Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sn-akuFhXzwwF6FcHts1pdasdn4.roa
File: Sn-akuFhXzwwF6FcHts1pdasdn4.roa (raw, json)
Hash identifier: XGCQ8XrgvNHTrtwof6LK/8FfzjGLuPxm99l+3hQDgyI=
Subject key identifier: 4A:7F:9A:92:E1:61:5F:3C:30:17:A1:5C:1E:DB:35:A5:D6:AC:76:7E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1CEB5258E1767DC835574C75C09DD7A5F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sn-akuFhXzwwF6FcHts1pdasdn4.roa
Signing time: Thu 12 Nov 2026 07:42:20 +0000
ROA not before: Thu 12 Nov 2026 07:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 185.194.179.0/24 maxlen: 24
185.223.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:b5:25:8e:17:67:dc:83:55:74:c7:5c:09:dd:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 12 07:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a7f9a92e1615f3c3017a15c1edb35a5d6ac767e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:dd:0f:d3:98:07:e6:5c:75:c5:60:9c:0d:
96:f1:ef:c7:fc:ca:d8:26:2f:e0:28:e0:69:99:e9:
14:fc:6c:b6:54:ca:7f:29:7f:38:9a:1d:4a:31:6c:
2b:bb:70:30:5d:8f:e8:e4:4f:6c:33:c2:de:d4:9c:
2f:a8:fd:0e:45:5c:97:1e:2d:26:02:88:81:bd:bf:
a7:5f:ba:f8:d1:46:85:8f:e3:60:55:a6:db:63:48:
88:2b:42:3b:93:29:46:ef:c1:9f:b6:8e:f1:e3:3a:
5d:a3:cd:c2:6a:78:65:fe:c5:91:00:3a:32:af:4f:
b5:a0:8c:0f:79:01:86:70:a3:6d:e6:8a:99:27:6b:
ec:00:b0:12:88:cc:d9:b3:8b:ff:e5:90:b2:64:f6:
9f:08:6f:18:76:2e:29:67:f7:0c:36:74:fe:69:15:
2f:c3:30:28:a2:21:04:9d:58:2b:58:7a:40:b1:31:
e8:74:3c:a1:cf:8c:5c:8b:26:62:8c:f7:6a:b7:37:
ae:6a:e6:e7:5c:5e:d0:20:c6:25:df:09:8b:72:74:
92:dc:c8:b3:3d:b8:03:cc:de:ee:96:20:f4:36:70:
13:de:0b:e5:68:a4:82:16:ad:41:ba:c7:84:2c:d9:
d1:95:5f:9b:18:4a:19:4f:75:b3:8c:26:f4:b7:de:
57:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7F:9A:92:E1:61:5F:3C:30:17:A1:5C:1E:DB:35:A5:D6:AC:76:7E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Sn-akuFhXzwwF6FcHts1pdasdn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.179.0/24
185.223.152.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:c4:3c:d5:0e:74:47:9e:e5:4e:7b:72:0a:0e:77:81:a2:6f:
8b:17:d0:e1:0f:fa:e4:37:cd:ec:65:03:b4:c7:c1:48:8d:d4:
22:de:08:b1:09:d9:bd:30:e3:f6:6a:ba:c5:d6:de:cf:22:8e:
bc:38:c5:cf:89:38:f4:d8:c2:b8:22:82:1a:f7:41:a9:12:58:
cd:db:3e:fd:53:ff:ef:63:49:9e:4c:28:c2:62:8e:3c:7e:c9:
07:47:2d:d0:63:d3:ce:5a:c6:3e:13:db:7c:71:5c:c5:3f:be:
fd:ea:b5:d3:cf:23:44:c2:8d:5f:1c:30:d4:8d:77:a9:52:84:
e7:f0:31:8a:4b:b5:66:fb:51:c2:8a:10:1e:06:4b:eb:cd:bb:
3c:0e:11:17:bc:bb:12:12:a1:a6:f3:fe:9d:1f:83:1d:74:31:
f4:b6:29:0d:60:fd:f9:89:7b:0f:bd:ec:37:42:5c:a2:16:f6:
76:07:8c:49:8d:3b:bb:1b:e3:0a:95:79:30:74:00:bb:1f:16:
3c:f5:d9:5a:b0:da:4f:5c:b6:dd:7e:7b:14:5a:8c:9d:a2:46:
52:22:82:0a:e2:7f:ec:f6:0e:80:c1:7b:ef:2a:97:8e:d6:1d:
85:9f:69:42:4a:36:f2:4b:e0:d6:17:57:c1:e2:5f:5b:fd:f0:
ea:c5:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:07:32 2026 by rpki-client