Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v5mpSGDPC-jC5fGk4QHtOVWv1Ig.roa
File: v5mpSGDPC-jC5fGk4QHtOVWv1Ig.roa (raw, json)
Hash identifier: 1mMuGd6gu//BrHedDalh45biSaOWEomY/5AjLm0LZW0=
Subject key identifier: BF:99:A9:48:60:CF:0B:E8:C2:E5:F1:A4:E1:01:ED:39:55:AF:D4:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019EBB21C1C43A05A4A4C1C321D0EB2B1A70
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v5mpSGDPC-jC5fGk4QHtOVWv1Ig.roa
Signing time: Fri 12 Jun 2026 09:20:12 +0000
ROA not before: Fri 12 Jun 2026 09:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400992
IP address blocks: 45.150.195.0/24 maxlen: 24
45.159.79.0/24 maxlen: 24
185.121.12.0/24 maxlen: 24
185.121.15.0/24 maxlen: 24
185.196.41.0/24 maxlen: 24
185.210.154.0/24 maxlen: 24
185.218.16.0/24 maxlen: 24
185.218.19.0/24 maxlen: 24
185.221.22.0/24 maxlen: 24
185.223.82.0/24 maxlen: 24
185.228.72.0/24 maxlen: 24
185.232.205.0/24 maxlen: 24
185.236.25.0/24 maxlen: 24
185.236.26.0/24 maxlen: 24
185.236.27.0/24 maxlen: 24
185.240.120.0/24 maxlen: 24
185.245.34.0/24 maxlen: 24
185.245.35.0/24 maxlen: 24
185.250.180.0/24 maxlen: 24
193.17.180.0/24 maxlen: 24
193.17.183.0/24 maxlen: 24
194.5.65.0/24 maxlen: 24
194.48.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:21:c1:c4:3a:05:a4:a4:c1:c3:21:d0:eb:2b:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 12 09:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf99a94860cf0be8c2e5f1a4e101ed3955afd488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:cf:a3:ce:49:fc:49:4c:f4:98:1d:e5:63:
08:4c:31:44:ee:97:53:26:9a:70:68:dd:54:e1:5f:
10:0a:59:53:52:ee:a3:6d:8f:40:cd:04:29:24:ff:
dd:e5:dc:85:f1:19:da:d9:6b:14:72:ad:ee:4e:94:
e6:94:47:93:af:28:8e:00:c3:32:e4:d5:79:80:7d:
e2:37:53:85:d3:83:4d:e4:f8:45:3d:41:c8:1b:fb:
76:3e:cb:26:81:09:0e:76:a4:e7:8d:ac:bc:b0:d6:
03:cd:59:8b:59:05:41:6e:7e:e7:14:f3:4e:c2:c5:
b2:c6:4a:20:72:60:b1:dc:57:5f:cf:b5:dc:2f:46:
c5:d9:b2:cd:8a:bd:e8:0d:0a:50:76:ea:7d:53:85:
ab:a7:43:9f:38:f5:9e:07:af:75:10:5c:3b:04:c3:
d6:4e:db:1b:5d:06:e8:27:86:57:ba:cf:e8:fe:22:
45:35:af:55:7a:d5:ea:78:c0:81:71:9d:aa:e7:b9:
1a:11:d8:e3:06:be:eb:42:6c:c8:2d:a0:f1:a0:01:
ae:05:e4:f8:c1:24:a2:e2:10:d2:d8:90:42:2a:1b:
5d:67:34:c4:bf:6c:df:5a:b5:95:09:03:a6:94:aa:
e4:0c:91:06:1e:d4:17:f0:3c:10:44:00:5f:5c:1f:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:99:A9:48:60:CF:0B:E8:C2:E5:F1:A4:E1:01:ED:39:55:AF:D4:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/v5mpSGDPC-jC5fGk4QHtOVWv1Ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.195.0/24
45.159.79.0/24
185.121.12.0/24
185.121.15.0/24
185.196.41.0/24
185.210.154.0/24
185.218.16.0/24
185.218.19.0/24
185.221.22.0/24
185.223.82.0/24
185.228.72.0/24
185.232.205.0/24
185.236.25.0-185.236.27.255
185.240.120.0/24
185.245.34.0/23
185.250.180.0/24
193.17.180.0/24
193.17.183.0/24
194.5.65.0/24
194.48.142.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:52:b1:8a:b7:7a:6b:21:70:c7:eb:de:dd:e5:bc:23:c7:ee:
65:1b:c7:11:ec:cf:cd:5d:3c:05:97:a6:f2:01:5a:04:e4:8a:
6c:5b:85:45:72:00:af:a3:f7:4e:0e:34:a8:96:a0:a6:29:30:
16:a7:e1:2b:b4:4d:1e:58:f8:ac:bf:f9:d6:cf:77:25:1f:41:
2a:4a:cf:4d:60:39:9c:db:df:5f:e1:a2:e7:ba:e7:0d:27:9e:
c3:32:d6:5b:93:f4:27:6f:88:09:af:8e:e0:89:5a:d0:c2:fa:
d3:7a:85:35:b2:c0:21:8b:2e:a6:83:ea:27:22:bc:65:3f:24:
28:a4:86:e8:09:29:ac:c7:45:7e:df:bb:b0:9b:9e:c8:23:9f:
4a:22:f3:1c:e7:4c:27:22:09:46:19:d7:21:f7:4e:d0:3d:99:
a5:93:6f:25:0b:10:70:d0:76:41:a0:aa:5b:50:37:8b:76:5e:
13:c4:00:16:ec:9d:a8:55:6f:50:36:ff:35:b8:64:8c:51:5d:
df:9f:ba:39:40:ea:f2:a3:b5:38:7d:01:92:1f:a7:e2:c9:46:
2d:52:4f:fd:74:42:b2:39:02:a1:1c:e3:e2:da:a4:f6:e1:cb:
d6:df:ba:da:d5:3e:2b:32:83:6e:ac:83:80:ad:c5:58:a4:ce:
64:0c:43:af
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZ67IcHEOgWkpMHDIdDrKxpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNjEyMDkyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjk5YTk0ODYwY2YwYmU4YzJlNWYxYTRlMTAxZWQzOTU1YWZkNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19PPo85J/ElM9Jgd5WMITDFE7pdT
JppwaN1U4V8QCllTUu6jbY9AzQQpJP/d5dyF8Rna2WsUcq3uTpTmlEeTryiOAMMy
5NV5gH3iN1OF04NN5PhFPUHIG/t2PssmgQkOdqTnjay8sNYDzVmLWQVBbn7nFPNO
wsWyxkogcmCx3Fdfz7XcL0bF2bLNir3oDQpQdup9U4Wrp0OfOPWeB691EFw7BMPW
TtsbXQboJ4ZXus/o/iJFNa9VetXqeMCBcZ2q57kaEdjjBr7rQmzILaDxoAGuBeT4
wSSi4hDS2JBCKhtdZzTEv2zfWrWVCQOmlKrkDJEGHtQX8DwQRABfXB8NBwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFL+ZqUhgzwvowuXxpOEB7TlVr9SIMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvdjVtcFNHRFBDLWpDNWZHazRRSHRPVld2MUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAAt
lsMDBAAtn08DBAC5eQwDBAC5eQ8DBAC5xCkDBAC50poDBAC52hADBAC52hMDBAC5
3RYDBAC531IDBAC55EgDBAC56M0wDAMEALnsGQMEArnsGAMEALnweAMEAbn1IgME
ALn6tAMEAMERtAMEAMERtwMEAMIFQQMEAMIwjjANBgkqhkiG9w0BAQsFAAOCAQEA
q1Kxird6ayFwx+ve3eW8I8fuZRvHEezPzV08BZem8gFaBOSKbFuFRXIAr6P3Tg40
qJagpikwFqfhK7RNHlj4rL/51s93JR9BKkrPTWA5nNvfX+Gi57rnDSeewzLWW5P0
J2+ICa+O4Ila0ML603qFNbLAIYsupoPqJyK8ZT8kKKSG6AkprMdFft+7sJueyCOf
SiLzHOdMJyIJRhnXIfdO0D2ZpZNvJQsQcNB2QaCqW1A3i3ZeE8QAFuydqFVvUDb/
NbhkjFFd35+6OUDq8qO1OH0Bkh+n4slGLVJP/XRCsjkCoRzj4tqk9uHL1t+62tU+
KzKDbqyDgK3FWKTOZAxDrw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:30 2026 by rpki-client