Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n4gDNtT1pMNEro0QZVwVNNjJnrs.roa
File: n4gDNtT1pMNEro0QZVwVNNjJnrs.roa (raw, json)
Hash identifier: d/0eVgCH7IX9lgThEPFXGYrRW79GPYj2GENIW5j8Kzk=
Subject key identifier: 9F:88:03:36:D4:F5:A4:C3:44:AE:8D:10:65:5C:15:34:D8:C9:9E:BB
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019D29EAAAB8F1B5ED9E7D85F8DF01921D6B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n4gDNtT1pMNEro0QZVwVNNjJnrs.roa
Signing time: Thu 26 Mar 2026 11:32:18 +0000
ROA not before: Thu 26 Mar 2026 11:32:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 185.225.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ea:aa:b8:f1:b5:ed:9e:7d:85:f8:df:01:92:1d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 26 11:32:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f880336d4f5a4c344ae8d10655c1534d8c99ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:33:b1:34:41:52:48:33:a8:84:f3:8c:ed:bd:
a1:60:ae:2a:29:25:fd:70:f7:33:e3:4a:40:7c:de:
47:a4:55:01:3d:61:a8:c5:43:ef:63:bd:1d:39:b5:
39:1c:f0:94:c2:ba:61:af:ba:fe:6a:7e:69:cb:c6:
f6:9b:7f:34:14:c6:0a:f0:f0:4d:52:58:99:27:49:
cf:28:84:f0:fc:21:60:cd:87:bc:da:c5:1b:24:c8:
4a:3e:8f:29:34:b9:ba:0f:15:a7:23:40:f0:ca:17:
36:50:d8:d4:b1:37:27:6b:99:d3:61:48:0e:ef:7c:
e7:e2:e9:b5:78:4e:1d:38:1f:8c:07:26:5b:e0:1d:
7e:0a:1e:3a:1a:29:3d:f5:7b:30:9d:46:52:e9:7f:
94:89:0a:77:aa:ee:38:a0:97:a6:19:d5:4f:ee:41:
63:69:d3:32:1e:74:12:b6:c4:d0:da:4c:43:d1:8b:
90:57:35:69:00:40:ad:d0:db:17:47:7e:46:ac:2a:
5a:f9:16:ea:76:c1:54:84:b0:94:94:8e:5c:55:2f:
c4:4e:5c:64:20:43:22:ac:34:6e:cc:14:16:09:51:
5c:f6:17:6d:a0:e5:09:f8:c9:51:60:7b:e7:bb:8a:
fd:c2:5d:5b:9f:5d:64:12:5d:85:a0:61:b4:a3:0c:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:88:03:36:D4:F5:A4:C3:44:AE:8D:10:65:5C:15:34:D8:C9:9E:BB
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/n4gDNtT1pMNEro0QZVwVNNjJnrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.22.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:d2:79:82:8f:37:94:86:48:66:9f:e2:c6:54:d0:ff:82:dc:
1d:d8:2c:b6:0b:73:71:5c:e2:c1:b9:91:11:2c:44:ce:08:5b:
8c:99:07:cf:bc:8a:4c:a6:40:b9:f5:31:8c:1c:f5:90:42:a6:
40:56:48:42:4f:e4:38:96:42:8b:49:4c:2d:f7:cb:37:60:31:
e7:11:8e:a0:81:58:40:94:6d:db:97:b9:93:0e:36:b6:2a:e5:
d7:dd:c1:aa:0f:59:72:cc:6d:4a:b5:91:95:44:94:c1:10:7a:
41:58:83:e5:14:f8:65:d9:d8:93:c7:a9:bd:af:79:b9:ac:58:
88:23:1f:81:7c:dd:c2:55:2e:02:80:83:87:29:eb:ad:34:4d:
53:df:49:87:86:24:80:11:9f:cf:f6:bf:9a:06:60:59:94:d5:
4a:c4:90:8c:23:2a:7d:4e:94:06:19:61:db:c3:ae:c4:a7:24:
7a:26:40:84:d6:70:d0:cb:80:1c:37:80:f9:46:d9:ae:18:7d:
e5:4e:b9:51:b2:be:2a:5a:2d:92:60:2f:31:73:50:2c:05:3f:
b8:f8:04:4b:2c:fa:db:bc:7b:e0:7a:f3:6b:10:ae:c0:7a:e1:
46:27:03:c1:2a:32:e6:b8:e9:86:df:9c:1c:91:8f:cb:23:75:
7e:f7:b8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:48 2026 by rpki-client