Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ct7gwdLk78hjgZYs0t_bstdWYUU.roa
File: ct7gwdLk78hjgZYs0t_bstdWYUU.roa (raw, json)
Hash identifier: 2Vxr+Tr0Ucf3NuI0JkXTugvook/xauXr+a1T+KvyCoY=
Subject key identifier: 72:DE:E0:C1:D2:E4:EF:C8:63:81:96:2C:D2:DF:DB:B2:D7:56:61:45
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0AF6BB91ABE2F3D154C134EA198EB11CA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ct7gwdLk78hjgZYs0t_bstdWYUU.roa
Signing time: Thu 17 Sep 2026 12:51:07 +0000
ROA not before: Thu 17 Sep 2026 12:51:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212017
IP address blocks: 45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
185.106.124.0/22 maxlen: 24
185.128.52.0/22 maxlen: 22
185.232.8.0/22 maxlen: 24
185.232.10.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:6b:b9:1a:be:2f:3d:15:4c:13:4e:a1:98:eb:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 17 12:51:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72dee0c1d2e4efc86381962cd2dfdbb2d7566145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:30:6c:f0:be:dd:30:cb:d4:e2:24:5b:bf:82:
58:66:89:66:58:46:ad:79:91:b1:a8:04:de:9b:de:
ae:5c:3b:98:31:bf:d4:2e:d2:b6:e5:f0:2a:63:2d:
01:32:5e:cc:d3:77:1c:99:da:58:e5:23:65:c3:6a:
11:19:ea:fc:04:62:6d:47:b4:66:2a:88:22:6b:12:
49:df:63:6a:cd:c2:b7:98:a9:0f:54:5e:18:fb:8a:
31:ab:18:e5:a3:dd:42:08:fb:0a:24:82:be:12:aa:
4b:34:8f:e5:67:80:a4:05:96:5c:7e:c0:e1:21:d5:
df:14:7d:34:96:fd:75:29:8b:04:6c:69:0a:af:6e:
40:bd:fa:1f:b3:fd:13:01:bb:aa:a3:9c:f2:98:a8:
3c:a0:b4:de:bf:70:ca:89:32:b3:19:b8:50:fd:3e:
96:00:36:3e:41:97:36:6f:81:5c:a4:91:72:88:a5:
5c:0c:51:69:ab:e7:93:91:7f:f6:64:68:3e:9e:22:
a7:35:fb:55:8b:f7:e9:0f:e2:cd:73:5c:e1:55:80:
c2:dd:b8:9c:4b:5f:f8:87:9c:f5:8a:6f:3e:16:5a:
09:7a:ec:83:8b:35:4b:34:56:f2:9f:1d:4f:0b:55:
e2:99:be:7d:c5:31:58:73:26:81:9c:87:57:c8:19:
87:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DE:E0:C1:D2:E4:EF:C8:63:81:96:2C:D2:DF:DB:B2:D7:56:61:45
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ct7gwdLk78hjgZYs0t_bstdWYUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/23
185.106.124.0/22
185.128.52.0/22
185.232.8.0/22
193.17.182.0/24
194.48.140.0/22
Signature Algorithm: sha256WithRSAEncryption
56:96:c4:cd:82:62:55:cf:ca:1e:c2:b7:21:17:f9:76:cd:a3:
95:82:d6:7f:d2:c2:a2:09:e4:dc:89:30:3e:d2:6a:8c:fe:9f:
d6:2a:15:f9:86:96:a4:d0:08:7b:e2:1b:33:fb:eb:86:63:f1:
15:12:ff:25:95:24:9f:b3:22:20:f4:c1:c9:6d:7f:58:bf:1c:
11:5a:e6:04:e6:ef:6a:b1:ac:99:52:e6:dc:1d:34:f7:ea:a7:
e4:15:97:0e:51:86:52:35:c7:1d:29:fb:f5:78:cd:9c:df:7d:
7e:02:81:8a:c1:a1:ee:10:0e:d1:4e:7c:14:ba:74:99:4b:a9:
6a:6b:67:12:82:1f:5f:4c:d8:4d:5a:f6:a2:4c:89:28:96:84:
ff:b3:c6:d0:c8:23:66:f0:5e:d4:e1:ef:da:dc:2f:cd:a2:13:
b0:4f:dd:8c:12:32:6a:3d:86:de:a1:b4:d1:13:78:e9:75:a6:
03:13:c2:1b:df:cf:7a:32:71:93:7c:70:e2:f4:f5:7b:6a:be:
17:fd:69:13:00:e2:d8:a5:ee:4d:0d:54:54:8d:25:62:fd:84:
fe:d8:4d:8c:86:60:49:c6:42:e0:cc:22:c3:27:b3:db:f4:30:
4d:fe:8f:b1:bd:ec:15:21:86:e0:bf:63:88:c5:e5:7f:32:43:
8b:f4:78:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 09:15:01 2026 by rpki-client