Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tg655BEen7PPul6KDH-BsE-ZsBU.roa
File: tg655BEen7PPul6KDH-BsE-ZsBU.roa (raw, json)
Hash identifier: tFKRr7F8x4bk/I6zafI1/oxo2wVSN6d6a6D2oJnmIig=
Subject key identifier: B6:0E:B9:E4:11:1E:9F:B3:CF:BA:5E:8A:0C:7F:81:B0:4F:99:B0:15
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A05C1BAEDDAF1B9174DF985588A7112303
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tg655BEen7PPul6KDH-BsE-ZsBU.roa
Signing time: Tue 01 Sep 2026 08:35:12 +0000
ROA not before: Tue 01 Sep 2026 08:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:1b:ae:dd:af:1b:91:74:df:98:55:88:a7:11:23:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 1 08:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b60eb9e4111e9fb3cfba5e8a0c7f81b04f99b015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:ad:84:2b:9d:ef:b1:61:6a:ef:c0:32:de:
f3:d7:3b:33:3d:31:26:cd:50:11:84:51:bf:c3:06:
36:75:93:66:97:bf:f8:31:72:e8:98:da:d8:4d:f2:
a1:b4:2d:25:76:1f:a1:87:71:a4:9f:29:07:48:49:
6c:ac:44:fb:71:01:0b:44:2e:a2:40:fb:81:8d:77:
97:45:3c:b3:59:7b:ca:64:ae:8d:51:41:ee:85:75:
ae:b1:8d:38:84:37:98:f3:42:4d:dd:ee:46:16:73:
07:fe:60:84:67:fc:f9:02:fd:75:24:68:5f:3e:38:
f3:9b:57:55:35:dc:95:27:9f:38:75:08:bc:e1:c4:
c3:21:8f:66:ef:d8:da:5a:17:c7:71:34:cb:13:ce:
e0:76:2c:aa:de:09:b4:ee:dd:fa:49:61:2d:70:ef:
3a:75:8f:d4:71:01:d1:e3:4e:a9:84:b9:ae:23:75:
9b:fe:97:48:24:c2:00:62:9d:2d:a4:e8:d5:c3:8f:
f2:17:a4:58:c5:53:2a:fa:15:e9:8b:8a:ac:ec:a2:
13:33:2a:a8:ea:33:4a:8c:df:c9:b5:91:ef:92:ba:
6e:04:26:a1:7f:df:71:df:91:ad:e8:f9:42:a6:63:
7a:57:be:f4:ef:18:fa:de:c1:30:df:1c:87:be:d7:
62:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0E:B9:E4:11:1E:9F:B3:CF:BA:5E:8A:0C:7F:81:B0:4F:99:B0:15
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tg655BEen7PPul6KDH-BsE-ZsBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.124.69.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:da:5f:e2:f2:5b:e4:b4:87:df:d2:7c:d3:f3:6b:a1:54:5c:
e1:71:05:64:fa:1f:63:e4:d0:84:99:7c:a8:0e:12:ec:70:5d:
10:18:1d:36:09:d5:9e:af:2d:cc:d5:a1:a8:bd:d4:9e:9f:cb:
0e:e0:28:90:04:3b:26:4f:21:48:f2:6b:a7:a2:9b:08:75:99:
90:33:dd:1f:b0:a8:8b:63:22:63:5f:d2:08:e3:09:62:5c:56:
d3:9d:6e:8d:d3:4f:8d:08:86:53:dd:93:2a:f9:07:c4:22:ba:
e1:a0:51:0f:0a:f6:6b:42:09:8a:e4:13:98:16:55:b6:66:36:
99:4c:0a:41:47:06:69:2a:ac:92:1b:53:20:13:ac:7d:a1:e1:
eb:5a:d5:c1:43:04:40:a0:3a:a2:6d:81:69:0b:6a:d3:e8:c4:
7b:25:c2:c8:e5:73:54:26:59:0f:79:8a:da:2a:c4:8d:0a:a4:
c5:3d:4c:93:1f:1e:83:00:51:45:b0:50:8d:e7:43:80:af:fa:
02:5c:17:ad:15:1e:9a:d9:25:5d:7b:84:8f:1a:ae:c0:b2:18:
59:7e:5d:e6:5b:37:86:37:94:e5:1e:fc:28:97:5c:28:60:94:
39:e4:35:64:c8:34:fe:2d:ca:1f:89:c9:ea:6a:0d:4b:21:5f:
77:36:8a:cf
-----BEGIN CERTIFICATE-----
MIIGLzCCBRegAwIBAgISAaBcG67drxuRdN+YVYinESMDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwOTAxMDgzNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjBlYjllNDExMWU5ZmIzY2ZiYTVlOGEwYzdmODFiMDRmOTliMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWythCud77Fhau/AMt7z1zszPTEm
zVARhFG/wwY2dZNml7/4MXLomNrYTfKhtC0ldh+hh3GknykHSElsrET7cQELRC6i
QPuBjXeXRTyzWXvKZK6NUUHuhXWusY04hDeY80JN3e5GFnMH/mCEZ/z5Av11JGhf
Pjjzm1dVNdyVJ584dQi84cTDIY9m79jaWhfHcTTLE87gdiyq3gm07t36SWEtcO86
dY/UcQHR406phLmuI3Wb/pdIJMIAYp0tpOjVw4/yF6RYxVMq+hXpi4qs7KITMyqo
6jNKjN/JtZHvkrpuBCahf99x35Gt6PlCpmN6V7707xj63sEw3xyHvtdicwIDAQAB
o4IDOzCCAzcwHQYDVR0OBBYEFLYOueQRHp+zz7peigx/gbBPmbAVMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdGc2NTVCRWVuN1BQdWw2S0RILUJzRS1ac0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBTwYIKwYBBQUHAQcBAf8EggE+MIIBOjCCATYEAgABMIIB
LgMEAC0IFwMEAC1aEQMEAS2DhgMEAblszAMEALl+UgMEALnHNgMEAbnHnjAMAwQA
uc75AwQCuc74AwQAudEmMAwDBAC50UkDBAK50UgDBAC50pgDBAC50poDBAC50ukD
BAC50usDBAG51mYDBAC51mwDBAC52hQDBAC52mUDBAK53PgDBAC53RQDBAG53hwD
BAC531ADBAC535sDBAK54QAwDAMEALnhFQMEALnhFgMEALniaAMEALniawMEALnj
kAMEAbnjkgMEALnkSAMEALnkSwMEALnmNQMEALnmQwMEALnozgMEALnqFgMEAbnw
eAMEALn2cDAMAwQEwQhwAwQAwQhyAwQAwTqQAwQBwTqSAwQAwgVBAwQAwgVDAwQA
wkypAwQAwnxFAwQAwpMRMA0GCSqGSIb3DQEBCwUAA4IBAQCm2l/i8lvktIff0nzT
82uhVFzhcQVk+h9j5NCEmXyoDhLscF0QGB02CdWery3M1aGovdSen8sO4CiQBDsm
TyFI8munopsIdZmQM90fsKiLYyJjX9II4wliXFbTnW6N00+NCIZT3ZMq+QfEIrrh
oFEPCvZrQgmK5BOYFlW2ZjaZTApBRwZpKqySG1MgE6x9oeHrWtXBQwRAoDqibYFp
C2rT6MR7JcLI5XNUJlkPeYraKsSNCqTFPUyTHx6DAFFFsFCN50OAr/oCXBetFR6a
2SVde4SPGq7AshhZfl3mWzeGN5TlHvwol1woYJQ55DVkyDT+Lcoficnqag1LIV93
NorP
-----END CERTIFICATE-----
Generated at Wed Sep 2 10:59:00 2026 by rpki-client