Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Kanrdly1fxCvmPpisGhsMw9ht4Y.roa
File: Kanrdly1fxCvmPpisGhsMw9ht4Y.roa (raw, json)
Hash identifier: 52pEzei+T6G3am9L0oX62CR7NOcvpi5hiiM8Kr4KMeg=
Subject key identifier: 29:A9:EB:76:5C:B5:7F:10:AF:98:FA:62:B0:68:6C:33:0F:61:B7:86
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1C559C4CFD25C0705CAB67B9AF72332B1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Kanrdly1fxCvmPpisGhsMw9ht4Y.roa
Signing time: Tue 10 Nov 2026 12:05:56 +0000
ROA not before: Tue 10 Nov 2026 12:05:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.218.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:59:c4:cf:d2:5c:07:05:ca:b6:7b:9a:f7:23:32:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 10 12:05:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29a9eb765cb57f10af98fa62b0686c330f61b786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:0b:d8:1d:b7:b7:10:28:0b:29:c3:20:a2:
9c:9b:98:d6:01:40:7c:f0:3c:50:52:93:54:93:43:
05:26:d8:14:8b:26:fc:0b:da:b5:6f:98:ee:31:54:
02:cc:8a:a5:db:8a:f0:8e:83:2e:00:05:f8:95:4e:
6d:58:ad:bd:3a:c5:6c:63:41:a4:8a:5d:c9:46:19:
08:10:70:35:d3:d1:d3:b0:f1:80:d8:b3:dd:28:dd:
af:54:f5:df:ac:70:c9:31:2f:fa:45:63:4f:69:05:
43:58:47:0c:0e:4d:88:d7:4e:32:3e:b3:be:0c:8a:
cd:0f:5f:07:f9:8b:e2:5c:3a:e4:e7:7b:9e:04:fe:
de:e0:06:63:b6:b4:5a:72:ef:49:1e:01:3e:76:78:
19:ef:eb:14:2e:ac:b9:3d:62:0f:6a:51:82:49:52:
f3:37:34:3d:4c:0a:11:a1:32:48:b5:15:f3:29:1d:
76:4e:df:1c:7b:24:59:4f:9c:ae:4b:77:04:8e:1a:
77:01:b5:ba:0e:98:6a:d3:a9:c7:e4:e1:ef:9b:4b:
d6:29:e0:1d:28:8b:60:25:64:9a:4a:c9:dc:04:7b:
14:40:2e:2b:17:8f:9c:6f:5e:0e:cd:9c:8a:e6:51:
80:84:58:e4:64:19:6e:54:c7:98:01:d4:48:66:af:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:A9:EB:76:5C:B5:7F:10:AF:98:FA:62:B0:68:6C:33:0F:61:B7:86
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Kanrdly1fxCvmPpisGhsMw9ht4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ae:e9:14:11:22:9c:f6:fa:27:a3:0f:b3:2d:21:9e:4c:55:
e2:6d:28:43:4f:20:04:46:a0:5b:ff:6f:1b:ee:56:bd:41:24:
52:7c:59:2f:74:4a:bf:7c:81:da:e7:16:b1:f7:45:90:1e:bc:
ae:d6:2a:1c:14:cf:b1:78:46:87:5a:44:f8:1a:ce:95:ed:b9:
2e:58:2c:3a:df:31:54:49:64:e8:d9:4f:57:73:7d:eb:c7:aa:
52:c2:16:cf:06:e1:14:b3:d3:f1:04:41:6a:f1:be:48:d1:d9:
a8:e1:76:e5:6a:40:29:ba:61:3c:51:d7:d1:75:d5:09:f7:b6:
aa:d2:81:13:e1:16:c3:bc:2a:9e:b6:ce:19:37:46:32:8d:c7:
b5:1a:5b:6c:94:5f:ee:d0:33:d3:07:ad:bd:e2:f2:28:93:ba:
ba:09:13:fc:d0:a1:a8:92:18:cd:0a:4b:ff:18:ee:00:d4:99:
67:7a:5f:e2:80:77:ce:c8:99:f0:61:b9:a8:dc:32:b5:42:83:
3f:62:1f:c0:d6:4c:c6:f7:6c:44:6f:46:f2:50:03:7a:7b:e8:
77:0f:2b:8b:95:4b:b4:19:a4:2e:39:f5:78:97:84:13:ec:35:
ec:c5:67:a3:7a:ba:c2:2b:28:94:be:2e:3c:5b:69:13:c1:6b:
82:ce:5f:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaHFWcTP0lwHBcq2e5r3IzKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMTEwMTIwNTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOWE5ZWI3NjVjYjU3ZjEwYWY5OGZhNjJiMDY4NmMzMzBmNjFiNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGUL2B23txAoCynDIKKcm5jWAUB8
8DxQUpNUk0MFJtgUiyb8C9q1b5juMVQCzIql24rwjoMuAAX4lU5tWK29OsVsY0Gk
il3JRhkIEHA109HTsPGA2LPdKN2vVPXfrHDJMS/6RWNPaQVDWEcMDk2I104yPrO+
DIrND18H+YviXDrk53ueBP7e4AZjtrRacu9JHgE+dngZ7+sULqy5PWIPalGCSVLz
NzQ9TAoRoTJItRXzKR12Tt8ceyRZT5yuS3cEjhp3AbW6Dphq06nH5OHvm0vWKeAd
KItgJWSaSsncBHsUQC4rF4+cb14OzZyK5lGAhFjkZBluVMeYAdRIZq8hewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCmp63ZctX8Qr5j6YrBobDMPYbeGMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvS2FucmRseTFmeEN2bVBwaXNHaHNNdzlodDRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudplMA0G
CSqGSIb3DQEBCwUAA4IBAQBurukUESKc9vonow+zLSGeTFXibShDTyAERqBb/28b
7la9QSRSfFkvdEq/fIHa5xax90WQHryu1iocFM+xeEaHWkT4Gs6V7bkuWCw63zFU
SWTo2U9Xc33rx6pSwhbPBuEUs9PxBEFq8b5I0dmo4XblakApumE8UdfRddUJ97aq
0oET4RbDvCqets4ZN0Yyjce1GltslF/u0DPTB6294vIok7q6CRP80KGokhjNCkv/
GO4A1Jlnel/igHfOyJnwYbmo3DK1QoM/Yh/A1kzG92xEb0byUAN6e+h3DyuLlUu0
GaQuOfV4l4QT7DXsxWejerrCKyiUvi48W2kTwWuCzl+c
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:58:37 2026 by rpki-client