Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/eqAb-BcR0GgNyIt7iySB3_6orfE.roa
File: eqAb-BcR0GgNyIt7iySB3_6orfE.roa (raw, json)
Hash identifier: Q0JbeGJvfA6WVFESfZS5rNq3Am4wRPmMsXrW9T3Y/do=
Subject key identifier: 7A:A0:1B:F8:17:11:D0:68:0D:C8:8B:7B:8B:24:81:DF:FE:A8:AD:F1
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 01A1A605C4C6E0075B18D8CC9B8CC0F89E13
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/eqAb-BcR0GgNyIt7iySB3_6orfE.roa
Signing time: Wed 04 Nov 2026 10:05:58 +0000
ROA not before: Wed 04 Nov 2026 10:05:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.43.136.0/24 maxlen: 24
45.43.138.0/24 maxlen: 24
45.43.139.0/24 maxlen: 24
45.43.164.0/23 maxlen: 23
45.43.176.0/23 maxlen: 23
45.43.178.0/23 maxlen: 23
45.43.180.0/23 maxlen: 23
45.43.182.0/23 maxlen: 23
45.43.184.0/23 maxlen: 23
45.43.186.0/23 maxlen: 23
45.43.188.0/23 maxlen: 23
45.43.190.0/23 maxlen: 23
64.137.8.0/24 maxlen: 24
64.137.10.0/23 maxlen: 23
64.137.14.0/23 maxlen: 23
64.137.18.0/23 maxlen: 23
64.137.30.0/23 maxlen: 23
64.137.42.0/23 maxlen: 23
64.137.48.0/23 maxlen: 23
64.137.58.0/23 maxlen: 23
64.137.60.0/22 maxlen: 22
64.137.73.0/24 maxlen: 24
64.137.74.0/24 maxlen: 24
64.137.75.0/24 maxlen: 24
64.137.77.0/24 maxlen: 24
64.137.78.0/24 maxlen: 24
64.137.80.0/22 maxlen: 22
64.137.84.0/24 maxlen: 24
64.137.86.0/24 maxlen: 24
64.137.88.0/24 maxlen: 24
64.137.89.0/24 maxlen: 24
64.137.90.0/24 maxlen: 24
64.137.91.0/24 maxlen: 24
64.137.92.0/23 maxlen: 23
64.137.94.0/23 maxlen: 23
64.137.96.0/22 maxlen: 22
64.137.100.0/23 maxlen: 23
64.137.103.0/24 maxlen: 24
64.137.108.0/24 maxlen: 24
64.137.126.0/24 maxlen: 24
104.143.232.0/21 maxlen: 21
104.143.240.0/22 maxlen: 22
104.143.248.0/21 maxlen: 24
104.222.190.0/24 maxlen: 24
104.233.31.0/24 maxlen: 24
104.233.32.0/20 maxlen: 20
104.233.57.0/24 maxlen: 24
104.233.60.0/24 maxlen: 24
104.233.61.0/24 maxlen: 24
104.233.62.0/24 maxlen: 24
104.238.15.0/24 maxlen: 24
104.238.16.0/24 maxlen: 24
104.238.18.0/24 maxlen: 24
104.238.22.0/24 maxlen: 24
104.238.25.0/24 maxlen: 24
104.239.9.0/24 maxlen: 24
104.239.45.0/24 maxlen: 24
104.239.46.0/24 maxlen: 24
104.239.48.0/24 maxlen: 24
104.239.95.0/24 maxlen: 24
104.239.99.0/24 maxlen: 24
104.239.110.0/24 maxlen: 24
104.249.29.0/24 maxlen: 24
104.249.32.0/22 maxlen: 22
104.249.36.0/24 maxlen: 24
104.249.37.0/24 maxlen: 24
104.249.55.0/24 maxlen: 24
104.249.60.0/23 maxlen: 23
104.250.192.0/21 maxlen: 21
104.250.208.0/20 maxlen: 20
138.128.145.0/24 maxlen: 24
138.128.151.0/24 maxlen: 24
138.128.153.0/24 maxlen: 24
216.173.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft
rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:05:c4:c6:e0:07:5b:18:d8:cc:9b:8c:c0:f8:9e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Nov 4 10:05:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7aa01bf81711d0680dc88b7b8b2481dffea8adf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:d3:91:3a:cc:9c:61:8d:6f:17:d0:f7:8c:
6d:9f:74:80:ec:15:b1:c9:08:f7:77:00:6a:d6:5a:
c7:ec:58:f8:ee:10:bd:dc:9e:8b:95:e3:c6:ab:19:
a3:3d:9b:29:67:1b:fd:e3:33:81:33:47:05:bb:99:
9e:35:7b:19:1a:6e:16:6a:03:36:c3:65:8d:8a:a1:
fc:a8:44:84:7a:79:bb:be:d7:d5:40:c1:ea:60:20:
77:33:5d:f4:c6:6e:4d:bd:b5:89:86:54:7c:e4:d6:
ea:e7:8e:26:1f:27:40:5b:72:13:bf:64:47:63:82:
6e:a8:80:40:06:48:0a:ec:f7:e2:29:5a:07:34:bc:
fd:2d:6e:ba:69:a1:a9:3c:06:a3:09:86:78:ed:1c:
94:07:4d:d0:ae:de:63:3e:70:63:25:0e:15:3a:91:
96:ba:84:5d:e5:4e:61:a1:e2:3b:8b:66:6b:09:c7:
ac:70:de:51:31:18:04:bb:57:e3:6b:8a:79:c8:3a:
3d:53:51:92:79:0b:46:23:36:ac:45:2b:fa:85:92:
ba:a1:9d:81:7b:7d:c7:03:9a:c8:7c:d2:71:85:9e:
9c:4a:9c:b8:fd:c2:b7:13:96:db:6a:8a:57:ca:ba:
78:91:95:c8:42:ec:ac:cf:79:9b:06:15:01:c8:bd:
53:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A0:1B:F8:17:11:D0:68:0D:C8:8B:7B:8B:24:81:DF:FE:A8:AD:F1
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/eqAb-BcR0GgNyIt7iySB3_6orfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.136.0/24
45.43.138.0/23
45.43.164.0/23
45.43.176.0/20
64.137.8.0/24
64.137.10.0/23
64.137.14.0/23
64.137.18.0/23
64.137.30.0/23
64.137.42.0/23
64.137.48.0/23
64.137.58.0-64.137.63.255
64.137.73.0-64.137.75.255
64.137.77.0-64.137.78.255
64.137.80.0-64.137.84.255
64.137.86.0/24
64.137.88.0-64.137.101.255
64.137.103.0/24
64.137.108.0/24
64.137.126.0/24
104.143.232.0-104.143.243.255
104.143.248.0/21
104.222.190.0/24
104.233.31.0-104.233.47.255
104.233.57.0/24
104.233.60.0-104.233.62.255
104.238.15.0-104.238.16.255
104.238.18.0/24
104.238.22.0/24
104.238.25.0/24
104.239.9.0/24
104.239.45.0-104.239.46.255
104.239.48.0/24
104.239.95.0/24
104.239.99.0/24
104.239.110.0/24
104.249.29.0/24
104.249.32.0-104.249.37.255
104.249.55.0/24
104.249.60.0/23
104.250.192.0/21
104.250.208.0/20
138.128.145.0/24
138.128.151.0/24
138.128.153.0/24
216.173.111.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:93:5e:5d:4a:3c:8f:c8:0b:3d:e1:e7:c9:10:b9:8d:24:0e:
7f:34:e2:03:83:f1:30:b4:5c:d1:72:68:c7:2c:d8:22:05:8c:
3c:cb:8e:85:4e:bf:03:b2:ed:7f:d4:9e:a7:11:bc:e3:e7:35:
59:69:f2:22:82:bb:08:b8:c8:5b:d6:e4:4b:ad:da:5d:71:55:
23:e1:64:81:8e:51:44:4c:90:1c:b3:94:6d:3a:af:c0:9b:dc:
04:2a:4b:e5:f2:51:ee:9b:8b:9b:a5:89:55:f7:d6:02:e7:26:
da:4a:2b:a2:ca:94:9e:21:52:2b:47:8c:c6:db:5f:87:95:22:
3d:8a:06:44:5c:31:05:3d:db:1d:90:a2:f5:83:16:cb:28:df:
ab:7c:47:43:91:df:fc:dc:62:1f:69:53:21:4b:ba:08:5e:ce:
fc:eb:69:f1:f6:a3:cc:66:6a:97:83:26:40:87:68:0c:3d:aa:
48:1a:f0:7c:27:5c:c8:28:1f:56:93:73:e3:5b:84:e3:44:0b:
9a:0d:c4:cb:70:d5:a4:6f:ab:b9:45:cf:e3:75:f3:cd:b8:0f:
a9:fa:fd:30:16:b7:2c:25:71:d5:fe:09:e0:40:f5:24:33:ac:
66:c8:98:14:89:0e:4d:42:a0:4f:e4:fa:3f:a1:fc:bb:53:60:
ca:f3:a1:82
-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgISAaGmBcTG4AdbGNjMm4zA+J4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjYxMTA0MTAwNTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWEwMWJmODE3MTFkMDY4MGRjODhiN2I4YjI0ODFkZmZlYThhZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulHTkTrMnGGNbxfQ94xtn3SA7BWx
yQj3dwBq1lrH7Fj47hC93J6LlePGqxmjPZspZxv94zOBM0cFu5meNXsZGm4WagM2
w2WNiqH8qESEenm7vtfVQMHqYCB3M130xm5NvbWJhlR85Nbq544mHydAW3ITv2RH
Y4JuqIBABkgK7PfiKVoHNLz9LW66aaGpPAajCYZ47RyUB03Qrt5jPnBjJQ4VOpGW
uoRd5U5hoeI7i2ZrCcescN5RMRgEu1fja4p5yDo9U1GSeQtGIzasRSv6hZK6oZ2B
e33HA5rIfNJxhZ6cSpy4/cK3E5bbaopXyrp4kZXIQuysz3mbBhUByL1TKQIDAQAB
o4IDeTCCA3UwHQYDVR0OBBYEFHqgG/gXEdBoDciLe4skgd/+qK3xMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvZXFBYi1CY1IwR2dOeUl0N2l5U0IzXzZvcmZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBjQYIKwYBBQUHAQcBAf8EggF8MIIBeDCCAXQEAgABMIIB
bAMEAC0riAMEAS0rigMEAS0rpAMEBC0rsAMEAECJCAMEAUCJCgMEAUCJDgMEAUCJ
EgMEAUCJHgMEAUCJKgMEAUCJMDAMAwQBQIk6AwQGQIkAMAwDBABAiUkDBAJAiUgw
DAMEAECJTQMEAECJTjAMAwQEQIlQAwQAQIlUAwQAQIlWMAwDBANAiVgDBAFAiWQD
BABAiWcDBABAiWwDBABAiX4wDAMEA2iP6AMEAmiP8AMEA2iP+AMEAGjevjAMAwQA
aOkfAwQEaOkgAwQAaOk5MAwDBAJo6TwDBABo6T4wDAMEAGjuDwMEAGjuEAMEAGju
EgMEAGjuFgMEAGjuGQMEAGjvCTAMAwQAaO8tAwQAaO8uAwQAaO8wAwQAaO9fAwQA
aO9jAwQAaO9uAwQAaPkdMAwDBAVo+SADBAFo+SQDBABo+TcDBAFo+TwDBANo+sAD
BARo+tADBACKgJEDBACKgJcDBACKgJkDBADYrW8wDQYJKoZIhvcNAQELBQADggEB
ABuTXl1KPI/ICz3h58kQuY0kDn804gOD8TC0XNFyaMcs2CIFjDzLjoVOvwOy7X/U
nqcRvOPnNVlp8iKCuwi4yFvW5Eut2l1xVSPhZIGOUURMkByzlG06r8Cb3AQqS+Xy
Ue6bi5uliVX31gLnJtpKK6LKlJ4hUitHjMbbX4eVIj2KBkRcMQU92x2QovWDFsso
36t8R0OR3/zcYh9pUyFLughezvzrafH2o8xmapeDJkCHaAw9qkga8HwnXMgoH1aT
c+NbhONEC5oNxMtw1aRvq7lFz+N18824D6n6/TAWtywlcdX+CeBA9SQzrGbImBSJ
Dk1CoE/k+j+h/LtTYMrzoYI=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:56 2026 by rpki-client