Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/d0sqjC0DnA7TPG86TXH_6VUnLrw.roa
File: d0sqjC0DnA7TPG86TXH_6VUnLrw.roa (raw, json)
Hash identifier: dAXlo04GPkYNTgbHXlkPxOYRVbw/cGshX84MajMnTIo=
Subject key identifier: 77:4B:2A:8C:2D:03:9C:0E:D3:3C:6F:3A:4D:71:FF:E9:55:27:2E:BC
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 019CB7DCF6FA877FABD54CB3B0B44401D6CB
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/d0sqjC0DnA7TPG86TXH_6VUnLrw.roa
Signing time: Wed 04 Mar 2026 08:00:37 +0000
ROA not before: Wed 04 Mar 2026 08:00:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208427
IP address blocks: 185.231.244.0/24 maxlen: 24
185.231.245.0/24 maxlen: 24
185.231.246.0/23 maxlen: 23
194.147.114.0/24 maxlen: 24
2a0c:9300::/29 maxlen: 29
2a0c:9300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:dc:f6:fa:87:7f:ab:d5:4c:b3:b0:b4:44:01:d6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Mar 4 08:00:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=774b2a8c2d039c0ed33c6f3a4d71ffe955272ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:f1:1f:e5:e3:1a:ef:be:db:ff:40:9c:3a:
80:8f:0a:28:93:6a:94:0d:e3:59:92:3f:90:81:82:
b7:f0:38:b7:f8:e2:52:04:2e:c4:81:8a:12:5d:a8:
9e:a1:7c:c7:91:33:7e:46:32:9d:54:9d:2a:7c:2c:
e9:1e:e0:aa:dd:a6:26:39:e0:78:f3:5f:f8:8a:6d:
ee:07:87:39:f7:8e:b8:5a:c6:fa:d0:27:61:60:d8:
f0:b7:c3:0c:8b:70:a9:ee:cd:f3:c4:a7:c4:6b:b9:
33:a9:fa:38:b5:2b:13:06:e9:92:52:cd:81:4f:27:
8d:3e:c8:87:a5:55:0c:f8:75:ba:fe:76:e1:ce:05:
cd:bc:1b:ff:f0:b0:43:3e:85:c7:a9:02:71:7e:8d:
8b:21:b1:d6:f8:b3:27:3c:71:6e:9f:b0:88:01:de:
7b:cc:38:cc:94:47:c2:0c:bc:0d:35:9c:a5:b8:97:
0e:68:3a:de:5e:e1:8b:f6:5c:d5:b0:20:d4:3a:53:
c0:9a:56:20:79:b6:3a:c4:f7:df:e0:98:31:e8:38:
27:8f:74:af:ae:67:15:97:e3:a7:6e:5e:27:f8:44:
95:19:ca:36:94:22:b5:f7:df:b3:a4:b6:0d:05:e4:
66:9b:2c:54:07:3b:2d:b4:91:40:83:cd:d6:79:6a:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:4B:2A:8C:2D:03:9C:0E:D3:3C:6F:3A:4D:71:FF:E9:55:27:2E:BC
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/d0sqjC0DnA7TPG86TXH_6VUnLrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/24
IPv6:
2a0c:9300::/29
Signature Algorithm: sha256WithRSAEncryption
13:fd:54:20:4c:5c:3a:ba:ac:40:60:4e:69:f8:3b:53:3d:85:
fa:f0:c0:06:ab:59:6a:f5:4d:26:da:a5:61:d4:e0:ab:b9:bf:
a3:33:f6:d3:41:02:13:d3:72:0d:99:6e:1b:11:6f:15:cc:04:
61:7d:59:32:d3:59:8f:31:70:0a:b3:9e:0d:61:ec:24:92:c3:
a6:d4:ae:9c:18:d7:39:0d:17:24:76:0b:bd:28:6b:7e:5c:84:
a9:24:70:66:89:9e:f4:43:b9:13:b4:ca:03:50:d7:e3:1e:c4:
c0:0c:04:46:94:7f:01:bf:17:3c:c3:1d:01:99:d5:85:dd:a5:
94:99:7b:8d:4b:df:35:c9:41:3d:73:44:e4:a8:c1:00:31:61:
06:96:06:c7:c1:18:ae:35:ac:a1:12:ff:16:93:28:be:32:b9:
83:ae:30:48:73:73:60:15:39:50:80:21:9e:38:40:a8:b2:dd:
6f:f7:b3:3a:a3:12:41:17:ed:b8:b1:63:41:3d:44:3b:26:30:
3e:72:05:61:0a:0f:81:2c:28:2e:9b:9d:6c:82:01:54:2f:70:
3a:e3:a5:4c:16:e3:6f:13:2f:f0:1a:e2:e4:3d:30:e3:a3:a8:
80:11:d7:57:9f:a8:37:f8:7a:70:1c:d4:70:b6:06:86:aa:bc:
5b:e1:eb:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:36:35 2026 by rpki-client