Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RgF6d9fGI49yDqIwr1okk9sk4mY.roa
File: RgF6d9fGI49yDqIwr1okk9sk4mY.roa (raw, json)
Hash identifier: 2LfZo8BiZ7cnjwcGArYj8w9PPPqSvA74LNNUAvIhGX8=
Subject key identifier: 46:01:7A:77:D7:C6:23:8F:72:0E:A2:30:AF:5A:24:93:DB:24:E2:66
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D2989080E9CBDFC3C8B7A955B24DC940F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RgF6d9fGI49yDqIwr1okk9sk4mY.roa
Signing time: Thu 26 Mar 2026 09:45:39 +0000
ROA not before: Thu 26 Mar 2026 09:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.8.23.0/24 maxlen: 24
45.90.17.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
185.108.204.0/24 maxlen: 24
185.126.82.0/24 maxlen: 24
185.199.54.0/24 maxlen: 24
185.199.158.0/24 maxlen: 24
185.199.159.0/24 maxlen: 24
185.206.251.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.209.75.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.214.108.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
185.218.101.0/24 maxlen: 24
185.220.248.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.220.250.0/23 maxlen: 24
185.221.20.0/24 maxlen: 24
185.222.28.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.223.80.0/24 maxlen: 24
185.223.155.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
185.225.1.0/24 maxlen: 24
185.225.2.0/24 maxlen: 24
185.225.3.0/24 maxlen: 24
185.225.22.0/24 maxlen: 24
185.226.104.0/24 maxlen: 24
185.226.105.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
185.227.146.0/23 maxlen: 24
185.227.147.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.228.75.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
185.230.67.0/24 maxlen: 24
185.232.206.0/24 maxlen: 24
185.234.22.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.8.112.0/23 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.114.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.146.0/23 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
194.76.169.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
194.124.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:89:08:0e:9c:bd:fc:3c:8b:7a:95:5b:24:dc:94:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 26 09:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46017a77d7c6238f720ea230af5a2493db24e266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:da:35:82:dd:f6:82:95:62:3b:43:b8:a0:
5e:89:1a:12:ff:0c:9c:26:8d:2a:5c:b2:b9:b0:cf:
f0:91:9c:e1:1c:5f:90:b5:db:2e:ef:d8:66:6c:41:
1f:d4:54:05:bd:fe:59:a1:62:36:ab:75:19:78:40:
83:c2:6d:4c:43:93:c3:e1:6b:0d:bc:8b:60:1b:40:
9f:6e:45:0a:0b:a6:13:ad:8c:d3:75:79:a9:94:2b:
60:1d:d4:ae:90:74:c4:31:42:df:d2:67:47:bf:e3:
a8:10:61:99:02:e5:d4:7a:5d:f5:70:30:3d:a6:71:
9d:b8:3c:bc:e3:c8:a8:6e:34:2d:31:bf:b5:dd:c3:
2b:23:8e:de:38:37:81:db:5d:3f:fe:e2:37:10:92:
a6:84:36:c2:cb:af:7d:a7:1c:c5:d6:46:cd:cf:d6:
5b:47:ac:3b:a1:64:2f:c9:09:36:7f:42:82:3f:d5:
2d:fa:c9:95:33:44:22:84:c2:1f:2e:4c:cd:0c:1d:
77:1c:b6:fd:5f:6a:2d:35:09:57:fc:22:0b:6f:d3:
c3:1b:72:87:d0:ca:7e:34:bc:f1:0b:4a:10:27:ae:
b8:73:01:d2:c5:3e:3e:1e:d8:a2:74:92:48:e5:8f:
7a:62:82:49:8e:6c:1b:4c:9a:90:ff:3e:cf:7a:39:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:01:7A:77:D7:C6:23:8F:72:0E:A2:30:AF:5A:24:93:DB:24:E2:66
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RgF6d9fGI49yDqIwr1okk9sk4mY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.23.0/24
45.90.17.0/24
45.131.134.0/23
185.108.204.0/24
185.126.82.0/24
185.199.54.0/24
185.199.158.0/23
185.206.251.0/24
185.209.38.0/24
185.209.73.0-185.209.75.255
185.210.233.0/24
185.210.235.0/24
185.214.108.0/24
185.218.20.0/24
185.218.101.0/24
185.220.248.0/22
185.221.20.0/24
185.222.28.0/23
185.223.80.0/24
185.223.155.0/24
185.225.0.0/22
185.225.22.0/24
185.226.104.0/23
185.226.107.0/24
185.227.144.0/24
185.227.146.0/23
185.228.72.0/24
185.228.75.0/24
185.230.53.0/24
185.230.67.0/24
185.232.206.0/24
185.234.22.0/24
185.246.112.0/24
193.8.112.0-193.8.114.255
193.58.144.0/24
193.58.146.0/23
194.5.65.0/24
194.5.67.0/24
194.76.169.0/24
194.76.172.0/24
194.124.69.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:2b:d5:0e:d4:e9:2c:47:38:6d:e5:f6:d0:d5:cd:17:fa:94:
66:bb:20:e2:ec:37:ff:f8:bc:0d:57:80:6b:91:aa:4e:cf:52:
0e:a0:2e:76:36:c3:9a:3f:e6:b0:15:73:fd:8a:71:4f:34:63:
96:16:bf:e9:c1:e6:a4:1c:e3:c3:ce:6e:88:fa:0f:92:6e:8b:
a4:ea:ac:32:c4:bb:be:84:77:73:e0:09:6e:d9:78:fd:c8:e2:
19:0a:7a:6d:db:65:62:73:de:9e:62:73:3a:bd:60:be:a0:93:
fe:cc:a5:35:f3:ef:3c:b9:b6:66:13:a5:a5:1f:d7:38:94:cb:
95:66:db:1a:77:4c:c3:a2:30:97:cf:f0:53:c3:03:e8:1a:2b:
f9:78:13:87:10:ea:de:5e:37:f0:19:fa:64:59:e2:41:d2:01:
d9:79:d3:72:9c:66:52:08:f0:b0:f9:35:94:86:ab:f2:36:e2:
09:f5:55:96:b8:b2:ea:17:ec:d4:87:98:5e:ac:1f:a0:b5:a2:
8a:7b:bc:90:34:ec:f5:98:24:76:4d:a8:54:c6:a7:3e:0f:c9:
51:16:a6:34:20:34:32:c4:c0:12:cb:09:ea:2c:51:2e:e7:89:
18:d6:59:94:bf:f2:73:55:b4:f5:dc:6c:c7:34:5c:ca:73:b5:
2d:2c:ea:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:49 2026 by rpki-client