Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0b4jsOQ72T-bQ96BpkCz_f3RZIk.roa
File: 0b4jsOQ72T-bQ96BpkCz_f3RZIk.roa (raw, json)
Hash identifier: kxknVA/SVFYVRzQ0cTX3Ol9D3BfeJ0ZImlyoJ//iMzM=
Subject key identifier: D1:BE:23:B0:E4:3B:D9:3F:9B:43:DE:81:A6:40:B3:FD:FD:D1:64:89
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1395462AAB610AFA20753D79247935004
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0b4jsOQ72T-bQ96BpkCz_f3RZIk.roa
Signing time: Wed 14 Oct 2026 07:33:13 +0000
ROA not before: Wed 14 Oct 2026 07:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200088
IP address blocks: 185.226.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:54:62:aa:b6:10:af:a2:07:53:d7:92:47:93:50:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 14 07:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1be23b0e43bd93f9b43de81a640b3fdfdd16489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:57:60:e9:f6:8f:9d:19:87:94:8a:69:13:
75:be:3f:07:2d:a3:1e:70:35:87:59:76:7f:74:d5:
9f:af:6d:29:5b:59:9d:ba:0e:3f:24:88:6a:38:db:
45:67:a6:07:ca:d2:7f:80:9f:96:0c:ba:2a:1a:8b:
e3:bc:18:f3:34:af:10:8b:51:01:47:8e:85:19:13:
ca:7f:4c:fc:38:a1:f6:52:02:83:6f:6a:54:61:94:
bb:49:f0:d6:46:9a:14:70:47:20:6c:3b:dc:0d:42:
b4:a9:ac:84:1a:2c:f2:19:01:f0:0e:f5:90:d9:23:
44:1e:64:99:f6:9e:e1:1c:72:4b:02:7b:c1:26:0e:
ce:de:3d:72:0d:c8:12:a6:e2:7e:38:09:b8:0f:88:
25:ff:12:cd:a2:9a:74:53:94:f8:cd:db:c9:e1:a5:
18:3f:77:d5:ef:9e:32:35:52:81:ca:38:50:03:4f:
e0:7d:27:4d:20:1b:00:f2:ea:d8:e5:a2:9e:0c:8b:
93:36:39:fc:ce:57:ca:1a:00:7f:30:2f:ce:6f:25:
b8:52:4e:2c:9a:d5:7a:67:f6:a6:7e:ff:f9:52:f9:
0c:03:71:40:ca:56:16:95:41:9d:81:fc:5a:a3:52:
f7:db:af:46:d2:17:2c:77:80:27:f1:78:af:aa:77:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:BE:23:B0:E4:3B:D9:3F:9B:43:DE:81:A6:40:B3:FD:FD:D1:64:89
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/0b4jsOQ72T-bQ96BpkCz_f3RZIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.106.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0a:36:93:ab:6f:1d:e9:ba:02:8b:52:35:9d:d4:5f:8d:25:
19:1a:d5:0b:66:db:32:91:1b:36:94:03:4e:9b:37:42:05:21:
da:87:a4:0f:c1:c9:7a:55:da:62:e6:ee:5e:16:1f:fd:77:a0:
7f:79:6c:cb:8d:4f:d1:64:29:d1:1b:bd:e9:91:be:77:fa:d8:
2c:a1:c3:00:cd:ba:a2:4f:80:7c:dd:40:52:c1:ee:df:63:bd:
aa:08:22:0c:26:ec:f2:a5:a7:17:da:62:05:98:b5:74:ed:cb:
f8:19:11:3d:71:46:0e:0f:0c:e1:f6:c9:85:a6:c7:77:c3:cb:
98:d3:95:bf:f8:d5:8b:cb:81:e9:a0:ed:de:40:e9:7d:89:bb:
b4:bc:19:fa:61:ae:bf:7f:1b:60:d4:ab:6b:a3:79:39:71:b3:
84:57:aa:e7:86:72:5b:f0:16:61:82:c9:d7:96:27:75:e6:e0:
4e:8e:3b:b8:6c:b0:dc:8d:8a:d0:70:e6:4a:e2:60:ca:b7:f1:
5f:43:e7:6d:9f:18:5a:7b:3b:0b:6e:fc:dd:66:bf:fd:e8:21:
59:39:3e:7d:14:6b:d0:d6:c2:75:12:ac:4d:44:95:f3:fb:46:
6f:40:9b:8e:36:af:8b:8f:4c:71:e6:d5:3d:9d:9c:ad:de:e6:
97:72:30:a6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE5VGKqthCvogdT15JHk1AEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDE0MDczMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWJlMjNiMGU0M2JkOTNmOWI0M2RlODFhNjQwYjNmZGZkZDE2NDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q1XYOn2j50Zh5SKaRN1vj8HLaMe
cDWHWXZ/dNWfr20pW1mdug4/JIhqONtFZ6YHytJ/gJ+WDLoqGovjvBjzNK8Qi1EB
R46FGRPKf0z8OKH2UgKDb2pUYZS7SfDWRpoUcEcgbDvcDUK0qayEGizyGQHwDvWQ
2SNEHmSZ9p7hHHJLAnvBJg7O3j1yDcgSpuJ+OAm4D4gl/xLNopp0U5T4zdvJ4aUY
P3fV754yNVKByjhQA0/gfSdNIBsA8urY5aKeDIuTNjn8zlfKGgB/MC/ObyW4Uk4s
mtV6Z/amfv/5UvkMA3FAylYWlUGdgfxao1L3269G0hcsd4An8XivqnfzlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNG+I7DkO9k/m0PegaZAs/390WSJMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvMGI0anNPUTcyVC1iUTk2QnBrQ3pfZjNSWklrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJqMA0G
CSqGSIb3DQEBCwUAA4IBAQBKCjaTq28d6boCi1I1ndRfjSUZGtULZtsykRs2lANO
mzdCBSHah6QPwcl6Vdpi5u5eFh/9d6B/eWzLjU/RZCnRG73pkb53+tgsocMAzbqi
T4B83UBSwe7fY72qCCIMJuzypacX2mIFmLV07cv4GRE9cUYODwzh9smFpsd3w8uY
05W/+NWLy4HpoO3eQOl9ibu0vBn6Ya6/fxtg1Ktro3k5cbOEV6rnhnJb8BZhgsnX
lid15uBOjju4bLDcjYrQcOZK4mDKt/FfQ+dtnxhaezsLbvzdZr/96CFZOT59FGvQ
1sJ1EqxNRJXz+0ZvQJuONq+Lj0xx5tU9nZyt3uaXcjCm
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:22 2026 by rpki-client