Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3x7QW6LJsJiplRry_QzjWuXwjgw.roa
File: 3x7QW6LJsJiplRry_QzjWuXwjgw.roa (raw, json)
Hash identifier: PlqvxK2uBZeCrIMtvVEdhvmMdmD34fl2IrvYfC4xbgw=
Subject key identifier: DF:1E:D0:5B:A2:C9:B0:98:A9:95:1A:F2:FD:0C:E3:5A:E5:F0:8E:0C
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0AFFD4B265281FAFC58BD6BEBF7F2DBDD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3x7QW6LJsJiplRry_QzjWuXwjgw.roa
Signing time: Thu 17 Sep 2026 15:30:07 +0000
ROA not before: Thu 17 Sep 2026 15:30:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.108.205.0/24 maxlen: 24
185.206.250.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:fd:4b:26:52:81:fa:fc:58:bd:6b:eb:f7:f2:db:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 17 15:30:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df1ed05ba2c9b098a9951af2fd0ce35ae5f08e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:9c:a5:67:b5:06:57:c4:19:c5:f1:8a:1b:
30:9e:50:0f:55:fb:13:d0:3e:2e:bf:28:9d:47:b1:
e6:13:23:45:1c:53:bf:69:c5:d3:37:41:7e:8d:e6:
5a:2f:23:61:5a:d3:5a:9a:25:f1:b8:4e:0b:69:29:
5e:51:43:e9:51:e0:74:18:4a:10:d4:6e:fd:76:20:
74:0e:b0:6b:90:6e:21:c7:06:ec:41:08:83:88:20:
8e:03:22:b5:cf:8e:c0:1d:46:c1:99:4e:39:bd:b5:
e5:7d:8f:53:8c:19:8e:d6:c5:fe:ae:86:4d:51:a9:
66:8f:66:6a:e9:09:49:f8:5d:c5:1e:3a:a3:1d:38:
1d:82:28:53:c7:2f:80:d2:e6:38:7d:c9:fa:df:63:
bc:80:ed:ff:04:48:02:c8:84:66:3a:d6:0e:b7:bc:
1e:4a:1e:87:ea:2a:75:c5:73:52:cb:bf:25:57:60:
15:0d:b4:77:3a:1c:45:e9:ed:14:56:fb:78:cc:bb:
0c:45:2f:ed:b0:49:b5:b5:a7:a9:50:96:a5:cf:78:
1c:5f:a7:34:07:e2:a9:c8:54:df:6f:e4:e7:d3:a4:
23:e3:c3:de:7b:db:45:a4:13:07:27:5a:22:85:c2:
74:e3:90:cb:43:2e:9b:8e:0e:a5:8c:b8:4a:3a:ef:
22:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1E:D0:5B:A2:C9:B0:98:A9:95:1A:F2:FD:0C:E3:5A:E5:F0:8E:0C
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/3x7QW6LJsJiplRry_QzjWuXwjgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.205.0/24
185.206.250.0/24
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:fd:ab:6e:56:9b:fd:b9:d3:4d:64:ee:e7:b7:6d:b9:fb:c3:
6b:d9:2a:61:b4:12:b9:81:a3:f0:93:c6:c1:59:e7:64:9f:bf:
4a:38:d1:93:01:fc:d7:00:cb:02:83:e9:cf:96:75:b9:2d:51:
cf:ab:1c:ee:e0:43:4e:84:af:67:cf:fb:18:80:c3:83:98:80:
6d:fb:67:a2:1a:d1:14:21:dd:cc:d6:42:06:5d:a4:67:69:e1:
93:82:f2:67:57:5e:07:95:98:f6:df:3f:12:83:94:02:fc:9f:
ed:8c:62:be:dd:42:60:44:14:45:fc:15:4d:61:d6:b8:73:c2:
5c:4d:65:f1:fa:61:c0:74:7d:80:34:6f:de:3b:54:c7:07:79:
85:87:e5:99:35:c4:f4:ac:f0:8b:76:b7:ed:f3:56:2d:82:f3:
2a:e0:c2:06:a1:9e:ae:7f:fc:f7:eb:31:2d:8a:60:79:64:8c:
f6:9c:27:a7:c0:e0:1e:5e:1e:ca:e7:6a:d8:6e:97:60:ec:6c:
de:0a:0f:2f:0a:ed:5e:78:6d:8e:37:44:ac:21:2a:91:a4:7c:
c6:0e:ef:31:8b:cd:6c:da:15:e2:0b:23:fd:8d:99:53:0a:35:
5a:69:12:55:9a:53:fc:ef:8f:43:5f:79:33:8c:af:5d:b9:29:
cc:22:fe:ab
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaCv/UsmUoH6/Fi9a+v38tvdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwOTE3MTUzMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjFlZDA1YmEyYzliMDk4YTk5NTFhZjJmZDBjZTM1YWU1ZjA4ZTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOecpWe1BlfEGcXxihswnlAPVfsT
0D4uvyidR7HmEyNFHFO/acXTN0F+jeZaLyNhWtNamiXxuE4LaSleUUPpUeB0GEoQ
1G79diB0DrBrkG4hxwbsQQiDiCCOAyK1z47AHUbBmU45vbXlfY9TjBmO1sX+roZN
Ualmj2Zq6QlJ+F3FHjqjHTgdgihTxy+A0uY4fcn632O8gO3/BEgCyIRmOtYOt7we
Sh6H6ip1xXNSy78lV2AVDbR3OhxF6e0UVvt4zLsMRS/tsEm1taepUJalz3gcX6c0
B+KpyFTfb+Tn06Qj48Pee9tFpBMHJ1oihcJ045DLQy6bjg6ljLhKOu8i9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFN8e0FuiybCYqZUa8v0M41rl8I4MMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvM3g3UVc2TEpzSmlwbFJyeV9RempXdVh3amd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuWzNAwQA
uc76AwQAueEVMA0GCSqGSIb3DQEBCwUAA4IBAQBM/atuVpv9udNNZO7nt225+8Nr
2SphtBK5gaPwk8bBWedkn79KONGTAfzXAMsCg+nPlnW5LVHPqxzu4ENOhK9nz/sY
gMODmIBt+2eiGtEUId3M1kIGXaRnaeGTgvJnV14HlZj23z8Sg5QC/J/tjGK+3UJg
RBRF/BVNYda4c8JcTWXx+mHAdH2ANG/eO1THB3mFh+WZNcT0rPCLdrft81YtgvMq
4MIGoZ6uf/z36zEtimB5ZIz2nCenwOAeXh7K52rYbpdg7GzeCg8vCu1eeG2ON0Ss
ISqRpHzGDu8xi81s2hXiCyP9jZlTCjVaaRJVmlP8749DX3kzjK9duSnMIv6r
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:15:06 2026 by rpki-client