54sjnP+zeJxcJxvRP0ASNC2ShR6FMHDbS8PuQbyPM=
Subject key identifier: 6D:12:74:3F:58:DD:82:7B:40:B6:87:24:55:54:92:3F:39:F4:E9:85
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A143FDE323CEAFEB23998475A55BC1B448
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bRJ0P1jdgntAtockVVSSPzn06YU.roa
Signing time: Fri 16 Oct 2026 09:14:34 +0000
ROA not before: Fri 16 Oct 2026 09:14:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:fd:e3:23:ce:af:eb:23:99:84:75:a5:5b:c1:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 16 09:14:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d12743f58dd827b40b687245554923f39f4e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7a:58:e1:af:08:ec:26:39:fb:b1:b5:20:d6:
f9:a5:81:31:de:b3:c3:cb:b1:e6:d4:b3:b0:a9:a3:
6e:b5:58:f8:38:ed:e6:97:3f:c8:42:99:2c:e1:82:
59:60:26:eb:92:31:20:67:02:ff:be:29:b9:21:fe:
6b:9f:82:cd:4f:ea:a9:56:f5:0c:33:4b:5f:93:18:
21:1e:b9:6f:a4:15:49:16:43:c5:56:13:e0:02:28:
48:73:2c:78:aa:9b:52:97:5b:22:42:05:17:17:6c:
68:79:41:ee:5a:f0:27:d0:c7:bc:e4:6b:0b:26:eb:
e7:62:aa:78:e2:59:0f:a6:29:a4:c8:d0:2c:27:28:
f9:82:f6:80:cf:34:0d:b1:fb:94:66:58:3e:e2:76:
c7:e4:bb:28:d2:d9:5e:e1:7c:41:02:1b:c1:61:07:
8a:69:ed:6d:c9:9e:b2:99:e8:2f:3d:e4:8a:95:54:
05:d5:cc:4e:70:ca:f5:04:81:b1:a3:6c:20:73:5a:
71:c4:34:61:b0:c1:30:d5:45:e1:dd:6b:a6:07:8d:
a9:c4:75:55:d9:16:da:d9:f5:43:71:a3:b3:a3:7c:
6c:b9:82:8e:d0:1f:5c:d5:d4:02:a3:97:10:d9:67:
28:9a:a2:6f:c4:97:23:5c:18:b0:36:23:69:ba:ae:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:12:74:3F:58:DD:82:7B:40:B6:87:24:55:54:92:3F:39:F4:E9:85
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bRJ0P1jdgntAtockVVSSPzn06YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0-185.222.30.255
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.74.0/23
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
be:d4:6a:9d:49:cd:e6:3c:97:8c:c0:c8:58:7a:59:d3:f5:98:
76:86:33:e1:48:40:27:53:38:5f:34:3a:e8:ce:57:fd:e0:48:
7d:d9:f4:44:33:92:67:35:58:d8:f7:b5:84:8b:3f:e5:e5:14:
bb:c2:42:25:41:2f:cd:cf:37:b7:1d:1c:16:0d:b6:70:d7:ca:
83:65:6f:7e:13:44:f2:2b:1d:b2:be:de:5d:e1:8e:ac:68:6e:
55:23:52:2a:ca:4e:38:ce:f7:38:af:61:b0:06:e3:61:4d:9c:
3c:e6:4f:4f:86:fa:8a:c5:97:53:38:b9:a1:f9:3e:8d:98:65:
54:ca:19:1c:64:88:2d:2c:74:0c:16:54:02:b8:2e:3b:c8:c9:
46:c2:60:db:ef:3f:ff:48:1a:0c:6b:57:61:f6:69:e4:c9:69:
b4:ec:3d:2b:8f:13:a6:45:dc:1e:a3:04:b7:89:db:2d:83:39:
70:3e:22:1a:a5:d4:8c:78:25:86:98:ee:b2:60:53:e0:c2:fd:
cf:35:2f:25:b8:64:27:3c:c3:89:8e:dd:63:8e:7c:66:59:95:
a5:d7:46:a9:c1:33:5f:cb:89:a0:01:10:e0:22:a2:d8:30:92:
6a:68:8a:43:ed:41:30:8e:78:68:32:dc:11:6b:19:eb:8f:e3:
8a:20:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:23:16 2026 by rpki-client