Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/YMedGJnXRcWA5Ks3YzQ1EqhD0Rk.roa
File: YMedGJnXRcWA5Ks3YzQ1EqhD0Rk.roa (raw, json)
Hash identifier: D/Bngb5cq4nv7X+HLi0RX64PE5N0ij8AUbuoUhP3YFU=
Subject key identifier: 60:C7:9D:18:99:D7:45:C5:80:E4:AB:37:63:34:35:12:A8:43:D1:19
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 019B791110058A7A7317170949E59C70095E
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/YMedGJnXRcWA5Ks3YzQ1EqhD0Rk.roa
Signing time: Thu 01 Jan 2026 10:18:39 +0000
ROA not before: Thu 01 Jan 2026 10:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204704
IP address blocks: 45.84.64.0/24 maxlen: 24
45.84.65.0/24 maxlen: 24
45.84.66.0/24 maxlen: 24
45.84.67.0/24 maxlen: 24
45.154.48.0/22 maxlen: 22
45.154.48.0/24 maxlen: 24
45.154.49.0/24 maxlen: 24
185.206.88.0/24 maxlen: 24
185.206.89.0/24 maxlen: 24
185.206.90.0/24 maxlen: 24
185.206.91.0/24 maxlen: 24
2a0e:9880::/29 maxlen: 32
2a0e:9881::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:11:10:05:8a:7a:73:17:17:09:49:e5:9c:70:09:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Jan 1 10:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60c79d1899d745c580e4ab3763343512a843d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:de:d9:b5:64:fe:4f:c5:b9:52:ab:28:40:37:
0c:52:20:c6:08:92:a4:d6:c7:e2:ab:c0:24:0c:34:
a5:34:a2:57:d9:81:52:91:dc:24:75:7d:d8:0a:85:
0f:64:2c:47:52:c2:7a:c0:7d:42:86:09:ef:e7:3b:
b3:4d:d6:cd:5f:b4:86:33:3b:62:bf:40:cf:af:07:
fe:b5:26:42:07:32:fe:11:b7:54:38:a6:93:bb:9e:
3d:eb:24:0f:17:87:b1:95:15:f4:91:a8:25:ce:0c:
41:29:81:c7:c9:28:55:d1:74:ad:6f:0c:1b:9f:ec:
16:ac:cf:84:b4:c8:72:d1:3d:0d:7b:7f:b9:7b:3e:
40:b9:52:87:dd:26:0e:54:bb:8c:e5:6c:d6:79:20:
51:8c:1a:c5:51:3b:b6:89:e2:92:25:25:f5:98:81:
aa:ac:b9:20:cd:a2:2a:2e:74:44:ee:2f:37:5a:23:
f4:33:53:53:7f:2a:29:67:34:d8:a0:74:12:b2:3b:
2c:f8:cd:1f:5b:55:c2:ee:19:7a:84:86:c7:d5:ec:
43:59:ae:de:5e:46:12:fc:b5:e4:08:73:a6:58:90:
18:c9:47:33:c0:24:f5:4d:3e:f5:5c:fb:af:c3:76:
e6:da:f8:fa:d9:d1:7d:87:c3:a5:fc:46:45:00:87:
7b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C7:9D:18:99:D7:45:C5:80:E4:AB:37:63:34:35:12:A8:43:D1:19
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/YMedGJnXRcWA5Ks3YzQ1EqhD0Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.64.0/22
45.154.48.0/22
185.206.88.0/22
IPv6:
2a0e:9880::/29
Signature Algorithm: sha256WithRSAEncryption
80:61:cb:0b:79:4a:df:2e:5a:f9:d2:60:d3:c4:29:a1:98:b1:
54:2a:59:d4:f6:2e:62:b2:fa:d2:ae:1a:ee:d1:4e:60:84:53:
df:3e:e0:b3:be:10:78:6c:e9:08:18:41:4a:f8:b0:eb:92:76:
82:d3:a5:e7:f8:10:dd:27:fa:87:0a:46:6a:2e:70:03:33:c2:
7c:8b:83:f0:8b:1b:f1:61:e8:ce:7f:d7:c7:96:62:97:fb:a9:
62:9f:d9:49:d2:2c:17:53:b6:e3:b1:bf:e3:83:63:8f:e5:0e:
79:cf:fa:6a:69:47:bb:a1:e0:89:31:1c:32:40:23:7b:dd:b8:
e9:12:6b:8f:8f:55:93:f6:35:4d:a0:c2:65:52:8a:39:b7:71:
0e:db:b3:d7:7b:d6:cb:a0:cb:6c:ba:2f:9e:4e:fd:06:e1:eb:
6d:2c:5e:ba:f8:d2:07:70:f3:f1:ab:02:14:96:07:7a:98:f3:
4e:87:0a:92:fc:f3:e3:38:10:96:b1:89:89:28:8c:d9:d8:89:
eb:8f:85:e8:6c:3e:e3:9a:1a:54:48:18:41:bf:a0:03:eb:a8:
c0:5e:c6:5b:a6:7c:15:5f:27:a5:e4:5f:7f:03:89:b1:83:8b:
2f:be:42:b7:dc:9b:48:fe:7f:c2:ed:fe:ed:50:4a:c0:d4:a7:
a8:aa:d6:03
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt5ERAFinpzFxcJSeWccAleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODMxZWU5NGMzN2I5YjExNTljN2Q3NzMyOTM2MTgxYWI1
NDFkODAwHhcNMjYwMTAxMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGM3OWQxODk5ZDc0NWM1ODBlNGFiMzc2MzM0MzUxMmE4NDNkMTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd7ZtWT+T8W5UqsoQDcMUiDGCJKk
1sfiq8AkDDSlNKJX2YFSkdwkdX3YCoUPZCxHUsJ6wH1Chgnv5zuzTdbNX7SGMzti
v0DPrwf+tSZCBzL+EbdUOKaTu5496yQPF4exlRX0kaglzgxBKYHHyShV0XStbwwb
n+wWrM+EtMhy0T0Ne3+5ez5AuVKH3SYOVLuM5WzWeSBRjBrFUTu2ieKSJSX1mIGq
rLkgzaIqLnRE7i83WiP0M1NTfyopZzTYoHQSsjss+M0fW1XC7hl6hIbH1exDWa7e
XkYS/LXkCHOmWJAYyUczwCT1TT71XPuvw3bm2vj62dF9h8Ol/EZFAId7WQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFGDHnRiZ10XFgOSrN2M0NRKoQ9EZMB8GA1UdIwQY
MBaAFJuDHulMN7mxFZx9dzKTYYGrVB2AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMTcyZTktMWM1YS00MTVjLTgwMjgt
MTI4MGYyZTc4M2Q0LzEvWU1lZEdKblhSY1dBNUtzM1l6UTFFcWhEMFJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iMTcyZTktMWM1YS00MTVjLTgwMjgtMTI4MGYyZTc4M2Q0
LzEvbTRNZTZVdzN1YkVWbkgxM01wTmhnYXRVSFlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLVRAAwQC
LZowAwQCuc5YMA0EAgACMAcDBQMqDpiAMA0GCSqGSIb3DQEBCwUAA4IBAQCAYcsL
eUrfLlr50mDTxCmhmLFUKlnU9i5isvrSrhru0U5ghFPfPuCzvhB4bOkIGEFK+LDr
knaC06Xn+BDdJ/qHCkZqLnADM8J8i4PwixvxYejOf9fHlmKX+6lin9lJ0iwXU7bj
sb/jg2OP5Q55z/pqaUe7oeCJMRwyQCN73bjpEmuPj1WT9jVNoMJlUoo5t3EO27PX
e9bLoMtsui+eTv0G4ettLF66+NIHcPPxqwIUlgd6mPNOhwqS/PPjOBCWsYmJKIzZ
2Inrj4XobD7jmhpUSBhBv6AD66jAXsZbpnwVXyel5F9/A4mxg4svvkK33JtI/n/C
7f7tUErA1KeoqtYD
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:03:39 2026 by rpki-client