Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R4CjShlx4HtkKyU8uLvd9O7g7Mo.roa
File: R4CjShlx4HtkKyU8uLvd9O7g7Mo.roa (raw, json)
Hash identifier: N56pzK6P9F4Z8kYtZHbMclrPGPYETvbvqmaPe9zebWI=
Subject key identifier: 47:80:A3:4A:19:71:E0:7B:64:2B:25:3C:B8:BB:DD:F4:EE:E0:EC:CA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1ABC82A2DFE88BAEB93B3F572DA2C7909
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R4CjShlx4HtkKyU8uLvd9O7g7Mo.roa
Signing time: Thu 05 Nov 2026 12:56:24 +0000
ROA not before: Thu 05 Nov 2026 12:56:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.16.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.108.205.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.249.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.152.0/24 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.103.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.74.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.239.140.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ab:c8:2a:2d:fe:88:ba:eb:93:b3:f5:72:da:2c:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 5 12:56:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4780a34a1971e07b642b253cb8bbddf4eee0ecca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:ac:32:4d:39:00:71:c0:8b:49:9e:50:74:
c7:aa:67:39:16:59:90:00:3f:88:4f:5d:7a:ba:de:
d7:ac:60:19:7d:67:57:b3:ad:cd:3b:5c:8a:45:b5:
92:76:6c:02:11:67:a4:3d:94:c3:a5:44:61:b0:e8:
8d:cd:12:76:c5:b6:96:6d:d8:4d:7b:d8:f6:57:fc:
89:83:15:85:9b:4c:83:44:a5:1d:00:d5:65:6d:5b:
9f:fd:58:57:27:ea:5d:ab:f5:df:2a:06:14:19:28:
d8:2b:c1:40:44:ad:8f:a7:d6:62:40:ae:8e:dd:6e:
43:e0:3d:5c:ec:3d:fe:55:9f:a7:c5:99:a8:c8:d8:
37:ea:f2:02:e1:d5:a6:1a:bd:ad:1e:e2:8e:cd:42:
47:d0:ad:7d:a8:de:13:08:b9:aa:9f:5e:70:33:72:
1b:65:65:1c:cc:cc:03:68:d8:4c:c0:14:3a:10:c4:
d3:a7:67:38:08:21:c6:9f:5f:17:fc:cc:0f:29:12:
1d:a3:c8:17:c8:28:ac:1a:88:c2:0f:81:16:ce:ec:
58:29:1a:c9:e1:c8:d9:78:ae:1e:1c:1f:30:43:e4:
3a:b0:82:2c:1b:35:31:64:7c:d2:36:05:98:ac:ce:
c0:78:7f:e4:18:15:ba:96:6a:7b:9f:24:3e:cb:65:
66:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:80:A3:4A:19:71:E0:7B:64:2B:25:3C:B8:BB:DD:F4:EE:E0:EC:CA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/R4CjShlx4HtkKyU8uLvd9O7g7Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.16.0/23
45.131.134.0/23
45.147.227.0/24
185.108.204.0/23
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.249.0-185.206.251.255
185.209.38.0/24
185.209.73.0/24
185.209.75.0/24
185.210.152.0/22
185.210.233.0/24
185.210.235.0/24
185.214.103.0/24
185.218.20.0/24
185.218.101.0/24
185.220.249.0-185.220.251.255
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.21.0-185.225.22.255
185.226.104.0/24
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.74.0/23
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.239.140.0/24
185.240.120.0/23
185.246.112.0/24
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ec:c1:77:0d:e9:95:e5:f2:99:f1:e9:63:63:0d:f5:a6:4c:
bd:93:94:0f:62:8a:31:1b:75:6d:df:63:17:c6:15:90:d4:48:
5f:73:e3:d6:b6:89:3f:af:56:0b:fd:8e:da:95:94:69:78:97:
47:1a:6f:d8:0c:8b:e6:6f:8d:ab:81:57:f2:57:42:3b:37:53:
74:95:47:0c:28:4a:97:41:5a:67:8e:25:f1:34:16:c1:f0:dd:
f2:e7:ed:8b:a7:ca:26:06:e8:f2:a4:6b:4a:be:08:58:86:78:
f0:cc:50:ca:f9:82:7b:55:d5:5b:27:13:bf:80:3a:5d:3a:f3:
07:4a:2b:4c:76:92:2f:35:6c:3a:23:6c:bb:b2:e7:b0:55:ff:
11:4a:69:db:11:67:6d:22:81:50:a4:f4:44:74:9e:b3:19:a2:
26:81:55:5f:1f:4c:c6:a4:12:1e:44:8d:78:f2:31:d1:95:46:
25:35:13:5b:42:61:2f:27:4e:3d:42:58:71:63:21:f5:6d:1a:
a5:68:a4:b8:ed:de:23:75:53:c3:16:a1:73:5a:82:4d:cd:c7:
5d:dd:04:65:4c:30:7e:b8:32:3a:18:b7:8b:b0:c9:3d:fe:de:
4e:45:f1:01:55:e0:72:b7:8b:d6:91:20:19:42:1a:a8:1f:5b:
eb:73:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:43 2026 by rpki-client