Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8gVXdvQElqgzixHdMXV_JPNAshA.roa
File: 8gVXdvQElqgzixHdMXV_JPNAshA.roa (raw, json)
Hash identifier: cEBxHGjCkFREzJbcaZTI7rZBeW+YW5kmtJr+vZgw/tE=
Subject key identifier: F2:05:57:76:F4:04:96:A8:33:8B:11:DD:31:75:7F:24:F3:40:B2:10
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E4A03198B8669D475C5AD547C7EE73F1E
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8gVXdvQElqgzixHdMXV_JPNAshA.roa
Signing time: Thu 21 May 2026 10:09:37 +0000
ROA not before: Thu 21 May 2026 10:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 185.226.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 18:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4a:03:19:8b:86:69:d4:75:c5:ad:54:7c:7e:e7:3f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 21 10:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2055776f40496a8338b11dd31757f24f340b210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ed:9b:18:09:98:53:51:37:87:90:20:c1:95:
64:d4:71:51:98:22:c6:ee:7e:d0:fa:ce:13:16:fa:
bb:75:63:4f:c4:b2:ba:cf:8d:d3:37:e8:d0:19:55:
ae:28:e3:74:77:1c:f0:fc:ae:7c:c0:cd:22:3b:c9:
20:9a:73:c1:0f:6d:c6:ae:ae:e3:af:b3:42:ad:94:
88:a6:ed:62:7f:f5:54:d7:4e:9d:cb:04:19:f8:95:
ef:cb:d7:2e:65:23:0d:ad:20:f0:fe:d5:11:ab:c4:
5e:b1:45:90:2a:07:37:e3:a2:11:ed:d9:09:69:05:
9f:ac:10:d8:03:b8:85:92:b7:67:87:8a:fa:3b:17:
10:ce:b7:81:37:82:72:a5:a2:72:47:21:ac:4c:00:
9f:b1:7f:48:76:e9:86:f0:7d:76:d1:30:2d:ac:2f:
d5:eb:b2:a5:ab:9a:84:35:4e:66:c5:2f:af:c7:1b:
5b:82:a0:22:e0:1e:3f:08:75:8c:3a:8e:b5:68:cd:
2b:eb:0c:2d:6d:6a:f4:c5:c3:2c:2a:57:82:85:1f:
65:d0:9a:7b:ec:cb:11:a6:9c:04:19:85:23:05:4d:
a0:1c:03:ba:4e:c7:db:b6:d4:7c:48:3e:c6:b0:5f:
05:bb:0b:81:96:f8:f4:53:33:a7:7d:e7:4d:3b:3d:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:05:57:76:F4:04:96:A8:33:8B:11:DD:31:75:7F:24:F3:40:B2:10
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/8gVXdvQElqgzixHdMXV_JPNAshA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.105.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a2:56:bc:d3:d6:b2:13:84:d0:42:cd:19:04:0b:95:1d:6d:
95:13:c4:f3:5a:9f:71:8e:73:ac:f4:0f:a2:75:63:33:56:ae:
7e:d8:54:34:37:b2:ec:f9:fd:33:4f:17:51:c8:0a:21:01:63:
1c:24:16:f1:62:35:ac:bb:c1:2b:c0:37:15:e5:2e:f4:b5:b2:
ec:86:25:24:e0:05:0a:e7:1d:74:50:6a:cf:30:98:ad:21:7a:
d4:f7:86:5c:69:b1:84:46:97:75:70:80:32:fa:b8:63:95:00:
90:f4:a4:ee:93:63:f8:69:5c:2e:b4:e2:bc:7d:d1:18:bc:43:
31:66:e0:d5:b9:f0:7f:a1:90:12:a8:0e:a7:00:f2:a6:f6:5b:
18:e1:3b:59:16:24:4e:70:22:5c:20:dd:06:4a:77:94:74:09:
5b:8c:50:1c:ce:64:36:7d:cb:9f:6d:75:5e:30:b8:fe:6f:be:
80:d1:dc:f3:f9:e3:d2:31:4c:4e:79:57:12:d9:ba:f5:1b:ba:
72:82:a9:30:1a:87:b3:16:c0:41:d8:7c:89:d4:06:57:d0:ed:
5a:f3:b2:44:95:af:b4:86:34:8f:44:f2:5f:df:00:0f:ef:a4:
00:ad:72:ee:96:3a:79:e8:44:62:d0:6e:3b:5c:ea:a4:e6:f4:
8a:fb:7f:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5KAxmLhmnUdcWtVHx+5z8eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwNTIxMTAwOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjA1NTc3NmY0MDQ5NmE4MzM4YjExZGQzMTc1N2YyNGYzNDBiMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2O2bGAmYU1E3h5AgwZVk1HFRmCLG
7n7Q+s4TFvq7dWNPxLK6z43TN+jQGVWuKON0dxzw/K58wM0iO8kgmnPBD23Grq7j
r7NCrZSIpu1if/VU106dywQZ+JXvy9cuZSMNrSDw/tURq8ResUWQKgc346IR7dkJ
aQWfrBDYA7iFkrdnh4r6OxcQzreBN4JypaJyRyGsTACfsX9IdumG8H120TAtrC/V
67Klq5qENU5mxS+vxxtbgqAi4B4/CHWMOo61aM0r6wwtbWr0xcMsKleChR9l0Jp7
7MsRppwEGYUjBU2gHAO6TsfbttR8SD7GsF8FuwuBlvj0UzOnfedNOz1vBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPIFV3b0BJaoM4sR3TF1fyTzQLIQMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvOGdWWGR2UUVscWd6aXhIZE1YVl9KUE5Bc2hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueJpMA0G
CSqGSIb3DQEBCwUAA4IBAQB1ola809ayE4TQQs0ZBAuVHW2VE8TzWp9xjnOs9A+i
dWMzVq5+2FQ0N7Ls+f0zTxdRyAohAWMcJBbxYjWsu8ErwDcV5S70tbLshiUk4AUK
5x10UGrPMJitIXrU94ZcabGERpd1cIAy+rhjlQCQ9KTuk2P4aVwutOK8fdEYvEMx
ZuDVufB/oZASqA6nAPKm9lsY4TtZFiROcCJcIN0GSneUdAlbjFAczmQ2fcufbXVe
MLj+b76A0dzz+ePSMUxOeVcS2br1G7pygqkwGoezFsBB2HyJ1AZX0O1a87JEla+0
hjSPRPJf3wAP76QArXLuljp56ERi0G47XOqk5vSK+39M
-----END CERTIFICATE-----
Generated at Mon May 25 01:52:33 2026 by rpki-client