Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vm7cU6COh4CdxKZXD0lQLr2gZfQ.roa
File: vm7cU6COh4CdxKZXD0lQLr2gZfQ.roa (raw, json)
Hash identifier: 9ckENEKBy5D6ToUBExcXUEumpzrHa31bjBOozLmeCME=
Subject key identifier: BE:6E:DC:53:A0:8E:87:80:9D:C4:A6:57:0F:49:50:2E:BD:A0:65:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019F40E4CD4650162292406D71A49C741B56
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vm7cU6COh4CdxKZXD0lQLr2gZfQ.roa
Signing time: Wed 08 Jul 2026 08:42:44 +0000
ROA not before: Wed 08 Jul 2026 08:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:e4:cd:46:50:16:22:92:40:6d:71:a4:9c:74:1b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 8 08:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be6edc53a08e87809dc4a6570f49502ebda065f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bd:4d:91:7e:49:62:76:54:5e:84:20:08:13:
f1:6b:96:5f:f2:ba:fb:67:9e:65:21:8b:db:e9:82:
72:34:c3:30:45:2e:0b:cb:80:7b:09:ec:46:b3:65:
16:ef:c1:e1:52:8b:a5:b2:54:a6:db:45:db:08:0d:
4e:88:45:a5:5c:f9:49:c8:15:a9:a5:f7:9c:76:d6:
c1:27:3f:fb:66:30:10:ec:50:7b:d7:5f:75:e7:04:
04:3b:0c:91:c9:3a:e5:89:84:7f:0d:6f:33:fd:3c:
75:17:55:f4:6a:ef:99:f4:c9:6c:b3:97:30:76:73:
96:a8:93:de:c3:b0:a7:62:d3:5b:c8:24:19:f1:2c:
7f:0f:a8:56:b8:74:d8:df:a1:4c:82:b7:ee:69:cd:
91:31:c7:be:3a:18:1e:8a:d0:e4:32:a6:07:82:e9:
a7:46:13:82:f2:52:b1:73:4f:6d:30:02:16:07:62:
8b:65:b5:83:c6:46:5e:a6:53:d6:88:b2:0e:46:70:
ad:c8:e2:02:9e:92:d4:dc:46:97:37:e9:48:6d:0d:
45:b2:6f:1e:d7:9d:60:76:df:a9:c1:e2:34:fa:6d:
43:87:04:a9:7e:28:9f:82:16:6f:be:f3:aa:1c:44:
d9:20:88:46:be:f5:00:84:a7:a2:07:99:2d:85:bf:
3a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6E:DC:53:A0:8E:87:80:9D:C4:A6:57:0F:49:50:2E:BD:A0:65:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vm7cU6COh4CdxKZXD0lQLr2gZfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.102.0/23
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
46:96:54:96:52:1e:85:ca:0e:fe:b7:bf:88:86:12:93:cb:d6:
6a:9e:00:39:e1:88:80:bd:bc:99:a8:3b:ac:a9:c1:d0:4e:9e:
42:d8:1b:df:73:27:57:7d:a5:ee:1e:d8:52:85:c8:a6:77:de:
af:0c:40:59:8e:c5:82:ce:15:5d:25:8f:96:d5:7f:90:f1:fb:
a3:6d:63:d6:57:15:1a:08:b6:4f:fc:5c:37:b4:bf:4e:a5:fb:
81:b5:d0:7b:3e:a5:1b:ad:4a:c7:74:f7:f9:cf:00:5c:be:c4:
5f:a2:fb:ac:e5:48:03:53:1b:e2:26:19:1d:9a:c4:59:25:ef:
1a:9a:ca:d2:b0:c5:91:a7:7d:5e:70:03:db:74:d6:b8:72:01:
a0:94:6f:0f:d4:03:42:74:8a:fe:0a:49:db:7f:25:c5:33:8e:
6b:5c:4a:7e:fe:3d:c6:ca:44:65:04:ae:06:b5:76:82:a3:10:
da:f3:f4:6e:44:0f:01:8b:64:06:16:c8:14:4e:de:85:da:b5:
2f:e1:4d:13:9b:3a:15:0b:29:67:21:ee:af:4e:66:2f:63:84:
e6:f2:bd:53:96:97:c1:09:0a:6b:f4:7c:59:87:2a:6d:4b:c8:
26:70:94:6a:27:b4:16:b2:13:a4:48:00:28:df:04:32:91:17:
8e:77:6f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:12:33 2026 by rpki-client