Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nAeFeRbtgcO9xysrPHigowjnTWg.roa
File: nAeFeRbtgcO9xysrPHigowjnTWg.roa (raw, json)
Hash identifier: fuEeXilLNP85vcDy4NEcSeM7JZ9+yFMv9yzAxe6FvhQ=
Subject key identifier: 9C:07:85:79:16:ED:81:C3:BD:C7:2B:2B:3C:78:A0:A3:08:E7:4D:68
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A023B90867CC010D782EE4FA3B2EEFD3AC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nAeFeRbtgcO9xysrPHigowjnTWg.roa
Signing time: Fri 21 Aug 2026 09:48:43 +0000
ROA not before: Fri 21 Aug 2026 09:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 14:17:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:b9:08:67:cc:01:0d:78:2e:e4:fa:3b:2e:ef:d3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 21 09:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9c07857916ed81c3bdc72b2b3c78a0a308e74d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:85:b6:e8:82:ae:a4:de:10:4c:93:49:4c:df:
d9:9f:8d:84:78:6b:e7:de:30:94:2a:67:8a:33:5e:
42:7c:19:29:8a:2c:a7:2b:5c:79:fc:40:20:eb:51:
43:5f:8b:2a:52:4e:7c:08:00:50:05:1d:95:a3:8f:
1d:75:8e:c3:b1:e1:a4:e2:bb:c6:ad:6d:3f:f0:9e:
2c:9e:85:68:a1:e5:a9:3e:bb:40:10:7d:dd:42:3d:
32:bf:d3:18:96:52:77:43:f3:e4:81:0f:78:38:bc:
41:75:ee:c5:ab:e5:fb:a9:15:22:45:29:5e:14:d3:
ee:36:9b:37:fa:69:3b:d1:57:18:c6:fc:55:a6:29:
08:3d:c7:51:74:f6:00:39:91:8f:b4:2d:f9:68:8c:
98:be:31:ae:7e:ee:33:08:3f:7f:02:b7:21:6f:f0:
e8:57:2b:a8:43:e5:b7:2e:e7:67:c9:a6:03:08:8a:
66:1e:84:bc:e2:5c:1c:86:f0:36:45:54:fe:f6:a1:
8a:d6:a3:06:63:bb:72:73:5f:d3:22:39:82:56:51:
b8:87:34:48:53:be:e3:f7:a7:37:e8:48:35:60:e3:
00:c6:7c:9d:7c:80:78:ab:de:c7:ca:03:9c:9c:88:
e6:c2:9d:52:5f:ae:ee:c3:b3:12:b6:96:d2:49:08:
ff:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:85:79:16:ED:81:C3:BD:C7:2B:2B:3C:78:A0:A3:08:E7:4D:68
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nAeFeRbtgcO9xysrPHigowjnTWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.124.69.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:dc:e5:34:f6:95:c8:f9:66:53:7d:1e:31:e8:ca:cb:75:08:
d5:6d:ad:df:9a:bd:0e:e4:0e:af:5f:ad:cc:81:22:1e:c9:f2:
a1:9f:3c:39:26:30:ac:8f:1d:49:11:6c:72:5a:4e:4f:35:94:
1f:07:f7:2e:45:24:3f:83:e7:e1:0c:f1:9e:e5:90:fc:99:a0:
d8:01:e5:49:38:59:7b:c0:94:5c:7a:eb:7a:c0:50:e0:bb:a9:
b3:a8:8d:40:c9:f4:32:88:3d:e5:88:d8:8b:96:be:7f:c4:d1:
f8:ec:8f:60:ff:e8:9a:55:b2:06:d4:18:49:d2:1d:f1:93:87:
14:d2:d9:ee:6a:60:bc:b2:f8:6b:6e:ef:ad:83:aa:1f:75:c0:
dc:88:20:f0:00:f4:fb:1d:02:5b:3e:21:cd:eb:cc:e3:af:76:
1c:38:56:2f:fd:02:79:66:2f:7d:ea:16:0c:d7:17:9e:dd:40:
90:fb:08:aa:54:e1:f1:da:ae:a5:60:97:46:98:23:86:55:c5:
f0:9c:28:eb:38:d0:1c:2b:55:cf:a5:cf:ac:ff:f7:f2:ba:72:
4c:bf:34:5b:e0:54:6a:7b:92:33:70:c3:7c:c7:ec:5c:54:66:
f8:ae:ea:0b:98:3b:7e:86:06:53:71:d8:f6:8f:2a:2a:6a:94:
87:6c:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 22:24:00 2026 by rpki-client