Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/_eVFxPtKebMIokqnWwy-Wg13IlI.roa
File: _eVFxPtKebMIokqnWwy-Wg13IlI.roa (raw, json)
Hash identifier: ds3XPCGNp67Ng7shhUA2Q/Zeww6kk3TR8TFzatChP+A=
Subject key identifier: FD:E5:45:C4:FB:4A:79:B3:08:A2:4A:A7:5B:0C:BE:5A:0D:77:22:52
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A06666FD3A5BDD965544FA2D73E3AA4463
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/_eVFxPtKebMIokqnWwy-Wg13IlI.roa
Signing time: Thu 03 Sep 2026 08:33:40 +0000
ROA not before: Thu 03 Sep 2026 08:33:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:66:fd:3a:5b:dd:96:55:44:fa:2d:73:e3:aa:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 3 08:33:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fde545c4fb4a79b308a24aa75b0cbe5a0d772252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:fa:76:23:f9:ac:b6:4a:d9:18:e4:c4:85:
30:a5:82:b5:a8:10:62:dd:9c:ca:5e:a2:ab:d6:a0:
97:1d:ca:bc:42:3f:fd:1e:93:ea:12:57:23:20:db:
b6:3a:8e:83:e6:cb:91:b0:92:17:b9:ea:25:d2:aa:
41:fa:82:22:49:74:74:47:39:b1:87:40:5a:cd:df:
1e:7d:48:71:31:30:45:d9:ec:06:a5:23:5f:77:5c:
fa:5f:03:0a:12:a7:7d:f2:da:99:dd:c4:c6:a1:16:
d0:69:da:8d:e1:77:97:3b:80:93:5e:6e:94:ab:6a:
00:83:a9:b3:f2:93:6e:94:47:f8:7f:a3:08:5e:28:
c4:87:17:55:bc:3d:03:06:32:dc:3e:96:00:e8:db:
f9:55:c3:6d:22:c2:4a:82:c0:a6:05:f8:0b:72:95:
f0:9c:b9:0b:c0:d9:1c:66:0b:15:f8:b2:bf:56:a2:
f2:a2:ce:5e:bb:be:38:92:6a:c4:00:d9:ca:88:38:
d4:63:cc:2b:cb:f5:cd:db:29:37:2e:93:97:a8:be:
14:da:4b:50:19:4f:48:4b:1a:43:8f:98:a5:2e:ad:
49:83:17:30:b5:23:8e:91:c3:71:94:00:1d:04:94:
ac:76:45:40:35:41:c1:1a:17:d8:b2:d5:4f:7b:79:
21:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E5:45:C4:FB:4A:79:B3:08:A2:4A:A7:5B:0C:BE:5A:0D:77:22:52
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/_eVFxPtKebMIokqnWwy-Wg13IlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.235.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.34.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0/24
93.152.211.0-93.152.218.255
93.152.222.0/23
93.152.226.0/23
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c6:38:12:97:3e:97:9f:95:3b:52:5b:78:f5:cf:b3:16:65:
e0:72:e2:9c:15:f2:e0:7b:df:52:95:c2:4a:61:6b:9f:e1:dd:
cb:fa:95:0b:8c:4b:37:e3:20:e9:18:e4:7b:c3:9a:02:e9:29:
77:c0:c3:c5:93:85:86:b0:51:41:22:2c:66:fc:f0:dd:f2:16:
3b:f8:cc:d5:ff:18:10:e2:78:5f:6b:e9:04:57:81:21:2a:7f:
1c:b8:4b:54:f8:41:3f:a4:23:47:ee:7e:6b:6f:a9:01:8c:95:
51:7f:37:ad:6a:5a:81:2d:6e:06:cf:c0:ee:a2:a6:38:91:dc:
9b:88:58:3a:b2:48:e0:57:b2:19:55:39:bd:a6:85:b6:23:15:
b5:4f:fc:c7:eb:b8:8c:8b:bf:99:0a:d7:d0:2d:f4:fb:11:e3:
55:be:ab:03:f4:f7:9b:2a:b0:cb:94:fc:57:45:89:7f:7b:46:
45:2b:cd:a1:fc:32:c3:fb:07:d9:c0:2c:88:43:e2:6c:cf:d2:
17:24:a9:43:c0:a7:52:8c:ac:a4:94:9b:07:b1:f6:07:d6:c0:
23:69:cd:9e:a4:6f:1a:6b:37:41:10:5f:4f:3d:0a:27:7b:d5:
3b:f7:9d:36:af:d1:5a:64:45:91:85:56:16:3e:e7:8a:f1:88:
cd:36:b1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:57 2026 by rpki-client