Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa
File: FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa (raw, json)
Hash identifier: E+Ndns34wiS59u4o367M86KWyuekLi03oafxk6qO++c=
Subject key identifier: 14:BD:94:6D:72:B2:79:92:F5:62:21:AB:04:59:F7:91:51:2C:83:15
Certificate issuer: /CN=613d625ed5507e480e4d43dc978e71e881e62227
Certificate serial: 019F2368BDE50E88FA8B0DCD901A23A46BAA
Authority key identifier: 61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.229.146.0/24 maxlen: 24
185.229.147.0/24 maxlen: 24
2a0d:d600::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.mft
rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bd:e5:0e:88:fa:8b:0d:cd:90:1a:23:a4:6b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613d625ed5507e480e4d43dc978e71e881e62227
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=14bd946d72b27992f56221ab0459f791512c8315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ad:02:64:47:da:c0:07:d7:97:e0:2c:30:ca:
9e:19:68:21:bb:a9:54:05:9c:58:47:2d:5e:93:e0:
0b:3f:34:67:bc:9e:1c:ee:36:9c:70:c1:80:65:57:
9f:73:08:dc:41:e6:9e:38:13:74:bc:d2:9a:2a:a7:
b0:09:9b:d2:ce:dd:1b:7a:b4:8e:1f:42:1b:fc:0e:
b7:74:56:6c:64:7e:cc:47:48:cc:91:39:64:d2:64:
04:d9:15:21:53:75:61:82:fe:4a:59:ed:04:db:a5:
03:c2:03:3c:2f:a6:85:cc:14:2c:74:0f:e8:26:8c:
95:ff:56:95:7b:c7:e8:a9:ff:5f:50:b9:60:a2:91:
5b:8d:29:d5:f4:ad:b8:e0:86:c0:2c:f5:b1:29:3c:
bc:11:5e:5e:84:d6:d0:c7:4d:8a:95:ee:e7:ed:06:
0b:f5:da:0c:80:9e:bf:32:b0:a4:54:89:bb:fe:81:
f2:87:20:e3:1e:e8:cb:3a:02:05:65:8d:e0:3a:0f:
67:52:60:89:99:96:d3:9e:ed:0b:da:be:c1:29:ff:
dd:a6:81:5d:b4:ad:c7:18:75:7d:e1:3d:6d:82:9c:
f8:53:fe:3f:eb:09:f6:20:c4:cf:20:9f:d6:f0:08:
e5:ee:b0:49:4b:f8:be:32:bc:75:6f:6f:fa:4c:98:
a9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:94:6D:72:B2:79:92:F5:62:21:AB:04:59:F7:91:51:2C:83:15
X509v3 Authority Key Identifier:
keyid:61:3D:62:5E:D5:50:7E:48:0E:4D:43:DC:97:8E:71:E8:81:E6:22:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1iXtVQfkgOTUPcl45x6IHmIic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/FL2UbXKyeZL1YiGrBFn3kVEsgxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/YT1iXtVQfkgOTUPcl45x6IHmIic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.146.0/23
IPv6:
2a0d:d600::/32
Signature Algorithm: sha256WithRSAEncryption
6d:10:47:58:cf:3e:e3:77:8f:c1:cc:5b:b1:df:a8:b7:33:6b:
cc:af:2c:58:a8:3d:33:56:9d:4d:55:72:7c:19:71:33:6e:c6:
ba:80:cc:6d:6a:9a:43:89:91:3e:50:27:5b:1a:8a:0d:68:c6:
9c:c7:b9:12:3e:0e:a0:54:ae:72:bf:c1:2b:a1:66:f8:67:48:
88:c4:ea:21:25:3b:09:99:af:1b:1c:fb:cd:c7:5d:7e:9e:dc:
93:31:9f:d0:d6:fd:c2:f1:f4:f4:12:33:2d:02:ee:2e:67:f7:
79:c7:f2:f1:68:de:22:7a:ac:a9:6e:ee:41:a9:4b:d3:1b:a0:
50:89:ab:99:ab:47:87:7e:01:51:77:e6:14:cc:f2:9b:79:50:
74:1a:fb:06:41:72:06:44:99:05:ae:81:a5:3a:78:fe:67:ce:
38:aa:d7:5b:fa:a8:8a:2b:86:b1:29:98:9b:fd:e1:e0:24:f2:
6e:42:67:1b:c5:30:5b:9d:d3:28:a1:bd:3d:03:bb:5c:7d:9d:
c1:f3:22:47:06:6e:f1:93:e5:8b:3a:54:da:c5:b8:a0:42:96:
ad:a0:4f:d0:fd:99:2a:07:b4:2c:d7:50:61:a5:8b:95:27:f1:
13:da:2a:6d:ff:1b:b1:c5:13:9a:4c:ef:23:46:88:d2:66:d1:
ee:08:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:46 2026 by rpki-client