Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kE_x62MSabgQ75QL0yBfn7RY6R4.roa
File: kE_x62MSabgQ75QL0yBfn7RY6R4.roa (raw, json)
Hash identifier: dSC0SSULAoI47Ail5oy3lt1ZEbGYX9eKtXeFPsAVF+Q=
Subject key identifier: 90:4F:F1:EB:63:12:69:B8:10:EF:94:0B:D3:20:5F:9F:B4:58:E9:1E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E06BC34B2E76506CE774DFD2FA1790570
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kE_x62MSabgQ75QL0yBfn7RY6R4.roa
Signing time: Fri 08 May 2026 08:37:38 +0000
ROA not before: Fri 08 May 2026 08:37:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212017
IP address blocks: 45.90.236.0/24 maxlen: 24
45.90.237.0/24 maxlen: 24
185.106.124.0/22 maxlen: 24
185.128.52.0/22 maxlen: 22
185.227.172.0/22 maxlen: 22
185.232.8.0/22 maxlen: 24
185.232.10.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.182.0/24 maxlen: 24
194.48.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 May 2026 20:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:bc:34:b2:e7:65:06:ce:77:4d:fd:2f:a1:79:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 8 08:37:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=904ff1eb631269b810ef940bd3205f9fb458e91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:04:80:46:bd:47:2c:a4:10:f9:98:ae:4e:
db:d5:83:cb:a8:94:2c:6f:ff:0e:fa:2c:4a:d2:25:
14:d5:3e:2e:cb:df:f9:04:1d:b9:94:de:74:ce:cd:
8b:7f:3d:2c:13:d2:98:38:4b:1d:85:0c:e6:8f:19:
8f:29:0a:6d:b4:04:2b:df:95:2b:1b:d8:11:41:4c:
66:cf:f7:b6:2c:da:67:0b:e8:b9:fd:85:aa:7b:0f:
26:59:49:7b:41:40:8b:9b:57:b7:b7:de:17:be:cd:
24:b4:fb:f3:35:c9:4a:1d:a5:e3:f2:22:31:cc:14:
ce:7a:06:79:f9:47:35:24:66:d9:83:2d:46:eb:a0:
1b:9c:01:1c:c0:25:20:46:8f:ef:9d:9d:22:54:f0:
ac:82:d3:15:58:ae:45:99:15:5f:0b:ce:d8:ea:96:
9b:0a:4c:af:8b:23:6d:07:7b:92:bd:73:59:8c:df:
9c:d0:3a:e1:98:fc:4a:12:7a:6c:6b:fd:e9:b7:d5:
84:dc:d3:cd:0b:c8:a3:ed:d6:54:37:73:c8:c2:c8:
75:c9:a3:2d:f0:ba:6f:12:7a:93:0c:91:05:91:fe:
e6:88:0e:44:d7:9e:cf:26:60:e5:5f:66:0d:72:28:
91:4b:b4:e4:59:e2:64:52:ad:a5:46:0f:cb:92:8c:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4F:F1:EB:63:12:69:B8:10:EF:94:0B:D3:20:5F:9F:B4:58:E9:1E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kE_x62MSabgQ75QL0yBfn7RY6R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.236.0/23
185.106.124.0/22
185.128.52.0/22
185.227.172.0/22
185.232.8.0/22
193.17.180.0/24
193.17.182.0/24
194.48.140.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:ac:22:da:91:d1:14:90:5a:b5:a8:73:59:53:0b:81:fb:46:
a2:44:53:0c:fb:5b:1d:3c:df:b4:31:b9:51:b8:d2:59:9c:5e:
86:d3:29:fe:ea:06:39:0a:11:fd:1e:62:d0:42:79:a7:20:ac:
82:8b:b5:9a:78:11:10:10:ff:a9:ee:d3:1c:4a:46:5c:7c:85:
7b:4f:07:71:56:3c:79:93:b3:9c:c6:8d:d7:cd:66:a8:0c:aa:
e8:02:87:dd:a6:f4:f4:46:1e:1f:ef:b5:32:cb:91:23:51:38:
26:7b:1c:9a:76:07:c3:18:0b:b1:a7:bb:ff:ee:de:f8:da:99:
0f:59:43:bb:6c:66:0a:8e:d6:25:f9:09:f5:6f:52:69:73:76:
5f:61:ff:c6:8e:59:e4:16:b7:42:22:9f:a4:6e:9d:af:a7:60:
74:b1:eb:b7:bf:03:8a:19:c4:d0:49:90:85:11:22:68:ca:0d:
11:4e:c6:07:8a:82:cb:16:16:60:71:30:ca:02:5f:7b:c7:41:
4b:cb:e5:29:30:34:cd:35:95:68:2e:db:6a:35:aa:27:b4:cc:
dc:29:4b:ed:d6:4c:14:62:9e:b8:80:96:ed:8a:66:21:37:4f:
cd:85:f6:8c:88:24:b3:21:2d:90:d6:c3:3e:ff:45:30:3d:7f:
3e:75:fa:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 01:27:07 2026 by rpki-client