Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-xlA6fSD6PeuXNDQnPEGfaU1OCM.roa
File: 1-xlA6fSD6PeuXNDQnPEGfaU1OCM.roa (raw, json)
Hash identifier: 8rBeShmGJMDh4sAwHd1/shdbQ2l/AQhiF1fNhtL6iEA=
Subject key identifier: FB:19:40:E9:F4:83:E8:F7:AE:5C:D0:D0:9C:F1:06:7D:A5:35:38:23
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A162D3C1C69650879761237FF5605F09CA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-xlA6fSD6PeuXNDQnPEGfaU1OCM.roa
Signing time: Thu 22 Oct 2026 08:56:47 +0000
ROA not before: Thu 22 Oct 2026 08:56:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 185.206.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d3:c1:c6:96:50:87:97:61:23:7f:f5:60:5f:09:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 22 08:56:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fb1940e9f483e8f7ae5cd0d09cf1067da5353823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:e8:7f:64:1c:d9:e8:90:a3:4d:9c:3a:b6:
e0:97:f2:3e:16:61:8b:39:b3:77:20:4d:34:8f:6a:
7b:0f:e7:80:53:40:e5:26:3b:df:61:b5:44:dc:c5:
2c:6a:e2:56:1a:c3:c6:d6:b4:21:9f:59:81:52:2c:
5d:93:71:83:94:24:5e:a8:7e:29:78:88:83:fc:5b:
6a:b2:39:f3:7a:73:09:41:90:35:a8:a5:cd:1b:3d:
ae:b1:37:ff:a5:c1:42:a1:10:b1:50:2a:c1:85:f2:
21:72:85:51:3a:38:1a:90:4f:9c:6e:5e:19:d9:18:
b8:2b:3c:d4:c3:04:dc:4b:bb:32:35:05:7d:48:e0:
49:4f:28:5a:df:49:ce:e9:d6:b3:38:88:48:a2:19:
41:a6:18:5b:a7:a6:bd:f2:18:40:28:10:78:bb:cd:
6d:ee:d6:7c:ef:a5:a0:e6:e9:2e:4d:87:bc:8e:d0:
22:cb:ea:7b:89:6e:f2:2c:6c:78:b8:28:e8:7d:0e:
d5:e6:0c:a3:c2:32:3c:48:e0:03:59:b6:72:2e:10:
b7:01:d7:b5:19:a1:f3:91:93:bb:e6:21:42:67:2f:
5f:54:e9:1c:61:22:77:c2:be:a0:19:fa:f1:b2:4a:
4f:57:79:7d:5f:e3:4d:43:2d:d5:ed:65:9f:59:59:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:19:40:E9:F4:83:E8:F7:AE:5C:D0:D0:9C:F1:06:7D:A5:35:38:23
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-xlA6fSD6PeuXNDQnPEGfaU1OCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.251.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:9e:45:dd:47:8d:95:95:19:e6:e8:cd:66:ce:f6:72:b7:dc:
db:9a:02:d9:0a:33:9a:c4:a9:0b:fa:32:4d:3c:4c:77:d9:7e:
68:90:f0:03:11:63:71:cd:f6:39:68:09:ab:d5:0d:28:36:27:
30:f7:50:75:59:68:57:9f:4e:09:d4:a5:28:70:c3:5c:5a:ad:
b6:6b:5f:fd:82:ab:2d:d5:7d:33:03:f6:7b:2d:4b:75:45:bc:
ae:bf:07:13:8b:ed:74:f4:46:b8:16:b9:05:6c:dc:4e:32:17:
08:24:41:d3:83:f6:8d:17:5f:4d:a3:d3:ac:33:a2:d4:5d:fa:
eb:1c:8b:17:a4:3b:54:40:e5:30:35:0c:ba:cb:30:0d:aa:28:
f2:14:ca:db:1c:21:e4:d5:47:74:d0:d7:9d:0e:ad:24:0e:a3:
84:77:e3:ed:aa:38:89:ae:0d:60:ca:7e:e1:67:80:4c:f6:6c:
f5:ff:8b:53:df:ac:75:41:f4:ea:fb:97:a6:e3:00:64:74:bb:
8f:dd:56:6d:81:7e:53:1f:27:56:b7:51:81:59:24:96:4a:5d:
a7:71:f4:73:ed:c8:70:c7:f6:03:f0:79:58:0b:bf:7d:69:fd:
d3:a2:9a:05:0c:92:a4:ec:08:bd:70:f4:1b:c0:53:75:13:55:
62:36:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:38:43 2026 by rpki-client