Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/Y4nISHAwAxtiYFC_jM0ArCQgUyg.roa
File: Y4nISHAwAxtiYFC_jM0ArCQgUyg.roa (raw, json)
Hash identifier: TUMvfhRMK+ynsPapA02++UengkOaTQAMJvbl6nz4clk=
Subject key identifier: 63:89:C8:48:70:30:03:1B:62:60:50:BF:8C:CD:00:AC:24:20:53:28
Certificate issuer: /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial: 019ED1D410360E5826DFAF3C521A424F0E86
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/Y4nISHAwAxtiYFC_jM0ArCQgUyg.roa
Signing time: Tue 16 Jun 2026 19:06:36 +0000
ROA not before: Tue 16 Jun 2026 19:06:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 185.134.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:d4:10:36:0e:58:26:df:af:3c:52:1a:42:4f:0e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Validity
Not Before: Jun 16 19:06:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6389c8487030031b626050bf8ccd00ac24205328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:6c:e5:e6:41:6c:f5:7f:7b:e4:c1:75:71:
ba:2b:1d:d9:c8:35:18:e9:4a:79:2e:47:cb:21:33:
f2:56:9c:7e:93:0d:e1:42:48:32:d1:3d:ef:91:f2:
5d:14:1e:14:ac:24:a1:db:00:d8:c1:ab:0d:ab:ab:
f0:b3:e3:ae:f3:31:91:cf:8c:72:3e:b6:65:aa:bd:
77:3b:51:63:51:25:ca:91:28:b3:25:79:a4:6d:7c:
6e:ff:e6:a1:f4:e1:49:d8:49:4e:fc:b8:d5:68:18:
bb:14:3b:34:1e:01:0a:12:a2:03:b2:20:c4:d2:01:
6c:f7:e9:1a:0b:1e:b3:62:8d:8a:03:65:ad:f3:9e:
7a:b9:3e:97:90:06:cb:06:3e:0e:25:10:47:8b:7c:
f0:1a:17:06:d7:ee:af:eb:24:e0:b3:4b:99:93:50:
63:f4:c0:43:56:07:7c:a8:7d:8e:02:97:67:a2:e1:
f6:99:2c:95:20:f0:e7:86:22:40:1b:f7:0e:13:a6:
20:94:82:e4:16:6b:2a:e2:bf:45:38:00:90:9b:c0:
a2:6e:7c:28:2d:27:98:13:a4:ce:42:aa:5f:53:8d:
f5:31:d5:f5:06:ae:4f:08:08:ae:2e:31:4c:32:93:
48:10:a4:71:88:f2:a6:08:75:6e:bf:dd:4e:83:d7:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:89:C8:48:70:30:03:1B:62:60:50:BF:8C:CD:00:AC:24:20:53:28
X509v3 Authority Key Identifier:
keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/Y4nISHAwAxtiYFC_jM0ArCQgUyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.106.0/24
Signature Algorithm: sha256WithRSAEncryption
84:6c:c7:81:e7:55:a4:19:98:a6:d7:dc:23:53:d3:9d:a2:45:
06:1d:6f:65:ea:75:de:d5:8f:a9:4f:71:b7:e4:bc:3f:73:7a:
2c:5e:c8:23:ff:e2:50:91:b2:9d:d6:c7:a3:08:dc:8a:fa:68:
e6:6d:7a:7b:fa:05:09:76:f9:a9:d2:70:00:2b:4c:5d:94:75:
63:e2:5d:98:31:41:6b:95:a4:12:22:c6:64:76:f9:78:f7:ba:
ef:be:50:b8:69:ab:3f:e9:32:39:6a:76:75:0c:97:23:25:9b:
8c:66:3d:e3:28:81:6a:e0:e4:94:de:6f:e1:da:b2:8d:f0:33:
03:b8:55:10:0e:a9:36:c7:04:e2:7b:fe:ec:49:a8:47:92:d9:
4d:e2:16:61:c9:ca:b4:0f:01:3c:29:4d:6f:c1:45:48:55:46:
98:fd:49:cf:d8:a1:b2:d3:49:58:35:c6:d6:31:04:27:0d:19:
86:37:6d:d5:89:10:ca:e8:8f:9f:da:6d:ac:06:47:f3:b5:1e:
ee:c7:83:ed:09:1f:65:d1:74:90:79:e4:4a:f1:82:f2:04:ce:
14:5c:6a:a6:c3:70:34:f1:c0:02:60:c4:5b:8b:c4:7d:1f:80:
2e:7f:34:22:a5:db:40:14:4c:5c:f4:45:de:93:48:38:42:fe:
a4:dd:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:12:03 2026 by rpki-client