Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa
File: zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa (raw, json)
Hash identifier: 0f6kOQBqGXGCHT/mf7JYgdcKuqyqUXY4na2v3j9WykI=
Subject key identifier: CC:8F:A8:00:DD:CE:42:D5:DD:F8:13:72:13:43:0D:27:BD:31:B3:A9
Certificate issuer: /CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Certificate serial: 019F1D1109B1736E6402C54732235D96EDF5
Authority key identifier: 70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa
Signing time: Wed 01 Jul 2026 09:44:43 +0000
ROA not before: Wed 01 Jul 2026 09:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.189.108.0/24 maxlen: 24
185.189.110.0/24 maxlen: 24
185.189.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:11:09:b1:73:6e:64:02:c5:47:32:23:5d:96:ed:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b190d6f89a434cce5cb8c0d4b38a1669defb59
Validity
Not Before: Jul 1 09:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cc8fa800ddce42d5ddf8137213430d27bd31b3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:aa:31:a8:db:1e:5e:19:62:28:cc:f6:3d:
c9:6d:54:2b:3a:05:7e:14:b3:15:6f:d6:d3:24:d6:
7c:8e:ca:48:ea:ec:6f:77:fb:a0:f0:27:5e:18:61:
44:87:f9:e5:a1:f3:e2:3e:eb:2a:32:2b:ff:eb:8d:
da:09:9b:b5:6d:80:9f:34:c2:91:60:94:86:3a:7b:
57:a6:4b:f6:c9:d3:9e:db:16:af:65:a6:ea:03:7d:
6d:52:86:cc:3a:28:f2:7e:86:3e:0f:d6:7c:b9:03:
4f:b1:24:ba:41:a0:1b:a2:f1:ae:60:0b:3f:af:52:
de:8c:27:54:0a:f8:64:ef:68:34:5c:09:42:78:43:
e2:f7:82:d2:f1:4d:e7:b9:af:4c:66:21:76:7a:ce:
ce:8b:88:27:07:3e:60:cb:d1:c4:f3:84:6e:dc:79:
e0:69:81:95:e4:cb:ee:d0:31:5e:d7:d5:83:62:ee:
2d:1d:4c:51:60:a0:63:46:ef:24:54:25:ac:a2:3f:
98:a6:03:0c:34:d6:22:4e:74:7f:c8:03:0c:e5:2b:
eb:a4:83:8b:ea:65:ca:bd:b1:df:54:90:0d:4c:b4:
eb:fe:fb:ff:a9:08:a3:3e:54:8e:d9:1e:48:30:fb:
a4:b7:7f:2b:71:4d:c3:4a:2e:08:09:68:bb:ae:40:
fe:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:8F:A8:00:DD:CE:42:D5:DD:F8:13:72:13:43:0D:27:BD:31:B3:A9
X509v3 Authority Key Identifier:
keyid:70:B1:90:D6:F8:9A:43:4C:CE:5C:B8:C0:D4:B3:8A:16:69:DE:FB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGQ1viaQ0zOXLjA1LOKFmne-1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/zI-oAN3OQtXd-BNyE0MNJ70xs6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/23dc61-7e9d-40b3-91b6-46bd7d794fb6/1/cLGQ1viaQ0zOXLjA1LOKFmne-1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.108.0/24
185.189.110.0/23
Signature Algorithm: sha256WithRSAEncryption
15:02:33:b7:2a:9b:48:c5:bc:ee:52:29:89:32:58:57:29:c3:
d3:b7:2c:7c:3e:a4:4c:ac:5e:d5:79:8f:d9:2e:22:d4:f9:a3:
81:16:e6:98:43:ae:8e:54:7f:e2:1d:66:d5:25:d3:14:bf:16:
f0:db:9d:24:a0:42:47:fb:8e:28:b9:3e:2a:ab:d6:e0:c1:d8:
03:04:07:48:2d:b8:ae:6d:b6:d2:84:d0:74:4e:35:2b:26:76:
71:b7:a7:77:8d:05:02:f3:03:8e:e7:d6:50:6d:30:5a:50:86:
9c:ad:8f:59:4f:c2:5f:9c:5e:8b:fb:e7:dd:86:c8:90:ed:ef:
28:3b:77:ed:9a:26:97:4b:0c:44:c2:25:db:64:bb:44:c0:c4:
38:d3:ae:cf:61:ec:00:7b:45:2c:d2:ff:5a:59:4f:c1:af:7b:
23:b8:b0:02:55:89:ca:0b:05:38:5a:20:3e:86:51:ba:78:09:
e8:71:04:6c:3f:0a:e2:ef:45:bf:9e:51:70:dc:a3:50:51:82:
66:5b:44:d1:17:0c:50:13:e3:92:e6:8b:14:d6:0c:6e:9f:76:
f5:63:37:08:c7:64:ee:8c:38:de:a4:e2:e9:10:8d:35:ab:03:
9f:a7:f3:1b:35:98:54:b4:f5:c1:11:03:20:a7:39:01:90:bc:
7e:a4:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:17 2026 by rpki-client