Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/tged4nfV0p0VJ7ddkMzI5XeCJzM.roa
File: tged4nfV0p0VJ7ddkMzI5XeCJzM.roa (raw, json)
Hash identifier: xTwgWx7v3Rln3av3wOawAwpocRZw5iAdOFXXMflHbE4=
Subject key identifier: B6:07:9D:E2:77:D5:D2:9D:15:27:B7:5D:90:CC:C8:E5:77:82:27:33
Certificate issuer: /CN=3740e12e51a1a081c7db20398d008109565213a6
Certificate serial: 019D91197D7EABC6DAB5CE78228696ED0605
Authority key identifier: 37:40:E1:2E:51:A1:A0:81:C7:DB:20:39:8D:00:81:09:56:52:13:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/tged4nfV0p0VJ7ddkMzI5XeCJzM.roa
Signing time: Wed 15 Apr 2026 12:24:20 +0000
ROA not before: Wed 15 Apr 2026 12:24:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49864
IP address blocks: 185.126.208.0/24 maxlen: 24
185.126.209.0/24 maxlen: 24
2a06:c140:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:19:7d:7e:ab:c6:da:b5:ce:78:22:86:96:ed:06:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3740e12e51a1a081c7db20398d008109565213a6
Validity
Not Before: Apr 15 12:24:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6079de277d5d29d1527b75d90ccc8e577822733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:74:52:89:1c:68:d7:e8:df:5b:52:da:86:
e1:56:44:47:f0:6c:d6:f9:90:17:09:f5:e1:3a:90:
54:7b:10:d5:d1:b7:ad:e5:06:6f:83:0b:8b:02:e9:
67:5b:64:d1:a0:82:de:38:bd:7e:9b:aa:2d:dd:08:
2a:95:ad:c2:fb:b1:20:2c:2f:8b:02:ea:a0:32:34:
eb:cb:19:43:80:18:0f:33:38:6f:58:2f:18:5c:1d:
ab:78:98:d5:89:74:21:4c:a0:2e:f3:2d:55:37:c5:
47:1c:e6:45:44:3d:a7:31:fe:fb:ee:7e:71:6d:d6:
f5:f1:18:0b:8c:03:c3:a6:68:ef:ff:19:bf:9e:c0:
5c:26:03:ca:2d:99:86:95:99:70:72:e9:78:2c:34:
43:bc:5b:77:69:bf:9e:98:12:5c:d3:f6:85:5d:e4:
97:18:4d:b7:ce:91:d7:85:14:a2:11:c7:5a:61:3f:
83:09:2d:12:a2:bc:96:6f:ec:4b:1f:cc:5b:46:76:
2a:53:74:7a:e7:b7:60:6b:9f:24:6f:84:ae:7f:4c:
58:da:78:4c:5c:4a:7f:fb:42:e8:2a:49:27:f2:f2:
0b:8d:ac:1b:9a:2f:fe:f1:67:42:9a:fb:79:34:ad:
7c:03:02:a1:f9:e7:56:66:fd:24:e8:e7:02:e7:d0:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:07:9D:E2:77:D5:D2:9D:15:27:B7:5D:90:CC:C8:E5:77:82:27:33
X509v3 Authority Key Identifier:
keyid:37:40:E1:2E:51:A1:A0:81:C7:DB:20:39:8D:00:81:09:56:52:13:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/tged4nfV0p0VJ7ddkMzI5XeCJzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.208.0/23
IPv6:
2a06:c140:1::/48
Signature Algorithm: sha256WithRSAEncryption
4c:28:6c:a1:e6:6a:5f:5a:bc:d5:c9:30:59:a6:1b:17:79:43:
b8:1e:e5:2c:db:52:b9:dc:34:52:be:58:b0:f9:ab:ec:df:a5:
1d:5b:fe:53:3e:12:55:63:54:3e:d3:b3:10:66:d9:4c:9f:31:
f9:19:00:c6:8c:8c:ba:c0:39:ca:73:51:c2:d2:a9:df:98:b4:
7f:36:61:7a:42:ae:e1:9b:85:02:4e:6d:8e:bf:65:2c:15:16:
92:ab:e5:63:10:f7:ef:ab:6d:b8:8c:7e:af:d6:aa:2c:fa:62:
5a:a1:90:b1:ce:84:a2:cc:cf:f4:ba:74:6a:5a:7a:95:a0:c8:
6f:82:4d:5e:87:19:b6:89:22:ba:86:bc:ee:71:67:97:5f:81:
a0:29:2e:51:25:ee:de:99:9d:08:8c:a4:a5:dd:c4:72:dd:30:
cc:91:5f:8d:21:43:ed:70:96:67:ba:a7:9f:8a:47:db:a4:cf:
eb:0c:13:e4:0c:9a:64:c5:e5:c5:65:6d:bf:c6:18:48:8e:c5:
15:1e:a6:66:90:55:4b:79:1d:d9:74:2c:4b:49:c2:98:13:08:
7d:ea:96:f9:55:88:87:e2:6e:82:2d:8f:b5:c5:e5:d6:10:e3:
40:46:c5:0a:a0:52:cf:e9:ae:5c:6c:a8:a3:45:67:03:ce:04:
8a:37:46:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ2RGX1+q8batc54IoaW7QYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDBlMTJlNTFhMWEwODFjN2RiMjAzOThkMDA4MTA5NTY1
MjEzYTYwHhcNMjYwNDE1MTIyNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjA3OWRlMjc3ZDVkMjlkMTUyN2I3NWQ5MGNjYzhlNTc3ODIyNzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ10UokcaNfo31tS2obhVkRH8GzW
+ZAXCfXhOpBUexDV0bet5QZvgwuLAulnW2TRoILeOL1+m6ot3Qgqla3C+7EgLC+L
AuqgMjTryxlDgBgPMzhvWC8YXB2reJjViXQhTKAu8y1VN8VHHOZFRD2nMf777n5x
bdb18RgLjAPDpmjv/xm/nsBcJgPKLZmGlZlwcul4LDRDvFt3ab+emBJc0/aFXeSX
GE23zpHXhRSiEcdaYT+DCS0SoryWb+xLH8xbRnYqU3R657dga58kb4Suf0xY2nhM
XEp/+0LoKkkn8vILjawbmi/+8WdCmvt5NK18AwKh+edWZv0k6OcC59BQWQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFLYHneJ31dKdFSe3XZDMyOV3giczMB8GA1UdIwQY
MBaAFDdA4S5RoaCBx9sgOY0AgQlWUhOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBEaExsR2hvSUhIMnlBNWpRQ0JDVlpTRTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xMWZhNjgtODg4MC00OWIxLWExMjIt
MjIwMzZlMTg3ZWVkLzEvdGdlZDRuZlYwcDBWSjdkZGtNekk1WGVDSnpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8xMWZhNjgtODg4MC00OWIxLWExMjItMjIwMzZlMTg3ZWVk
LzEvTjBEaExsR2hvSUhIMnlBNWpRQ0JDVlpTRTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuX7QMA8E
AgACMAkDBwAqBsFAAAEwDQYJKoZIhvcNAQELBQADggEBAEwobKHmal9avNXJMFmm
Gxd5Q7ge5SzbUrncNFK+WLD5q+zfpR1b/lM+ElVjVD7TsxBm2UyfMfkZAMaMjLrA
OcpzUcLSqd+YtH82YXpCruGbhQJObY6/ZSwVFpKr5WMQ9++rbbiMfq/Wqiz6Ylqh
kLHOhKLMz/S6dGpaepWgyG+CTV6HGbaJIrqGvO5xZ5dfgaApLlEl7t6ZnQiMpKXd
xHLdMMyRX40hQ+1wlme6p5+KR9ukz+sME+QMmmTF5cVlbb/GGEiOxRUepmaQVUt5
Hdl0LEtJwpgTCH3qlvlViIfiboItj7XF5dYQ40BGxQqgUs/prlxsqKNFZwPOBIo3
Rtk=
-----END CERTIFICATE-----
Generated at Wed May 13 11:55:33 2026 by rpki-client