Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/cpkKyNRNYgQk1lLBbtv-RlD-78g.roa
File: cpkKyNRNYgQk1lLBbtv-RlD-78g.roa (raw, json)
Hash identifier: MQvqAF25MaAWO4N+QWnNs3nNJuJQMOBlA9mFkaz0rn0=
Subject key identifier: 72:99:0A:C8:D4:4D:62:04:24:D6:52:C1:6E:DB:FE:46:50:FE:EF:C8
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 01A080830A46CD195542A2A4E2E73C0DC5FF
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/cpkKyNRNYgQk1lLBbtv-RlD-78g.roa
Signing time: Tue 08 Sep 2026 10:14:26 +0000
ROA not before: Tue 08 Sep 2026 10:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201401
IP address blocks: 185.106.224.0/22 maxlen: 22
185.106.224.0/24 maxlen: 24
185.106.225.0/24 maxlen: 24
185.106.226.0/24 maxlen: 24
185.106.227.0/24 maxlen: 24
194.126.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:83:0a:46:cd:19:55:42:a2:a4:e2:e7:3c:0d:c5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Sep 8 10:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72990ac8d44d620424d652c16edbfe4650feefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:ff:50:68:eb:8c:8e:71:03:3d:e1:74:17:
c7:51:21:a1:f1:55:db:df:79:10:9f:74:8e:88:85:
1a:8d:44:2d:e7:f2:1e:cc:e2:ed:da:2e:55:df:85:
14:39:9c:ff:9f:3c:b1:5b:82:2a:1a:f9:8e:b3:5c:
12:29:c5:a9:cc:17:7d:72:2a:ae:01:98:ce:c8:cc:
d8:31:ab:a8:ba:97:9c:a6:34:21:6f:f5:f4:8e:26:
84:16:3d:cd:6e:fa:a5:2e:3e:ad:bb:c4:c6:ba:75:
62:60:f2:39:95:d9:f8:85:ca:e2:3e:8c:0f:f5:9d:
c0:c5:bc:bb:a1:45:01:a7:a8:5d:bb:0d:98:b9:7b:
30:40:2a:2b:6d:ae:7c:a2:a2:26:af:c3:0d:16:4d:
b6:d3:b1:83:55:39:fb:65:11:1c:0b:8e:8d:f0:26:
87:99:c6:c4:c6:50:e1:44:8f:05:7c:69:8f:e5:ad:
36:55:b0:04:fd:34:3d:b2:3d:0d:77:c5:f1:e7:a7:
5a:f7:55:ec:68:24:7d:10:78:d3:f5:29:ea:ed:83:
aa:a4:30:30:77:6f:38:16:90:c8:2f:d1:49:fa:b5:
ce:84:a3:45:f4:f7:ea:49:ad:fa:90:b7:86:d3:39:
b2:7a:b8:c0:4c:59:c4:dc:7d:02:0c:a6:72:83:40:
50:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:99:0A:C8:D4:4D:62:04:24:D6:52:C1:6E:DB:FE:46:50:FE:EF:C8
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/cpkKyNRNYgQk1lLBbtv-RlD-78g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.224.0/22
194.126.130.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d7:73:0a:81:57:8d:33:4a:fd:7d:89:a2:e2:79:06:53:b7:
1c:97:42:ba:d0:db:9f:f2:9e:b5:e9:0a:66:a2:a8:d7:26:7c:
85:44:7f:a6:39:e7:b6:68:8d:eb:eb:56:c8:7c:b5:7c:77:ec:
fe:90:88:35:82:8f:32:d1:28:c9:a9:31:8f:06:86:19:62:a8:
c2:92:1c:4a:69:4e:d4:8b:a8:52:99:cd:e6:7f:df:ad:91:72:
80:49:03:bf:70:34:ee:ec:02:85:9b:f5:b7:5f:f0:57:fa:48:
c6:97:10:ee:21:f5:62:11:8c:e8:99:91:b6:30:bd:eb:c1:b7:
0f:eb:73:59:84:f5:d5:5b:d5:59:b8:b8:ca:0a:67:12:39:47:
db:2e:b4:aa:84:34:f1:4f:98:c7:0a:3e:99:5c:bc:ee:78:93:
9b:71:52:c2:ab:4e:1c:b2:e4:8c:7c:23:7d:d5:e4:11:5e:f3:
68:7d:e6:fd:13:33:03:24:0a:5a:ba:83:02:fd:03:ba:bd:2f:
4f:32:4a:f8:d9:70:64:aa:85:0e:df:e6:2a:03:81:23:f6:3d:
a8:88:0e:e2:15:d7:49:8d:8b:df:4a:85:55:e2:ac:39:86:45:
fe:a5:d0:ef:dd:e8:e4:76:13:3a:66:32:d6:1a:bd:16:49:4b:
df:b9:bb:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCAgwpGzRlVQqKk4uc8DcX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx
NjhjZTEwHhcNMjYwOTA4MTAxNDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Mjk5MGFjOGQ0NGQ2MjA0MjRkNjUyYzE2ZWRiZmU0NjUwZmVlZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseT/UGjrjI5xAz3hdBfHUSGh8VXb
33kQn3SOiIUajUQt5/IezOLt2i5V34UUOZz/nzyxW4IqGvmOs1wSKcWpzBd9ciqu
AZjOyMzYMauoupecpjQhb/X0jiaEFj3NbvqlLj6tu8TGunViYPI5ldn4hcriPowP
9Z3Axby7oUUBp6hduw2YuXswQCorba58oqImr8MNFk2207GDVTn7ZREcC46N8CaH
mcbExlDhRI8FfGmP5a02VbAE/TQ9sj0Nd8Xx56da91XsaCR9EHjT9Snq7YOqpDAw
d284FpDIL9FJ+rXOhKNF9PfqSa36kLeG0zmyerjATFnE3H0CDKZyg0BQywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHKZCsjUTWIEJNZSwW7b/kZQ/u/IMB8GA1UdIwQY
MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt
N2E1YThkMDk2N2M4LzEvY3BrS3lOUk5ZZ1FrMWxMQmJ0di1SbEQtNzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4
LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuWrgAwQA
wn6CMA0GCSqGSIb3DQEBCwUAA4IBAQAk13MKgVeNM0r9fYmi4nkGU7ccl0K60Nuf
8p616QpmoqjXJnyFRH+mOee2aI3r61bIfLV8d+z+kIg1go8y0SjJqTGPBoYZYqjC
khxKaU7Ui6hSmc3mf9+tkXKASQO/cDTu7AKFm/W3X/BX+kjGlxDuIfViEYzomZG2
ML3rwbcP63NZhPXVW9VZuLjKCmcSOUfbLrSqhDTxT5jHCj6ZXLzueJObcVLCq04c
suSMfCN91eQRXvNofeb9EzMDJApauoMC/QO6vS9PMkr42XBkqoUO3+YqA4Ej9j2o
iA7iFddJjYvfSoVV4qw5hkX+pdDv3ejkdhM6ZjLWGr0WSUvfubuB
-----END CERTIFICATE-----
Generated at Sat Sep 26 23:49:46 2026 by rpki-client