Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/YTAdVh4G_v0OZuLuPLaq92Ziw1M.roa
File: YTAdVh4G_v0OZuLuPLaq92Ziw1M.roa (raw, json)
Hash identifier: PpgSEj2ocILa/oa0Lb77kDyuD6SICuNrI5vU28YZ4v8=
Subject key identifier: 61:30:1D:56:1E:06:FE:FD:0E:66:E2:EE:3C:B6:AA:F7:66:62:C3:53
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A08AE04120B59DBADA0D7A6A160BA7782E
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/YTAdVh4G_v0OZuLuPLaq92Ziw1M.roa
Signing time: Thu 10 Sep 2026 10:32:27 +0000
ROA not before: Thu 10 Sep 2026 10:32:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29119
IP address blocks: 45.6.44.0/24 maxlen: 24
45.6.45.0/24 maxlen: 24
45.6.46.0/23 maxlen: 23
45.120.220.0/22 maxlen: 22
62.106.67.0/24 maxlen: 24
80.174.2.0/23 maxlen: 23
80.174.4.0/22 maxlen: 22
80.174.128.0/17 maxlen: 17
80.174.128.0/21 maxlen: 21
80.174.135.0/24 maxlen: 24
80.174.144.0/22 maxlen: 22
80.174.146.0/24 maxlen: 24
80.174.147.0/24 maxlen: 24
80.174.148.0/22 maxlen: 22
80.174.152.0/21 maxlen: 21
80.174.160.0/22 maxlen: 22
80.174.165.0/24 maxlen: 24
80.174.166.0/24 maxlen: 24
80.174.167.0/24 maxlen: 24
80.174.168.0/21 maxlen: 21
80.174.174.0/24 maxlen: 24
80.174.176.0/20 maxlen: 20
80.174.200.0/23 maxlen: 23
80.174.202.0/23 maxlen: 23
80.174.204.0/22 maxlen: 22
80.174.244.0/23 maxlen: 23
80.174.246.0/24 maxlen: 24
83.143.168.0/21 maxlen: 21
83.143.171.0/24 maxlen: 24
83.143.174.0/23 maxlen: 23
93.95.16.0/23 maxlen: 23
93.95.18.0/24 maxlen: 24
93.95.20.0/22 maxlen: 22
128.0.40.0/24 maxlen: 24
181.201.0.0/17 maxlen: 24
202.58.108.0/22 maxlen: 22
212.86.98.0/24 maxlen: 24
212.118.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:e0:41:20:b5:9d:ba:da:0d:7a:6a:16:0b:a7:78:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Sep 10 10:32:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61301d561e06fefd0e66e2ee3cb6aaf76662c353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:00:e7:0c:22:7b:6b:36:d7:69:5c:b9:71:
c9:5f:dc:67:2e:bf:61:8f:8f:71:b1:58:c6:9c:a0:
b9:4d:0d:66:3d:7d:86:fb:4a:0b:61:92:2f:f6:00:
4e:e7:1d:c9:c7:87:39:05:93:22:fe:16:b8:2b:c6:
d3:6e:97:57:ca:f8:57:97:70:70:47:39:00:ed:0f:
48:96:03:ff:67:70:9c:dd:af:f6:6b:b0:0f:59:32:
36:54:fb:16:b2:c1:2c:b0:62:ef:cd:b7:12:7a:7f:
58:15:e0:8d:bf:88:66:d9:b3:5d:29:1e:5d:96:1c:
86:fe:72:82:08:c5:e7:81:f1:8c:60:e2:43:51:62:
db:a7:be:87:15:b5:ae:e2:17:52:57:83:84:09:c2:
38:52:29:a1:fc:f6:20:70:3b:0b:e0:92:93:81:8f:
81:9c:88:60:53:00:eb:93:e4:a3:2d:bc:5a:b0:e8:
0b:0e:f3:98:0d:ab:f8:70:dc:f8:e9:33:25:13:c9:
95:be:67:61:47:14:c2:91:25:b0:85:db:0a:8c:cd:
11:50:5a:5d:1e:41:2b:eb:77:14:43:9f:c7:2f:eb:
45:1e:1a:93:9f:17:a5:82:56:2b:70:df:53:de:e1:
93:df:9d:13:c3:c4:5d:12:63:59:94:2d:6e:89:25:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:1D:56:1E:06:FE:FD:0E:66:E2:EE:3C:B6:AA:F7:66:62:C3:53
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/YTAdVh4G_v0OZuLuPLaq92Ziw1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.44.0/22
45.120.220.0/22
62.106.67.0/24
80.174.2.0-80.174.7.255
80.174.128.0/17
83.143.168.0/21
93.95.16.0-93.95.18.255
93.95.20.0/22
128.0.40.0/24
181.201.0.0/17
202.58.108.0/22
212.86.98.0/24
212.118.61.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:0e:8f:83:a8:7a:a4:93:bf:81:84:6c:cf:c9:e5:5a:36:07:
e7:11:88:41:98:57:79:cf:6e:8a:af:1e:02:49:78:e4:4b:d5:
fa:e3:16:32:a5:41:dc:1b:b8:9c:3c:fd:8c:de:b6:77:a3:43:
91:99:ee:cd:7e:d3:23:20:bf:9b:57:44:f3:cd:4b:df:d3:40:
70:db:9f:cc:6e:d7:ba:9a:21:d3:59:74:97:ec:bb:6a:bc:e0:
69:d0:e9:1d:cd:0a:a0:22:8c:e4:69:df:8c:47:0d:0d:3c:1c:
2e:7c:09:92:1f:df:39:13:23:01:e3:79:29:83:1e:5c:7e:77:
d1:4b:b0:25:eb:8a:c9:45:ce:4f:5e:16:f2:74:5d:fa:1b:f0:
0c:bd:d6:4e:bb:84:78:0c:df:5c:f5:2a:ac:05:d7:9d:1a:ea:
e9:23:93:29:57:0d:58:d8:ee:02:91:5a:52:c1:0a:66:83:56:
34:34:1a:f4:80:6c:39:8f:4c:85:a4:0a:40:c5:d3:19:8b:fc:
32:0b:42:5d:9e:90:36:33:63:fa:0b:3d:29:31:13:81:aa:1a:
b5:d8:90:e9:4b:12:d0:47:5d:f1:87:8b:6f:3c:aa:20:a0:2d:
cc:4b:89:e0:20:ff:fc:c7:33:41:4e:74:d8:f5:0f:3f:ba:23:
73:0b:8d:c8
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAaCK4EEgtZ262g16ahYLp3guMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NTk5OTg5OWY3NmQyZTJlNGNjZGZjODE3Zjk4NzljZmFj
MDZiYmUwHhcNMjYwOTEwMTAzMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTMwMWQ1NjFlMDZmZWZkMGU2NmUyZWUzY2I2YWFmNzY2NjJjMzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMcA5wwie2s212lcuXHJX9xnLr9h
j49xsVjGnKC5TQ1mPX2G+0oLYZIv9gBO5x3Jx4c5BZMi/ha4K8bTbpdXyvhXl3Bw
RzkA7Q9IlgP/Z3Cc3a/2a7APWTI2VPsWssEssGLvzbcSen9YFeCNv4hm2bNdKR5d
lhyG/nKCCMXngfGMYOJDUWLbp76HFbWu4hdSV4OECcI4Uimh/PYgcDsL4JKTgY+B
nIhgUwDrk+SjLbxasOgLDvOYDav4cNz46TMlE8mVvmdhRxTCkSWwhdsKjM0RUFpd
HkEr63cUQ5/HL+tFHhqTnxelglYrcN9T3uGT350Tw8RdEmNZlC1uiSWkkwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFGEwHVYeBv79Dmbi7jy2qvdmYsNTMB8GA1UdIwQY
MBaAFLRZmYmfdtLi5MzfyBf5h5z6wGu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUt
NzM0MjhmOWM3YmZmLzEvWVRBZFZoNEdfdjBPWnVMdVBMYXE5MlppdzFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYjdiMjEtMzM1Yy00MmNhLTg1OWUtNzM0MjhmOWM3YmZm
LzEvdEZtWmlaOTIwdUxrek5fSUZfbUhuUHJBYTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQCLQYsAwQC
LXjcAwQAPmpDMAwDBAFQrgIDBANQrgADBAdQroADBANTj6gwDAMEBF1fEAMEAF1f
EgMEAl1fFAMEAIAAKAMEB7XJAAMEAso6bAMEANRWYgMEANR2PTANBgkqhkiG9w0B
AQsFAAOCAQEAag6Pg6h6pJO/gYRsz8nlWjYH5xGIQZhXec9uiq8eAkl45EvV+uMW
MqVB3Bu4nDz9jN62d6NDkZnuzX7TIyC/m1dE881L39NAcNufzG7Xupoh01l0l+y7
arzgadDpHc0KoCKM5GnfjEcNDTwcLnwJkh/fORMjAeN5KYMeXH530UuwJeuKyUXO
T14W8nRd+hvwDL3WTruEeAzfXPUqrAXXnRrq6SOTKVcNWNjuApFaUsEKZoNWNDQa
9IBsOY9MhaQKQMXTGYv8MgtCXZ6QNjNj+gs9KTETgaoatdiQ6UsS0Edd8YeLbzyq
IKAtzEuJ4CD//MczQU502PUPP7ojcwuNyA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 07:08:41 2026 by rpki-client