Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ycUlDsWEhCLs0Gp5ZjxSD8d8IOI.roa
File: ycUlDsWEhCLs0Gp5ZjxSD8d8IOI.roa (raw, json)
Hash identifier: 82ES0fez9oMPh0JZm/HZY9Hf8hTT6G1rgiBdn6kP6wI=
Subject key identifier: C9:C5:25:0E:C5:84:84:22:EC:D0:6A:79:66:3C:52:0F:C7:7C:20:E2
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 01A159589511E55C2A273C7EF643CD2E465D
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ycUlDsWEhCLs0Gp5ZjxSD8d8IOI.roa
Signing time: Tue 20 Oct 2026 12:45:39 +0000
ROA not before: Tue 20 Oct 2026 12:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3262
IP address blocks: 185.192.183.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:58:95:11:e5:5c:2a:27:3c:7e:f6:43:cd:2e:46:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Oct 20 12:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9c5250ec5848422ecd06a79663c520fc77c20e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:34:6c:01:f0:d8:21:2a:87:8e:34:3f:bf:23:
13:c6:15:25:ec:09:cc:66:1f:2c:47:15:a6:34:7b:
72:96:40:17:fd:a4:56:c5:e6:5b:fc:6b:b8:8c:0c:
95:1b:f9:5b:c6:2c:7f:21:40:fb:9c:82:0a:13:f5:
74:de:24:bc:21:f2:12:af:d7:09:a1:fa:84:8b:2b:
11:56:f5:52:b4:92:64:5b:a0:e4:84:67:20:ac:22:
35:88:8d:03:a7:89:fd:af:11:7d:9f:3d:6d:8e:fd:
c0:17:10:a3:94:3b:96:71:9a:b4:a3:de:b3:61:a0:
8f:07:6c:81:28:92:ed:8e:b4:d1:8f:9e:c3:0c:0c:
73:ad:ca:21:20:3f:9b:8b:6e:0b:97:da:5f:86:73:
47:55:62:36:64:79:6c:6b:0c:fb:d9:3f:83:4c:8d:
ec:f9:32:c3:cb:48:21:e3:5e:66:34:a6:f7:bd:28:
33:5d:e0:09:ed:5b:48:cc:4a:7e:ab:32:6f:6c:67:
a0:22:a5:64:dc:85:fb:4e:ef:b2:0b:69:8f:65:6c:
fb:c1:96:d0:13:0d:fd:2a:b8:a8:94:da:42:ee:d1:
39:01:a0:98:1e:47:b8:62:60:fb:e8:99:8d:2d:d8:
1c:ba:bb:08:02:fe:d2:33:a8:3b:29:dd:3a:2b:9c:
9a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:25:0E:C5:84:84:22:EC:D0:6A:79:66:3C:52:0F:C7:7C:20:E2
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/ycUlDsWEhCLs0Gp5ZjxSD8d8IOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.183.0/24
185.194.24.0/24
185.219.216.0/23
185.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:47:b1:c9:a8:74:fd:d9:03:c0:a8:2f:e9:4d:17:73:7a:ea:
fe:6c:37:62:78:79:59:22:6f:c0:19:3b:f9:df:5b:ef:8e:f5:
da:fe:57:da:4f:ba:bc:d2:84:5e:43:29:3f:91:18:67:c4:d1:
57:4f:d7:60:4d:1a:e9:3d:40:d0:fc:ea:7d:2a:86:c7:28:31:
74:a7:24:9a:65:51:77:05:16:48:2e:65:3a:67:2e:a9:2a:f0:
37:c7:47:3c:fb:0f:3d:d2:56:7e:9c:48:0e:29:d9:7a:44:fb:
ef:27:16:31:d1:c9:65:1b:8b:af:85:85:61:94:0e:54:c7:2d:
e5:87:16:ab:fe:f0:4a:a1:a4:d3:fc:5d:f6:b6:ea:9a:d1:2a:
de:46:b5:ca:3a:c9:f9:9f:f1:52:bf:8b:71:2c:32:a7:22:f8:
40:b7:95:27:94:04:ca:ed:60:08:6f:92:b7:5f:7d:75:66:7e:
66:df:b6:23:08:31:00:92:87:c5:be:d9:3e:b5:4f:85:b5:87:
c6:5f:12:9a:55:ec:f5:02:96:85:16:1b:b7:67:1c:a9:bc:d2:
e0:51:1f:5c:8e:a7:6d:53:18:af:a6:7b:b4:d8:c3:48:93:84:
35:45:b0:51:76:09:b8:25:8a:69:10:66:15:73:a1:f0:0b:22:
19:30:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:57 2026 by rpki-client