Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6lQFO-4myq7dqTAukPuB8sMWmQ8.roa
File: 6lQFO-4myq7dqTAukPuB8sMWmQ8.roa (raw, json)
Hash identifier: 7zwGkFjyrOLXLUWSM7lsCx0IXXDTAQY7P5oi4kOleK4=
Subject key identifier: EA:54:05:3B:EE:26:CA:AE:DD:A9:30:2E:90:FB:81:F2:C3:16:99:0F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FDB4EAE8EFBADE902A2067F341585DDF7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6lQFO-4myq7dqTAukPuB8sMWmQ8.roa
Signing time: Fri 07 Aug 2026 08:19:54 +0000
ROA not before: Fri 07 Aug 2026 08:19:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153622
IP address blocks: 185.218.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:4e:ae:8e:fb:ad:e9:02:a2:06:7f:34:15:85:dd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 08:19:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea54053bee26caaedda9302e90fb81f2c316990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:62:0b:52:0a:86:f1:00:5b:fe:b3:d9:c9:
12:22:c4:64:a0:be:41:df:e2:a4:79:b5:e0:5d:79:
6a:97:b4:6f:5d:b7:d0:71:2c:a1:5d:76:64:95:63:
90:e0:96:f4:de:f7:18:66:10:b0:d0:6a:e1:9f:c5:
86:d2:2f:00:db:a7:27:4d:76:d7:35:82:cc:20:7b:
68:6c:93:bd:47:29:f3:b9:90:37:11:2e:b8:81:06:
48:6d:87:7a:48:cc:19:93:7f:ce:d4:9f:7e:ef:94:
b1:36:a4:7b:24:c5:91:4e:53:45:3f:38:c0:eb:b8:
22:05:e2:c2:52:38:37:52:98:8b:6f:83:ea:ea:5c:
65:b9:f4:0c:57:61:c6:6d:65:6d:7a:fe:1f:4f:07:
79:c2:8d:5e:fa:14:48:73:32:70:09:27:85:14:02:
f3:a0:15:56:4f:63:4d:f7:34:96:3d:1c:10:5a:76:
89:49:b0:4f:88:12:07:c8:7b:cb:98:d6:84:2b:87:
61:a8:0a:7a:60:41:db:cf:a7:48:5c:e8:65:ec:f3:
06:0f:fa:a0:47:05:31:c6:08:42:22:05:d6:73:9b:
65:e6:01:ff:b2:ea:18:e1:9f:c9:8f:fa:b6:21:92:
94:b9:06:06:7a:88:6b:34:09:f9:f0:69:50:25:7b:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:54:05:3B:EE:26:CA:AE:DD:A9:30:2E:90:FB:81:F2:C3:16:99:0F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/6lQFO-4myq7dqTAukPuB8sMWmQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.20.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:97:46:df:0a:86:22:35:ec:16:ad:46:aa:62:78:07:4f:71:
33:3d:b9:7a:4a:65:8a:0a:a7:b9:1e:71:2b:c5:b6:9d:a2:57:
37:ab:95:65:56:cf:dd:15:39:e9:bd:5d:80:76:82:1e:79:02:
10:93:c3:56:f2:9b:e7:f1:d8:d9:0c:5b:51:d1:08:5b:ac:e1:
23:55:ec:d4:25:00:be:ec:53:d2:60:4a:22:7f:89:0e:0b:34:
33:38:74:16:da:aa:25:08:58:32:ed:a8:6a:49:70:56:dd:36:
43:70:fa:63:00:15:73:10:60:05:d4:49:ee:af:4f:e3:09:96:
b9:ef:8b:b5:1e:d7:bb:55:4b:f5:cc:61:44:92:55:1a:50:49:
cc:9c:0d:46:2b:5f:b1:8f:fd:05:48:d9:90:87:d6:5a:42:89:
97:08:5a:1f:75:3e:68:7b:00:c8:6d:8b:49:d6:ba:8b:8b:33:
a1:8c:a5:58:f5:46:43:80:26:d3:3d:15:50:b8:6b:72:cb:03:
ab:aa:04:20:88:7d:0e:da:aa:4b:dd:b6:d6:a1:7e:4d:31:19:
78:25:33:19:d5:70:d0:d6:00:1b:34:9a:64:24:09:ed:67:1a:
8b:61:21:1e:10:4a:b0:ef:3f:b9:5b:18:30:dd:cb:ac:af:0b:
5c:a9:36:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 19:04:23 2026 by rpki-client