Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tOkDNOPB0Hx4WDXBBIMd59eAi9Y.roa
File: tOkDNOPB0Hx4WDXBBIMd59eAi9Y.roa (raw, json)
Hash identifier: 3ZRdwGHkiwh9tJpsXgnFOM2Fe1yDNFZOkBbsbVVarDQ=
Subject key identifier: B4:E9:03:34:E3:C1:D0:7C:78:58:35:C1:04:83:1D:E7:D7:80:8B:D6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E3B629670D43CE97DC8C21AA4D37F0B6F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tOkDNOPB0Hx4WDXBBIMd59eAi9Y.roa
Signing time: Mon 18 May 2026 13:59:37 +0000
ROA not before: Mon 18 May 2026 13:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:62:96:70:d4:3c:e9:7d:c8:c2:1a:a4:d3:7f:0b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 18 13:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4e90334e3c1d07c785835c104831de7d7808bd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:3f:8f:18:cd:2c:aa:bf:ee:99:f6:2b:ac:
a0:dd:dc:ec:c3:db:2d:95:52:8f:93:43:58:bb:96:
71:f7:c9:b9:dd:93:f9:08:44:ac:6a:70:5a:dc:64:
37:92:9d:6a:19:b7:b4:b5:da:d5:eb:cc:05:72:b1:
2b:a9:ab:4e:3d:2d:09:36:97:dd:cc:99:69:2c:fa:
34:c3:ba:3d:f1:fc:7c:c8:5d:57:bb:a0:03:96:b9:
99:96:c7:73:f6:30:a9:c3:ba:ee:01:14:87:b9:a3:
28:2c:11:87:05:1b:96:d6:53:60:98:cc:ae:39:2a:
b3:53:4e:b1:9d:f8:f6:1c:71:59:43:a2:12:40:86:
c7:5b:62:33:3c:f1:1d:bf:7a:6d:49:c0:44:0d:90:
02:bd:2f:21:0d:8c:4a:9c:53:82:d7:cc:4c:3a:24:
3a:39:e4:0a:f8:1d:a1:09:32:2b:b8:49:1a:28:83:
06:be:cd:de:2f:1e:37:9f:7a:21:f7:a1:c5:31:69:
8b:33:97:7c:c9:ed:2b:9e:08:e5:34:f1:50:0c:14:
9d:e8:74:44:bc:2f:50:c6:1f:41:84:eb:08:8d:09:
e8:32:71:af:7e:fd:48:17:7e:b2:1e:0c:a5:c5:5f:
31:38:7f:af:ba:6d:b3:c6:88:07:b4:5c:2f:55:1a:
63:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E9:03:34:E3:C1:D0:7C:78:58:35:C1:04:83:1D:E7:D7:80:8B:D6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tOkDNOPB0Hx4WDXBBIMd59eAi9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0/24
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.22.0/24
185.226.104.0/23
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
47:3f:89:6f:7f:45:c4:b1:7d:14:fa:09:2d:12:7c:96:e6:28:
a4:16:09:7e:f9:d5:3c:fb:b4:40:1f:ed:07:4f:07:39:a6:d8:
3b:70:0d:1e:e5:ae:75:90:fe:b0:57:80:36:e0:d1:e4:2a:53:
88:ae:05:c9:5d:e5:70:12:af:e7:20:59:97:b1:3f:fa:18:5d:
d8:09:4f:dd:a4:20:96:97:a4:2f:61:75:e3:a9:85:93:15:30:
d3:6e:9b:eb:a0:ca:8f:89:a6:56:54:ef:11:63:72:e0:7b:f3:
fc:8b:6c:d6:2b:0e:f1:a3:56:f9:b2:4e:c7:11:c0:3d:00:d8:
68:fe:92:56:69:66:33:0e:b8:e8:a9:3f:19:f3:79:56:a8:13:
e1:45:1f:ae:71:57:bb:6c:1a:f4:c4:45:2f:41:19:cb:11:a9:
4a:de:a5:ca:d9:3e:0e:9d:f0:01:4e:9b:7f:0c:e1:0f:58:ef:
02:10:50:4a:7f:48:d8:9e:e2:64:14:d0:24:06:3d:4c:00:a8:
23:7c:ce:af:42:2f:c8:19:63:a8:3d:7d:b0:44:36:9f:3e:57:
55:08:27:ff:f5:8e:bd:12:3a:cf:79:5d:a9:7a:f9:ec:f1:4d:
4d:ca:52:88:4f:b9:b5:68:f8:a8:20:4b:1e:a6:eb:06:03:44:
a4:47:6c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 01:51:22 2026 by rpki-client