Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pENcn_vTx9OX4lhincblj70Bc-k.roa
File: pENcn_vTx9OX4lhincblj70Bc-k.roa (raw, json)
Hash identifier: Da0lqsG9IrD2yQYviM+5ck4Pl+7Qlo/4/M0ufv2+3GI=
Subject key identifier: A4:43:5C:9F:FB:D3:C7:D3:97:E2:58:62:9D:C6:E5:8F:BD:01:73:E9
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E983108040BB9C1948FBC844DE7C536D0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pENcn_vTx9OX4lhincblj70Bc-k.roa
Signing time: Fri 05 Jun 2026 14:30:10 +0000
ROA not before: Fri 05 Jun 2026 14:30:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:31:08:04:0b:b9:c1:94:8f:bc:84:4d:e7:c5:36:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 5 14:30:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4435c9ffbd3c7d397e258629dc6e58fbd0173e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:94:7c:c6:c0:3e:ed:be:87:13:c2:3a:a6:
24:33:7c:f8:0a:63:a7:72:53:65:b4:79:73:3b:cc:
eb:bb:09:d5:4f:81:4a:aa:05:dc:1a:e5:7f:9d:94:
44:6a:a3:bc:cc:37:56:82:f8:22:27:2b:c5:3c:a9:
54:e8:a3:78:ce:ff:0b:73:3f:f9:7c:63:cc:11:7e:
c9:b1:d8:82:30:94:15:16:54:59:89:ab:b7:97:74:
ad:ca:da:35:55:4c:8e:a3:85:06:60:f4:43:dd:1e:
37:6d:32:47:f6:8b:4e:4e:e1:f8:08:fc:42:11:fe:
36:23:9a:bc:74:91:9c:d1:44:5a:91:e3:79:43:96:
f8:74:5c:9f:62:ff:d7:d0:7c:f6:50:c2:a1:ff:9a:
86:be:d9:63:6e:82:4a:38:67:6d:d2:5a:e5:17:98:
2e:ff:82:8b:1b:6b:ae:da:21:cc:c0:dd:42:a5:93:
95:01:e9:6d:b1:d2:b6:56:46:bb:c8:01:67:46:ac:
95:7c:16:81:95:a2:27:bd:93:0a:51:95:41:0c:49:
26:da:ba:01:f3:73:c6:ee:c5:72:78:cf:02:e9:e3:
b7:d6:16:02:bf:1f:e6:54:a6:b7:1f:2a:df:a4:64:
ef:9d:b6:38:85:4d:39:4e:45:c1:f0:43:13:55:ae:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:5C:9F:FB:D3:C7:D3:97:E2:58:62:9D:C6:E5:8F:BD:01:73:E9
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pENcn_vTx9OX4lhincblj70Bc-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0/24
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.22.0/24
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
68:9a:47:ce:aa:10:99:5c:76:ad:93:79:40:e3:7a:6c:5e:6c:
73:a1:36:31:9d:b8:1a:b0:0e:fe:d6:c1:45:80:cc:7e:3b:f0:
ef:8e:ce:71:cd:02:d4:27:1d:29:73:80:7c:1b:4b:39:62:d1:
dd:1d:b4:e4:33:d0:ae:2f:cd:93:40:f0:41:b2:1d:99:a7:b9:
14:6b:a8:12:04:e8:3f:c7:81:81:c7:05:3b:65:6e:93:25:12:
ea:38:fd:78:ae:5d:f1:8c:c6:a7:25:ce:2d:68:2f:ac:29:58:
14:e9:dc:37:69:87:7b:05:4e:6e:31:a2:31:f4:d5:3d:61:77:
02:18:63:be:13:31:4c:c3:c2:b2:f5:a0:d9:7c:42:17:83:13:
bf:9d:ab:4b:1d:4f:66:9f:d1:55:8f:7c:71:4a:45:be:1f:27:
e5:c4:40:d4:09:14:3d:ad:57:d5:a1:9a:52:0d:64:27:87:3f:
93:de:35:b6:04:b3:73:4d:3a:4c:2c:6c:2c:9b:01:0e:dc:42:
c0:d5:2d:c1:d2:73:a4:fd:41:9b:bd:75:91:83:df:0e:0e:ab:
4f:d4:77:e0:8b:e6:ec:79:28:f3:e1:f3:a1:4d:26:db:ae:40:
f5:67:5c:34:12:d3:f1:66:6f:7d:6e:a1:56:2f:41:cd:9d:bc:
4d:fe:ba:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 8 04:48:16 2026 by rpki-client