Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/lJUyzsofpGLnDdE8iWqiIMkZCvE.roa
File: lJUyzsofpGLnDdE8iWqiIMkZCvE.roa (raw, json)
Hash identifier: DA2K+Mtk3dp0wxs49b/38kNtiyGPdQK2Dfo+vlfZx9E=
Subject key identifier: 94:95:32:CE:CA:1F:A4:62:E7:0D:D1:3C:89:6A:A2:20:C9:19:0A:F1
Certificate issuer: /CN=668e9b2eefb205342382b6072a903f9d9837071a
Certificate serial: 01A04206F8FD1C340453540DB950A8BABE54
Authority key identifier: 66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/lJUyzsofpGLnDdE8iWqiIMkZCvE.roa
Signing time: Thu 27 Aug 2026 07:02:28 +0000
ROA not before: Thu 27 Aug 2026 07:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60747
IP address blocks: 185.61.244.0/22 maxlen: 22
185.100.24.0/22 maxlen: 22
185.177.220.0/22 maxlen: 22
185.208.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:06:f8:fd:1c:34:04:53:54:0d:b9:50:a8:ba:be:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=668e9b2eefb205342382b6072a903f9d9837071a
Validity
Not Before: Aug 27 07:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=949532ceca1fa462e70dd13c896aa220c9190af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f3:f5:09:89:29:ad:a0:c6:4e:b9:93:27:86:
85:63:36:3b:e3:18:32:21:70:04:dd:7b:2e:1f:f2:
77:a9:96:70:b8:3d:93:26:d3:af:04:fa:e5:6a:1f:
e8:5e:76:07:f1:9f:53:84:1f:f4:90:e9:f4:96:cf:
8c:33:d5:32:c9:dd:d2:7e:e1:52:3b:cb:70:1d:e9:
56:93:ca:8c:85:cc:f7:49:3e:cd:af:86:e5:a8:31:
29:b2:5e:0b:3b:44:05:4d:62:91:29:e1:d0:23:ee:
e8:8e:16:8f:6c:6b:42:c2:9f:d0:e0:da:9b:b9:dc:
06:97:c2:87:31:f7:1d:c6:a9:c5:d2:57:89:4f:b5:
01:2d:d9:f4:5e:5e:34:c9:da:72:11:51:8f:44:53:
1a:84:cd:2f:cf:8b:97:aa:1e:6e:bd:e4:fe:f3:a4:
58:77:e9:3c:86:6e:6f:51:92:d7:dd:e0:32:0b:01:
45:cf:9b:aa:91:8f:5e:a6:6b:14:b6:35:90:61:0b:
21:93:60:49:06:6f:3f:16:9a:04:9f:fd:96:e4:02:
50:3f:94:e2:92:90:66:1f:c9:51:5d:0b:81:e9:78:
fd:d9:33:ed:09:ac:cc:ed:09:08:d2:e2:72:33:52:
72:f1:73:42:eb:df:28:a4:d2:97:41:17:78:1f:e6:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:95:32:CE:CA:1F:A4:62:E7:0D:D1:3C:89:6A:A2:20:C9:19:0A:F1
X509v3 Authority Key Identifier:
keyid:66:8E:9B:2E:EF:B2:05:34:23:82:B6:07:2A:90:3F:9D:98:37:07:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/lJUyzsofpGLnDdE8iWqiIMkZCvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4a1305-391c-446c-9a33-4c08ffe10076/1/Zo6bLu-yBTQjgrYHKpA_nZg3Bxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.61.244.0/22
185.100.24.0/22
185.177.220.0/22
185.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
99:72:96:8f:af:4f:73:4b:c3:99:b3:62:8c:23:17:ab:9b:6a:
ff:13:9a:f0:82:81:be:d1:ad:05:08:6d:d9:47:36:3e:1b:72:
a0:bb:57:65:a2:90:57:48:f3:9d:c2:d5:4a:c7:7c:87:72:f9:
40:41:db:d1:55:54:19:78:06:ea:7f:7e:da:ad:3d:c5:48:75:
d4:05:5d:d7:65:0c:47:0b:0a:4a:0f:7f:8c:b9:b4:dc:01:57:
d9:ae:dd:a1:1d:70:7d:15:a5:d4:9a:b7:1b:e7:d5:72:cd:6a:
82:e2:68:9b:2b:f2:ef:ff:1c:ea:01:7d:ae:60:68:49:c5:8b:
c4:4d:a6:0b:69:b8:79:a6:74:76:68:2a:14:d2:0d:d6:aa:bb:
80:b8:09:0d:c6:2a:23:a5:74:c7:0c:0d:e5:43:1f:3b:8f:27:
bd:e3:bd:37:bc:e8:ef:f4:fb:9b:ba:10:0e:63:5c:ba:ab:02:
3e:a7:c4:62:75:bc:aa:cc:93:e5:6b:00:99:25:60:9f:7b:c1:
3b:6c:a8:8b:13:c3:95:6c:d2:fc:74:e8:38:10:7e:54:79:da:
cd:43:0e:d7:ef:33:c0:e1:0a:82:08:10:0c:88:0d:9c:7f:d6:
f3:4b:bd:87:c0:e5:d7:a0:76:12:c3:11:75:31:a1:79:78:5d:
d9:4e:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:29:47 2026 by rpki-client