Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LYHoM1xtOGChOmzRHIG9c2grS0s.roa
File: LYHoM1xtOGChOmzRHIG9c2grS0s.roa (raw, json)
Hash identifier: HsM9mc5FF9hDD49iZVtSxbagibg2VaVUrc4YUUZJ/dY=
Subject key identifier: 2D:81:E8:33:5C:6D:38:60:A1:3A:6C:D1:1C:81:BD:73:68:2B:4B:4B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C9E4634EF7516DF69D9BAC5896E93E0FC
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LYHoM1xtOGChOmzRHIG9c2grS0s.roa
Signing time: Fri 27 Feb 2026 08:45:27 +0000
ROA not before: Fri 27 Feb 2026 08:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 45.9.12.0/24 maxlen: 24
45.9.13.0/24 maxlen: 24
45.9.14.0/24 maxlen: 24
45.9.15.0/24 maxlen: 24
45.9.16.0/24 maxlen: 24
45.12.112.0/24 maxlen: 24
45.12.113.0/24 maxlen: 24
45.12.128.0/24 maxlen: 24
45.15.152.0/24 maxlen: 24
45.15.153.0/24 maxlen: 24
45.83.27.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.83.85.0/24 maxlen: 24
45.83.86.0/24 maxlen: 24
45.83.87.0/24 maxlen: 24
45.83.150.0/24 maxlen: 24
45.83.151.0/24 maxlen: 24
45.86.71.0/24 maxlen: 24
45.86.76.0/24 maxlen: 24
45.86.77.0/24 maxlen: 24
45.86.78.0/24 maxlen: 24
45.86.79.0/24 maxlen: 24
45.88.168.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
45.88.170.0/24 maxlen: 24
45.88.171.0/24 maxlen: 24
45.88.178.0/24 maxlen: 24
45.88.179.0/24 maxlen: 24
45.88.181.0/24 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.98.0/24 maxlen: 24
45.89.197.0/24 maxlen: 24
45.89.198.0/24 maxlen: 24
45.89.199.0/24 maxlen: 24
45.128.55.0/24 maxlen: 24
45.128.56.0/24 maxlen: 24
45.128.73.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.128.75.0/24 maxlen: 24
139.28.235.0/24 maxlen: 24
141.98.160.0/24 maxlen: 24
171.22.128.0/24 maxlen: 24
171.22.133.0/24 maxlen: 24
171.22.134.0/24 maxlen: 24
171.22.135.0/24 maxlen: 24
171.22.136.0/24 maxlen: 24
171.22.137.0/24 maxlen: 24
171.22.138.0/24 maxlen: 24
185.106.97.0/24 maxlen: 24
185.161.71.0/24 maxlen: 24
213.59.113.0/24 maxlen: 24
213.59.114.0/24 maxlen: 24
213.59.115.0/24 maxlen: 24
213.59.116.0/24 maxlen: 24
213.59.117.0/24 maxlen: 24
213.59.118.0/24 maxlen: 24
213.59.121.0/24 maxlen: 24
213.59.122.0/24 maxlen: 24
213.59.123.0/24 maxlen: 24
213.59.124.0/24 maxlen: 24
213.59.125.0/24 maxlen: 24
213.59.126.0/24 maxlen: 24
213.59.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:46:34:ef:75:16:df:69:d9:ba:c5:89:6e:93:e0:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 27 08:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d81e8335c6d3860a13a6cd11c81bd73682b4b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:a5:ee:df:17:0f:a4:9b:6b:56:06:f0:a6:
b1:de:63:74:bc:cc:2c:6b:10:fd:2f:af:75:67:83:
74:eb:68:ec:9e:23:f9:5f:91:a8:35:49:5f:99:82:
bf:3b:ef:a9:f6:10:b2:73:c2:93:82:5d:da:db:6d:
4c:9b:b6:5c:96:74:f4:00:83:1e:61:30:3d:25:22:
ae:04:5d:df:91:28:85:de:9b:47:e4:7a:4e:f5:8a:
de:96:ef:2a:bb:34:b8:aa:87:9d:e1:c2:91:39:9b:
3a:60:b1:eb:24:4f:86:f5:47:99:f0:9d:cf:f4:ab:
b7:db:a0:64:74:dc:4d:a1:7c:eb:67:79:f5:c5:bd:
6b:41:b1:f9:e3:c6:20:36:cb:31:27:51:4b:a6:30:
f3:49:6a:2c:95:4f:46:c5:14:22:d4:f7:23:5e:47:
5c:48:3e:11:64:8c:4a:2e:08:52:bb:ee:c4:2a:98:
16:11:5f:5f:f5:cc:71:d1:ff:c0:a9:79:cc:4f:ca:
32:8a:a0:0f:c4:05:d9:b6:21:5a:ac:38:d7:41:d5:
55:f0:96:3f:dd:aa:42:9a:86:ed:cb:ea:0d:44:24:
20:ce:b2:e5:71:0b:39:a1:fd:7b:ee:fc:1d:38:c1:
24:2e:77:cd:f9:8e:0c:ab:b2:74:d3:26:78:b8:b4:
ed:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:81:E8:33:5C:6D:38:60:A1:3A:6C:D1:1C:81:BD:73:68:2B:4B:4B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/LYHoM1xtOGChOmzRHIG9c2grS0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.12.0-45.9.16.255
45.12.112.0/23
45.12.128.0/24
45.15.152.0/23
45.83.27.0/24
45.83.84.0/22
45.83.150.0/23
45.86.71.0/24
45.86.76.0/22
45.88.168.0/22
45.88.178.0/23
45.88.181.0/24
45.89.96.0/24
45.89.98.0/24
45.89.197.0-45.89.199.255
45.128.55.0-45.128.56.255
45.128.73.0-45.128.75.255
139.28.235.0/24
141.98.160.0/24
171.22.128.0/24
171.22.133.0-171.22.138.255
185.106.97.0/24
185.161.71.0/24
213.59.113.0-213.59.118.255
213.59.121.0-213.59.127.255
Signature Algorithm: sha256WithRSAEncryption
09:14:fd:37:9b:1e:5c:86:af:4b:5a:17:63:68:53:43:2e:75:
54:f8:a9:9d:e0:f6:96:64:90:78:64:54:28:c4:72:a5:21:51:
bf:c5:1b:8d:ba:f2:b4:98:5d:94:9a:e4:df:0e:93:e2:99:58:
93:b9:74:c0:91:cc:65:13:f6:df:c5:58:62:0d:ad:5c:4a:c1:
26:e4:29:8a:bd:4e:ee:4a:fa:d7:f6:d4:4b:0a:d4:d5:94:e3:
aa:b8:0d:3b:92:63:30:f0:99:64:49:f6:8d:75:6d:c3:87:c3:
a0:f6:ee:d1:1c:c0:82:13:58:28:8d:20:1f:ae:5f:3f:68:9b:
4e:6c:05:16:25:61:5d:b0:ec:c9:e4:64:37:6f:f5:ca:8e:b4:
ad:b4:83:91:42:d8:d4:0a:27:cb:de:da:e3:86:fa:e8:5d:38:
59:20:67:a3:92:d5:2f:0d:63:b9:be:25:16:22:c5:59:d3:86:
d8:ee:67:0f:54:d8:19:cf:4d:ca:92:76:7f:dc:ba:d5:a9:db:
76:04:b6:3b:f6:bf:39:d4:ca:f2:d5:02:b4:de:12:8a:51:47:
4a:78:7e:4a:bb:55:15:5f:e8:25:69:43:a2:96:b3:b2:93:d9:
88:c4:63:b2:c5:76:48:b6:04:8d:37:47:36:80:78:b6:32:9f:
75:f9:2c:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:57:43 2026 by rpki-client