Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/8NdqBmgn_snhyOHo767cqhVhHYw.roa
File: 8NdqBmgn_snhyOHo767cqhVhHYw.roa (raw, json)
Hash identifier: niGIMu/QwnoesASnsODd5kigH3O271gx/aD2mgYnWzQ=
Subject key identifier: F0:D7:6A:06:68:27:FE:C9:E1:C8:E1:E8:EF:AE:DC:AA:15:61:1D:8C
Certificate issuer: /CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Certificate serial: 01A15DF81BD021C8800845870DA8006FD3D7
Authority key identifier: 60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/8NdqBmgn_snhyOHo767cqhVhHYw.roa
Signing time: Wed 21 Oct 2026 10:18:23 +0000
ROA not before: Wed 21 Oct 2026 10:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198651
IP address blocks: 185.207.32.0/24 maxlen: 24
185.207.33.0/24 maxlen: 24
185.207.34.0/24 maxlen: 24
185.207.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:f8:1b:d0:21:c8:80:08:45:87:0d:a8:00:6f:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Validity
Not Before: Oct 21 10:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0d76a066827fec9e1c8e1e8efaedcaa15611d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:48:cb:7e:67:8a:bb:87:30:ec:b3:7c:c0:
07:4c:fc:f0:0c:f9:8b:b2:54:7f:2e:3b:a8:a9:ea:
d2:6e:d1:da:56:b2:9d:b1:ae:66:a8:41:d6:81:33:
19:0a:ab:49:33:94:51:b7:72:27:1c:5c:4b:64:9d:
cd:a1:21:bf:65:8c:71:79:99:f1:9d:d6:80:42:d3:
d9:16:49:46:ea:fd:44:c3:8d:ba:98:e2:15:6f:57:
c8:88:a7:5b:2d:7d:70:17:f8:25:23:e3:ff:ac:0d:
a2:9d:ae:8c:25:2a:96:b8:36:c3:27:53:f1:05:da:
84:ce:cc:25:da:29:a2:f4:5e:6e:c5:6a:84:70:a0:
cb:3f:a5:36:ee:18:66:72:31:74:07:c9:24:e3:2a:
69:0f:cd:ed:c7:ff:d4:6b:13:ae:2b:d4:83:9a:dd:
93:f8:f4:39:95:3f:d1:e9:a7:81:0e:c9:39:24:05:
f8:b2:ef:6d:f9:5e:c6:19:24:e1:e3:69:e6:2a:ed:
6e:03:dc:66:0b:f1:c1:6d:ba:88:3a:ff:65:e3:3e:
e2:1b:a7:db:c3:c1:24:d6:c6:29:19:02:31:dc:d8:
dc:73:cf:79:c1:7f:b6:c0:99:15:5e:dd:9c:29:e2:
ac:0b:2d:b4:e9:57:10:52:8a:58:59:34:67:7c:ef:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D7:6A:06:68:27:FE:C9:E1:C8:E1:E8:EF:AE:DC:AA:15:61:1D:8C
X509v3 Authority Key Identifier:
keyid:60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/8NdqBmgn_snhyOHo767cqhVhHYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:1f:96:b1:62:81:67:34:0d:9c:74:e2:4b:8a:fa:d9:51:03:
4f:0a:28:4b:b4:4d:04:10:a8:78:e0:93:82:4f:a2:24:2d:f9:
c1:99:50:3e:13:8b:54:00:5f:27:c8:26:12:0b:3e:1b:4c:6a:
a0:51:76:11:39:90:18:69:48:b0:87:cd:dc:6f:8b:39:46:34:
23:88:b6:00:9b:77:da:3c:dd:d9:67:ce:78:b8:6c:9e:3d:ab:
52:5e:a1:53:18:71:ce:4c:cd:60:86:37:74:1c:37:df:61:55:
de:28:f9:9d:ee:51:1b:9b:9f:e4:c0:c5:58:e1:12:b0:08:cc:
54:b5:90:62:fd:89:e1:94:75:09:6c:4c:d8:f4:e4:39:c1:bc:
a0:a5:ca:61:ec:0f:22:8e:b2:02:b1:79:cd:d7:44:91:ef:eb:
5d:89:cc:64:cb:2a:b2:ef:19:a9:fe:d1:9d:61:c3:d6:54:98:
df:aa:52:ac:bb:15:57:e3:63:50:fd:a2:f0:79:cc:72:dd:ec:
f1:b0:64:90:20:01:79:23:ba:3f:0d:af:8f:eb:00:e7:74:9f:
94:b7:c9:fc:53:bb:ba:da:cc:a8:7d:05:ce:f9:ae:83:d9:7e:
4c:09:c6:53:b9:67:41:ae:c3:33:fd:08:71:ef:6b:a9:f3:3e:
74:27:fa:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFd+BvQIciACEWHDagAb9PXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjNiNGE3ZGFkZGRkZjkzYmI4MWFjYzhhYjUyY2Q1ZjQ4
N2RmNDkwHhcNMjYxMDIxMTAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGQ3NmEwNjY4MjdmZWM5ZTFjOGUxZThlZmFlZGNhYTE1NjExZDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0RIy35niruHMOyzfMAHTPzwDPmL
slR/LjuoqerSbtHaVrKdsa5mqEHWgTMZCqtJM5RRt3InHFxLZJ3NoSG/ZYxxeZnx
ndaAQtPZFklG6v1Ew426mOIVb1fIiKdbLX1wF/glI+P/rA2ina6MJSqWuDbDJ1Px
BdqEzswl2imi9F5uxWqEcKDLP6U27hhmcjF0B8kk4yppD83tx//UaxOuK9SDmt2T
+PQ5lT/R6aeBDsk5JAX4su9t+V7GGSTh42nmKu1uA9xmC/HBbbqIOv9l4z7iG6fb
w8Ek1sYpGQIx3Njcc895wX+2wJkVXt2cKeKsCy206VcQUopYWTRnfO/FLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPDXagZoJ/7J4cjh6O+u3KoVYR2MMB8GA1UdIwQY
MBaAFGCztKfa3d35O7gazIq1LNX0h99JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxPMHA5cmQzZms3dUJyTWlyVXMxZlNIMzBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWVjNTgtZTk5Ni00M2U1LWIyOTct
MzM0NWFiY2M3NjNjLzEvOE5kcUJtZ25fc25oeU9Ibzc2N2NxaFZoSFl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWVjNTgtZTk5Ni00M2U1LWIyOTctMzM0NWFiY2M3NjNj
LzEvWUxPMHA5cmQzZms3dUJyTWlyVXMxZlNIMzBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuc8gMA0G
CSqGSIb3DQEBCwUAA4IBAQB+H5axYoFnNA2cdOJLivrZUQNPCihLtE0EEKh44JOC
T6IkLfnBmVA+E4tUAF8nyCYSCz4bTGqgUXYROZAYaUiwh83cb4s5RjQjiLYAm3fa
PN3ZZ854uGyePatSXqFTGHHOTM1ghjd0HDffYVXeKPmd7lEbm5/kwMVY4RKwCMxU
tZBi/YnhlHUJbEzY9OQ5wbygpcph7A8ijrICsXnN10SR7+tdicxkyyqy7xmp/tGd
YcPWVJjfqlKsuxVX42NQ/aLwecxy3ezxsGSQIAF5I7o/Da+P6wDndJ+Ut8n8U7u6
2syofQXO+a6D2X5MCcZTuWdBrsMz/Qhx72up8z50J/qL
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:18 2026 by rpki-client