Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sG-Z2-Nb7jWbYlE3nZ3J4CMYOZM.roa
File: sG-Z2-Nb7jWbYlE3nZ3J4CMYOZM.roa (raw, json)
Hash identifier: RlLad+CJUVYWsnlmYfevgT1GM//FG4z6N/F2DWfs9DI=
Subject key identifier: B0:6F:99:DB:E3:5B:EE:35:9B:62:51:37:9D:9D:C9:E0:23:18:39:93
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0E70CBA4C33F4A363367C942120BCB1ED
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sG-Z2-Nb7jWbYlE3nZ3J4CMYOZM.roa
Signing time: Mon 28 Sep 2026 08:06:06 +0000
ROA not before: Mon 28 Sep 2026 08:06:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 06:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:0c:ba:4c:33:f4:a3:63:36:7c:94:21:20:bc:b1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 28 08:06:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b06f99dbe35bee359b6251379d9dc9e023183993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:fe:44:b3:d6:1b:36:b3:fc:07:ac:3c:83:
f0:59:06:f1:39:4f:40:fe:40:e9:ff:0c:ec:fc:07:
aa:ea:ce:bc:4b:75:a7:23:3b:a5:f0:a8:05:fb:f4:
de:da:d1:2f:42:a0:0a:20:55:eb:24:13:59:65:30:
c9:d7:6d:f9:ee:03:4a:cc:d6:69:44:80:74:36:8f:
0f:ce:ba:d1:9b:fa:54:74:28:d6:b7:d8:7c:73:b1:
f7:85:17:2a:d6:bb:28:78:aa:55:8a:30:ad:16:e7:
e2:d3:a0:dd:fa:46:9f:12:ab:6c:96:6a:81:73:59:
e8:8b:78:bd:8d:61:87:6e:fa:7a:fa:81:86:a2:1a:
5f:48:2e:78:63:75:bd:37:53:79:1c:1d:5f:99:76:
c1:93:0e:44:15:7c:71:f2:01:b2:66:25:f6:b9:d6:
ad:96:db:53:e9:46:2c:02:52:d8:47:69:71:b5:15:
a8:56:43:3e:00:f0:9d:58:e2:2e:e4:bf:5f:02:4f:
27:aa:69:db:28:25:bd:84:82:20:32:1c:72:ed:1c:
68:a1:e7:13:ac:ed:bd:4b:6e:f1:30:b9:74:15:f8:
0c:36:a9:89:0a:1e:39:a4:7a:4a:1d:a0:05:9e:59:
2c:03:16:00:2f:dd:14:ae:cd:c7:a2:3d:cc:91:ac:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6F:99:DB:E3:5B:EE:35:9B:62:51:37:9D:9D:C9:E0:23:18:39:93
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sG-Z2-Nb7jWbYlE3nZ3J4CMYOZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:af:2f:e0:ad:7f:11:ff:e5:b9:8e:c1:49:d3:23:85:6f:bb:
93:83:99:0e:9c:f3:b4:03:10:7a:61:f2:3e:99:7e:5c:e6:4e:
fc:2d:02:d4:96:86:29:55:0a:4d:b4:73:7c:67:d4:53:0b:c3:
7d:5d:82:8d:47:0c:9b:75:36:ff:07:76:3d:51:3f:6c:e6:56:
6d:e4:d3:41:1a:6d:37:1e:3a:b6:48:82:89:6a:f5:41:f9:9b:
94:5f:86:9c:1b:07:3b:d5:10:bd:4f:ef:3c:65:d2:8c:b4:d8:
a9:04:4c:a3:41:0a:6e:c0:bc:54:87:ee:d8:08:39:33:f4:16:
bd:03:7c:cb:a1:e0:e7:a9:12:5e:f2:bd:da:b4:88:13:2f:7f:
f4:0a:a2:bd:03:84:d0:b5:31:06:5c:ce:23:5f:4a:55:7b:2d:
4b:26:45:d0:a5:f9:4b:6d:33:ec:8f:4f:e9:ed:5b:cd:ed:88:
f6:09:ff:9c:6e:be:6b:b1:d1:e8:8b:a7:c5:e6:6b:1f:72:ec:
08:41:bc:e4:3c:93:63:e7:9e:b1:56:27:36:3f:41:e4:05:95:
ef:d4:c5:4d:72:65:10:a5:37:ca:6a:7f:09:c3:0c:58:80:52:
77:ee:8e:15:3e:d1:11:da:33:9a:4e:17:17:35:db:7c:0a:43:
ca:86:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:29 2026 by rpki-client