Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iZvBLXUCUAQW_HaJeUPimF9f_rU.roa
File: iZvBLXUCUAQW_HaJeUPimF9f_rU.roa (raw, json)
Hash identifier: MNXD54Ju8GImEqDPfGBMnXSWEPLcP1SqXgJyr3nCIUg=
Subject key identifier: 89:9B:C1:2D:75:02:50:04:16:FC:76:89:79:43:E2:98:5F:5F:FE:B5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A12C89DF782CD3F56FE796A0B7BDBE3409
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iZvBLXUCUAQW_HaJeUPimF9f_rU.roa
Signing time: Sun 11 Oct 2026 19:56:35 +0000
ROA not before: Sun 11 Oct 2026 19:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.222.30.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:89:df:78:2c:d3:f5:6f:e7:96:a0:b7:bd:be:34:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 19:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=899bc12d7502500416fc76897943e2985f5ffeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:be:6b:ef:95:d9:f9:03:55:ec:b8:c5:6e:9c:
5b:16:c3:56:08:10:58:da:58:8f:5a:20:3f:ab:3f:
e1:8e:51:92:24:d0:bd:43:9d:68:c6:20:dc:aa:19:
90:5c:e8:82:30:02:83:68:56:77:36:f3:98:04:01:
03:32:8f:61:00:98:42:3a:60:56:3b:46:3a:1a:a3:
40:ce:7b:0e:d8:1a:3b:d1:ea:c4:55:dc:cf:82:e9:
4d:ec:fe:57:59:9f:ef:3e:5c:5c:1b:1f:85:f2:24:
56:93:2b:ee:46:6c:5a:0e:7a:71:b4:e6:d1:7b:07:
3a:aa:e3:82:2f:79:40:73:46:32:96:7f:f8:89:d6:
57:27:4c:74:a3:d8:1d:fc:04:90:49:86:cf:b2:31:
95:36:3a:f8:2e:c2:86:4b:80:7f:5c:db:cd:18:66:
20:fb:b0:44:8d:6a:2d:cf:a1:89:6d:1c:45:ec:61:
53:dc:9c:a2:0e:e7:cd:ba:25:37:80:88:a8:3c:22:
63:50:59:3b:85:db:91:94:9a:34:56:12:27:ac:95:
eb:4b:99:6a:3b:cd:d2:08:27:75:d4:d4:66:ac:3f:
3a:3c:2a:23:36:5f:a2:f0:9d:b1:b1:68:82:b4:23:
24:a3:57:8b:99:c9:57:27:56:5f:13:f2:c5:ea:1c:
be:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9B:C1:2D:75:02:50:04:16:FC:76:89:79:43:E2:98:5F:5F:FE:B5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/iZvBLXUCUAQW_HaJeUPimF9f_rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0-185.222.30.255
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
20:44:82:ed:9f:ea:ca:d0:4c:6c:f2:2e:3b:bd:ec:1e:2d:d7:
8a:eb:f9:77:0a:94:d2:2c:a1:cf:5a:c8:c3:b7:6b:57:9a:4b:
dd:6f:ae:74:78:01:42:63:97:58:32:53:d8:d6:f2:66:42:72:
3d:dd:ab:ab:9d:52:f2:0b:e4:77:21:75:9c:c8:34:9c:eb:e6:
be:2c:b0:30:56:b6:05:bc:16:9c:cc:68:71:8b:fe:58:53:45:
fd:49:8e:02:fd:66:4c:8c:56:93:74:2b:8c:fa:08:f9:f3:d3:
07:b4:9f:77:0c:2e:94:76:88:93:0a:6c:58:85:49:8c:06:dc:
59:b4:be:35:e9:e8:fc:d0:42:c1:53:5a:08:4c:73:eb:fb:4e:
a4:e3:4b:46:cc:53:fa:7c:f1:fd:9f:15:5f:db:a7:c6:b1:b4:
75:97:36:bf:c1:bf:1e:2f:f9:1b:b0:92:39:26:ce:9b:11:b0:
96:9a:9f:5a:e2:b0:bf:54:42:47:eb:c2:9c:28:39:ff:2d:59:
e4:a8:10:88:4c:ad:3f:b0:fb:71:0d:53:64:d3:9a:08:02:a7:
d2:6e:b6:39:eb:51:d7:87:30:69:2a:03:6b:58:5d:f4:21:aa:
60:ff:17:d2:5a:33:6a:20:f3:28:5c:2b:fc:45:9b:d5:82:9c:
56:97:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:16:39 2026 by rpki-client