Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Y0jZx743GyoMzZNzU5VGTRnswRg.roa
File: Y0jZx743GyoMzZNzU5VGTRnswRg.roa (raw, json)
Hash identifier: RHXIX9rEY+STGPUXvgL5pKjGOLhLj4Xtt7wUts824hQ=
Subject key identifier: 63:48:D9:C7:BE:37:1B:2A:0C:CD:93:73:53:95:46:4D:19:EC:C1:18
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A141C3E50157937C71AE95FEF02CDEC573
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Y0jZx743GyoMzZNzU5VGTRnswRg.roa
Signing time: Thu 15 Oct 2026 22:51:59 +0000
ROA not before: Thu 15 Oct 2026 22:51:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219054
IP address blocks: 185.177.76.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:c3:e5:01:57:93:7c:71:ae:95:fe:f0:2c:de:c5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 15 22:51:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6348d9c7be371b2a0ccd93735395464d19ecc118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:9d:02:d7:6a:0c:a1:81:b2:c3:f1:6e:8a:
3f:3d:34:99:a2:95:13:22:11:b0:53:d1:5e:e3:d5:
ce:bd:33:f0:57:24:d5:e0:17:f5:4f:25:8c:a7:4a:
b6:6d:59:4c:85:a2:10:b6:6e:3d:ad:fd:5e:27:91:
f7:be:0e:9d:a6:a8:11:c1:57:c3:4c:b7:3c:cd:8c:
c1:0d:61:5e:ff:7c:4b:c9:c1:99:b6:74:18:82:26:
b1:2a:90:bc:2c:e5:3e:26:ab:a8:92:d4:b8:20:bf:
21:26:ea:7e:26:df:87:aa:03:1a:93:27:04:14:67:
73:ac:52:7e:1e:c3:e3:52:76:f7:74:15:89:87:5e:
45:d2:10:1d:d9:78:1d:75:a1:7d:b8:f2:fc:4d:1c:
e9:fe:bf:ad:a3:68:bc:cd:f6:e6:b8:5c:33:d0:a1:
2e:09:3b:bb:2d:d9:6e:d3:e3:f2:a9:8c:91:d3:4c:
48:ee:15:82:5f:c1:22:8e:19:4b:70:2d:20:43:bc:
0b:66:55:3c:6a:a2:be:57:20:40:dc:a1:fc:20:ae:
87:ae:33:cc:ce:b6:0d:7e:ad:3a:ff:03:3c:d8:28:
00:2f:d3:9a:d0:61:e3:0a:0f:89:a6:99:79:43:c5:
60:d2:20:38:36:26:7e:d3:45:d1:56:4e:9a:39:4f:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:D9:C7:BE:37:1B:2A:0C:CD:93:73:53:95:46:4D:19:EC:C1:18
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Y0jZx743GyoMzZNzU5VGTRnswRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.76.0/24
193.160.68.0/24
194.104.5.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2c:37:cf:07:df:f2:b0:96:db:b3:77:02:a3:3b:fe:e3:ef:
d4:8e:db:58:63:d4:0b:c0:c4:ca:14:22:63:49:9a:e3:bf:f0:
e7:34:94:8e:9c:c8:a8:e2:45:9a:fb:e0:5b:17:2b:71:93:25:
c8:d9:b7:80:cf:71:9c:3d:c1:90:39:a1:42:af:db:f4:c9:f4:
7b:71:67:a2:2f:26:61:45:fe:76:36:43:3a:e1:9c:84:e9:02:
7e:28:4f:aa:91:1a:ff:1d:85:55:f5:15:ed:b1:63:f8:4a:b9:
37:01:9a:56:a1:1c:e8:76:d4:e2:93:12:7c:ce:45:07:9f:7c:
3f:77:b7:80:ec:b3:9b:ab:b1:69:3b:2c:46:d6:f0:8a:43:4a:
e8:49:7b:62:d6:0e:a9:9b:52:d4:dc:c1:0b:40:f6:c4:9e:9a:
8c:8d:e8:de:0b:97:5a:08:bc:cd:66:34:6e:d5:d0:db:e1:a9:
5d:5d:c4:ee:da:a7:71:45:3c:69:5a:27:f2:07:a6:26:db:28:
b2:53:8f:4d:62:fd:59:b8:8a:09:97:db:5f:41:15:8c:3a:0c:
0f:59:3c:a7:86:d6:97:aa:fc:20:2d:73:81:40:29:bb:4c:df:
b8:4f:84:cb:a5:27:dd:da:e8:27:56:c8:51:86:73:35:0b:ef:
84:f1:cb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:14 2026 by rpki-client