Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HeNfx4waKYjAl-jSJw_w_eR_rGo.roa
File: HeNfx4waKYjAl-jSJw_w_eR_rGo.roa (raw, json)
Hash identifier: Mi69a7CeipUvRCn+cIS0ciH+TojVgfA8R2/7sMgvPVA=
Subject key identifier: 1D:E3:5F:C7:8C:1A:29:88:C0:97:E8:D2:27:0F:F0:FD:E4:7F:AC:6A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1DDF9209B4A264CDA0F60E0AE48350940
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HeNfx4waKYjAl-jSJw_w_eR_rGo.roa
Signing time: Sun 15 Nov 2026 06:50:53 +0000
ROA not before: Sun 15 Nov 2026 06:50:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.81.154.0/24 maxlen: 24
45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.209.74.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.214.102.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.17.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.220.249.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.227.174.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.8.112.0/24 maxlen: 24
193.8.113.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
195.34.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:f9:20:9b:4a:26:4c:da:0f:60:e0:ae:48:35:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 15 06:50:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1de35fc78c1a2988c097e8d2270ff0fde47fac6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:95:76:63:ea:9e:ed:a0:96:df:15:fc:a2:
a3:df:6c:58:7b:19:b0:8d:e8:c8:8f:af:89:72:b3:
eb:24:76:f2:06:1b:9a:f7:ae:6f:7d:47:2a:e8:68:
10:d7:29:ba:ae:83:16:46:53:26:ad:6b:24:a9:ab:
a0:87:c2:70:e7:31:f2:d6:41:c7:f7:18:70:ef:7a:
88:af:2f:3b:3f:43:61:b7:94:2a:98:a8:78:92:de:
fb:3a:60:a9:f7:ad:1d:b6:69:89:a4:d6:3d:cf:da:
24:14:03:e4:f3:fe:c0:3f:43:d5:25:05:b5:8f:13:
50:c9:33:b7:96:db:bc:b6:f9:2b:94:29:57:b4:55:
61:fd:e5:a7:25:99:ba:a0:b2:d0:87:9f:9d:a8:44:
f0:3e:5e:f5:03:08:ba:8f:da:c3:1e:55:5b:ee:e2:
11:1d:9c:47:af:07:82:99:3c:97:88:c9:65:a2:bc:
d1:d9:08:3a:ab:f1:21:4e:78:33:69:6c:2a:dc:0b:
69:df:0d:44:b1:80:f0:2a:2e:a6:b3:ed:52:b3:ab:
05:6e:6d:96:a1:80:b5:02:52:8a:11:37:f4:15:75:
7e:d7:e6:7a:2c:d8:c4:75:d7:f4:09:89:d5:20:c9:
bb:86:be:3d:73:48:f1:3b:08:2b:32:d7:4a:38:3d:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E3:5F:C7:8C:1A:29:88:C0:97:E8:D2:27:0F:F0:FD:E4:7F:AC:6A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HeNfx4waKYjAl-jSJw_w_eR_rGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.154.0/24
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.209.74.0/24
185.210.154.0/23
185.214.102.0/24
185.218.16.0/23
185.218.19.0/24
185.220.249.0/24
185.221.22.0/24
185.223.82.0/24
185.227.174.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.8.112.0/23
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
195.34.67.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5b:ec:aa:86:8c:97:82:ba:76:af:d9:84:4e:19:a4:f4:e0:
87:d3:23:7e:21:7b:8d:9d:84:7d:b5:c6:c4:1c:2a:3d:de:a0:
86:eb:88:78:5e:a8:10:89:8f:a8:d6:4f:29:83:f5:be:46:7d:
95:06:1f:2c:39:73:03:98:89:2c:11:7f:92:69:01:a9:2d:a6:
34:36:b4:a2:d8:75:79:5f:1a:a1:26:59:b6:48:37:4f:37:5a:
0e:73:ae:d8:41:b1:d8:6c:79:39:2e:9c:2b:a1:fb:fb:3b:dc:
d5:c4:4e:c3:8a:f4:09:06:61:52:04:50:05:1c:49:4d:06:49:
6a:d5:7f:3a:6c:e9:21:89:e0:b1:5e:2d:42:14:3b:be:74:2a:
c4:06:e7:0e:3b:61:cf:fa:ab:25:a1:64:aa:e6:94:ec:18:eb:
ba:d3:f0:fe:b5:0f:65:ad:ee:25:74:3c:9b:36:a5:db:1c:5c:
08:6c:5a:3e:8d:ad:87:8d:ae:a0:43:e0:9c:db:1a:93:1e:e6:
b9:cc:44:f2:09:7c:f2:1d:50:34:6d:88:7b:d4:3e:e0:61:b6:
25:6e:4b:b3:d4:a8:53:c3:07:4a:f0:a9:49:b9:a7:19:93:be:
18:86:3b:37:f4:d3:bc:01:dd:f1:42:a6:cc:3a:e2:22:af:2c:
11:1b:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:26:34 2026 by rpki-client