Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bULrh8bjDAOi3y8jTCkkBe6K4NE.roa
File: bULrh8bjDAOi3y8jTCkkBe6K4NE.roa (raw, json)
Hash identifier: CaUeu7RLAZT1edkS+3fWMsgnJTpBRwlhPkJl+9xLnQs=
Subject key identifier: 6D:42:EB:87:C6:E3:0C:03:A2:DF:2F:23:4C:29:24:05:EE:8A:E0:D1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A139679AA061B8A8E105631AADE4CEF2CE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bULrh8bjDAOi3y8jTCkkBe6K4NE.roa
Signing time: Wed 14 Oct 2026 07:54:13 +0000
ROA not before: Wed 14 Oct 2026 07:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:67:9a:a0:61:b8:a8:e1:05:63:1a:ad:e4:ce:f2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 14 07:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d42eb87c6e30c03a2df2f234c292405ee8ae0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:ad:a8:75:64:63:5e:84:9b:4c:1a:3b:47:
9f:e8:70:d7:38:f7:4a:b2:6a:c4:85:9a:d4:b4:8e:
9b:37:ed:9a:a8:e9:f6:f5:94:cb:05:e9:f6:0b:19:
9a:51:9f:48:5b:5c:65:12:26:3e:32:4d:f1:2b:94:
c9:a7:ce:06:b5:07:b5:8d:c9:51:88:87:29:9b:2e:
9f:69:1f:55:38:32:8d:de:8f:20:e5:88:9e:ac:3a:
be:0f:17:79:79:ea:e1:be:f5:98:2c:86:1b:7c:a2:
54:a8:be:f8:76:2b:46:f8:1e:bb:b6:58:48:e0:33:
f0:cc:e9:bc:7e:d1:51:6e:73:17:5c:6c:1a:52:ab:
ff:ed:e5:40:d0:27:30:15:e3:17:50:73:d0:72:a3:
da:93:8e:a0:85:8e:4e:79:3c:01:61:c5:4d:f2:28:
5e:a9:6d:42:07:eb:78:e3:4c:2f:63:76:f9:92:bb:
0c:1e:f7:ad:23:26:7a:fc:63:e7:8b:c1:a3:59:0c:
18:b1:89:4c:0e:89:f9:85:f2:ea:c8:60:c8:96:80:
e8:cf:4f:72:20:4e:30:e2:89:bf:33:4e:6d:17:2b:
fc:45:03:93:4b:2c:1b:6c:ee:96:11:32:f0:be:0d:
e4:31:97:13:79:64:29:f0:09:ca:4e:26:27:fb:89:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:42:EB:87:C6:E3:0C:03:A2:DF:2F:23:4C:29:24:05:EE:8A:E0:D1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/bULrh8bjDAOi3y8jTCkkBe6K4NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0-185.222.30.255
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.74.0/23
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
91:64:c0:14:84:ed:ab:3f:04:e7:ce:48:fb:89:9e:7e:a7:c9:
89:8e:df:ed:7e:e9:92:63:0a:39:10:31:ec:17:bf:a4:76:cb:
b3:2d:e3:67:da:15:ab:f8:53:b1:95:85:6f:f5:2f:13:17:80:
98:fe:7f:a4:13:74:24:00:01:f5:99:02:19:d5:c4:fa:80:a2:
a0:35:c1:ff:7c:13:85:af:04:3f:f0:c1:7e:5c:9a:b8:8c:96:
26:3b:ca:3b:eb:cf:8f:f7:c2:28:1e:21:df:b0:bd:ee:d4:f4:
4e:34:a3:36:01:fb:7c:3e:67:77:46:5c:01:bb:46:a5:da:38:
97:76:c4:64:f2:a4:a5:68:71:a3:a4:1c:3d:2c:10:73:83:ee:
07:33:74:67:9a:6a:e1:8a:fc:08:84:ae:1e:b4:69:4d:96:5e:
21:1d:14:8a:52:72:4a:62:5a:28:45:6a:aa:c4:0c:a2:8b:09:
37:53:0a:ee:ba:a4:c1:e4:ed:42:95:10:3f:55:46:d5:d5:e5:
13:de:32:3c:fe:a9:4b:d5:bc:0d:99:de:5d:65:93:fa:6c:27:
cf:cf:29:fd:2e:33:d9:ec:eb:83:32:76:0b:4d:73:81:4f:d1:
18:8c:2a:06:1b:90:73:92:b7:2e:93:d9:d5:18:dc:37:0f:18:
f8:53:65:a5
-----BEGIN CERTIFICATE-----
MIIGPzCCBSegAwIBAgISAaE5Z5qgYbio4QVjGq3kzvLOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDE0MDc1NDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDQyZWI4N2M2ZTMwYzAzYTJkZjJmMjM0YzI5MjQwNWVlOGFlMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3GtqHVkY16Em0waO0ef6HDXOPdK
smrEhZrUtI6bN+2aqOn29ZTLBen2CxmaUZ9IW1xlEiY+Mk3xK5TJp84GtQe1jclR
iIcpmy6faR9VODKN3o8g5YierDq+Dxd5eerhvvWYLIYbfKJUqL74ditG+B67tlhI
4DPwzOm8ftFRbnMXXGwaUqv/7eVA0CcwFeMXUHPQcqPak46ghY5OeTwBYcVN8ihe
qW1CB+t440wvY3b5krsMHvetIyZ6/GPni8GjWQwYsYlMDon5hfLqyGDIloDoz09y
IE4w4om/M05tFyv8RQOTSywbbO6WETLwvg3kMZcTeWQp8AnKTiYn+4kuawIDAQAB
o4IDSzCCA0cwHQYDVR0OBBYEFG1C64fG4wwDot8vI0wpJAXuiuDRMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvYlVMcmg4YmpEQU9pM3k4alRDa2tCZTZLNE5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCCAUYEAgABMIIB
PgMEAC0IFwMEAS1aEAMEAS2DhgMEAC2T4wMEAblszAMEALl+UgMEALnHNgMEAbnH
njAMAwQAuc75AwQCuc74AwQAudEmMAwDBAC50UkDBAK50UgDBAC50pgDBAC50poD
BAC50ukDBAC50usDBAC51mcDBAC52hQDBAC52mUwDAMEALnc+QMEArnc+AMEALnd
FDAMAwQCud4cAwQAud4eAwQAud9QAwQAud+bAwQCueEAMAwDBAC54RUDBAC54RYD
BAC54mgDBAC54msDBAC545ADBAG545IDBAC55EgDBAG55EoDBAC55jUDBAC55kMD
BAC56M4DBAC56hYDBAC574wDBAG58HgDBAC59nAwDAMEBMEIcAMEAMEIcgMEAME6
kAMEAcE6kgMEAMIFQQMEAMIFQwMEAMJMqQMEAMKTETANBgkqhkiG9w0BAQsFAAOC
AQEAkWTAFITtqz8E585I+4mefqfJiY7f7X7pkmMKORAx7Be/pHbLsy3jZ9oVq/hT
sZWFb/UvExeAmP5/pBN0JAAB9ZkCGdXE+oCioDXB/3wTha8EP/DBflyauIyWJjvK
O+vPj/fCKB4h37C97tT0TjSjNgH7fD5nd0ZcAbtGpdo4l3bEZPKkpWhxo6QcPSwQ
c4PuBzN0Z5pq4Yr8CISuHrRpTZZeIR0UilJySmJaKEVqqsQMoosJN1MK7rqkweTt
QpUQP1VG1dXlE94yPP6pS9W8DZneXWWT+mwnz88p/S4z2ezrgzJ2C01zgU/RGIwq
BhuQc5K3LpPZ1RjcNw8Y+FNlpQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:17 2026 by rpki-client