Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/srsjLUh2nERiDPdxyLdeB70ahcE.roa
File: srsjLUh2nERiDPdxyLdeB70ahcE.roa (raw, json)
Hash identifier: xfD9x81ZScTPyMQqWtpI8+uJRSKuqW13eG/YilXgNvo=
Subject key identifier: B2:BB:23:2D:48:76:9C:44:62:0C:F7:71:C8:B7:5E:07:BD:1A:85:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A08045EC7E99D179EE7A65F2AE8F9ADBD4
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/srsjLUh2nERiDPdxyLdeB70ahcE.roa
Signing time: Tue 08 Sep 2026 09:07:41 +0000
ROA not before: Tue 08 Sep 2026 09:07:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:45:ec:7e:99:d1:79:ee:7a:65:f2:ae:8f:9a:db:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 8 09:07:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2bb232d48769c44620cf771c8b75e07bd1a85c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:13:27:3b:05:0a:0d:8e:74:94:22:cf:d5:
18:4a:a2:b8:63:50:61:c9:c1:aa:cf:bc:66:57:7e:
72:98:ff:9a:97:12:65:d3:4a:e4:9f:9c:a4:5d:ee:
1a:ee:f2:03:e6:f3:4b:00:52:dc:3c:f3:81:40:18:
d7:c7:61:6e:65:cd:d3:94:c5:53:95:7f:3f:70:af:
8a:69:a0:35:0b:5a:f0:c3:af:c6:0a:90:37:16:a7:
b0:29:08:c2:e0:7d:d9:1a:de:41:2b:54:63:14:12:
e3:21:96:64:28:81:ec:f3:fc:ed:f4:46:23:5a:a9:
84:f5:e2:92:96:2f:7a:5c:fe:16:c1:22:45:ea:ec:
08:d4:31:12:12:13:cf:82:a5:26:5a:2b:92:64:2f:
65:c1:9c:48:30:f9:94:5f:bf:fb:a9:a4:f5:aa:35:
5f:68:7b:11:a1:79:c1:28:b1:8a:cb:de:8a:a7:49:
86:d0:68:09:4a:e4:b8:aa:73:5a:d5:cc:3e:04:99:
0f:45:13:84:0a:79:6f:09:cb:62:09:f2:93:24:e8:
02:b5:6a:78:f7:97:55:c9:43:bc:b0:60:36:56:d6:
f7:c3:06:bd:80:5d:6a:6f:c2:06:71:9b:2e:3e:96:
11:19:14:cf:68:41:da:2c:50:2b:a4:89:07:1e:01:
6e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BB:23:2D:48:76:9C:44:62:0C:F7:71:C8:B7:5E:07:BD:1A:85:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/srsjLUh2nERiDPdxyLdeB70ahcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
00:2e:cc:bc:e0:27:28:72:10:a7:6c:10:eb:f7:14:4c:a8:f2:
56:df:83:d6:d0:c1:d6:a7:8a:47:90:1c:4e:22:ca:3e:70:ca:
f0:b8:bf:41:17:22:0d:79:70:3f:e8:c4:2b:e3:c4:55:f3:58:
bb:0f:ff:d3:75:35:4e:70:07:5c:3b:6b:ed:00:af:f6:7a:b0:
22:90:31:8e:71:39:f3:21:38:48:e7:fa:82:2d:e5:82:d2:b8:
a2:3e:b5:4a:c1:48:ba:90:d6:6b:c8:76:51:11:d7:cc:9e:23:
a7:ef:82:86:e9:5e:80:87:b2:5b:cf:b9:26:8f:98:b2:f0:64:
3b:58:04:c0:7c:89:f6:3b:aa:53:51:8f:3c:aa:3a:70:10:bf:
e1:6b:66:fe:8d:ac:be:3e:f0:94:a1:bc:26:74:45:6c:1a:c3:
fd:ba:b4:74:ab:d3:42:9d:be:1f:77:0e:0a:67:52:bd:76:3b:
67:eb:43:fa:f8:eb:43:af:9f:89:a1:7a:a7:ba:9b:51:b2:ce:
38:2c:ba:d2:a1:b4:77:d4:2d:4e:df:dd:95:e8:30:31:88:2c:
d5:43:2f:fb:d5:73:74:d5:b9:3c:d6:46:09:69:16:15:4b:08:
0d:e9:4f:0c:78:6b:53:05:9b:8f:e2:45:72:47:a6:87:36:72:
6f:8f:0b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 13:37:06 2026 by rpki-client