Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wRA3BrbCTGHEURSMCwnnswzOjgI.roa
File: wRA3BrbCTGHEURSMCwnnswzOjgI.roa (raw, json)
Hash identifier: +DmMrA42kHnuYo1q24/kxN+z7jj1NXkKbtqnx23xi+4=
Subject key identifier: C1:10:37:06:B6:C2:4C:61:C4:51:14:8C:0B:09:E7:B3:0C:CE:8E:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A10C2866B22E66961B90B862B9795561F5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wRA3BrbCTGHEURSMCwnnswzOjgI.roa
Signing time: Mon 05 Oct 2026 13:02:16 +0000
ROA not before: Mon 05 Oct 2026 13:02:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:28:66:b2:2e:66:96:1b:90:b8:62:b9:79:55:61:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 5 13:02:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1103706b6c24c61c451148c0b09e7b30cce8e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a1:af:93:53:d1:d8:2f:24:68:60:32:73:4a:
c0:e4:66:9e:45:a0:eb:eb:42:57:4c:2c:eb:28:17:
00:68:53:0e:15:31:1b:78:12:c0:2e:7d:25:57:25:
e1:3d:05:78:80:2c:50:74:78:8f:b0:d3:fe:a1:7a:
49:a5:c8:03:5e:7b:0b:50:f6:a7:a6:23:ee:2c:be:
78:d9:88:50:bb:d5:28:65:cf:38:06:9c:50:4d:1e:
14:f8:d3:fd:bd:ed:f9:1d:67:b6:cf:b7:b6:bb:05:
b8:33:6e:65:3a:8f:5a:df:4b:0d:cd:d3:9c:ba:ca:
03:1b:84:dd:06:c5:be:6f:bc:4d:65:a1:09:00:a6:
7a:8b:6b:db:53:64:13:d7:8a:51:da:02:72:48:b2:
00:c9:65:9a:cd:6f:c3:d4:a4:bd:e3:c2:cb:47:4f:
89:5e:dc:8e:d3:30:b3:97:a3:bb:6d:39:9a:9a:00:
7b:df:f7:02:c2:5e:fa:01:0d:8c:e2:02:86:64:92:
c4:66:7c:ff:e2:16:80:9c:4b:b9:c4:99:42:0b:ea:
05:c0:1e:36:f1:aa:57:80:50:a5:ee:9d:11:2c:e3:
33:b9:82:fd:ae:0d:7d:34:ec:8f:a9:22:6f:fb:2c:
da:aa:74:15:5f:8d:5d:42:8b:4c:23:57:15:f6:bf:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:10:37:06:B6:C2:4C:61:C4:51:14:8C:0B:09:E7:B3:0C:CE:8E:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wRA3BrbCTGHEURSMCwnnswzOjgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.152.0/24
185.210.154.0/24
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ed:3a:20:e5:0e:51:ce:5c:99:3a:b7:57:48:f6:5c:a9:47:
f6:eb:49:a6:26:f1:35:80:85:71:c2:f8:cf:47:0a:8f:cc:fe:
fa:b8:4c:fc:c7:63:41:c4:ad:c7:92:c2:e6:ac:41:f3:3e:dc:
a9:9f:dd:3c:56:81:c9:0c:4e:72:41:14:f8:fa:fc:7a:a9:95:
34:05:fe:4e:8a:4b:6d:35:08:bf:30:bc:d7:04:45:45:35:9d:
04:28:81:44:19:42:4a:14:b5:2a:7a:10:54:50:10:de:45:02:
df:39:63:91:5e:0f:7d:84:b2:75:17:ab:c9:fa:d5:13:95:db:
fa:55:f4:b4:11:a3:84:61:4e:c1:7a:cf:22:6d:66:34:a4:4e:
9e:5f:d2:72:a5:fc:4b:78:3f:3a:8a:bd:70:54:bd:85:cc:e0:
32:07:a8:a8:ca:ba:85:15:61:e9:dd:69:8a:74:b3:f5:5a:03:
c5:a2:24:29:3b:82:62:2a:8a:2c:fb:9e:82:51:0f:3d:cb:10:
81:b0:be:8c:e8:01:50:5c:c7:11:07:49:1d:b0:97:8a:9f:d4:
54:1b:ee:a5:4e:a6:ea:69:73:b2:90:75:e0:a5:64:42:aa:c9:
13:1c:2f:15:be:18:e1:47:be:b3:cb:b0:ae:e2:65:ef:11:e5:
9a:f7:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:45 2026 by rpki-client