Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/98ZZFo980JP72f9yRUaJ9KME2BE.roa
File: 98ZZFo980JP72f9yRUaJ9KME2BE.roa (raw, json)
Hash identifier: 3DBKg10e6ZrtpqEHi09Vz2ANdygM9qITGGHPZ/tA1Zg=
Subject key identifier: F7:C6:59:16:8F:7C:D0:93:FB:D9:FF:72:45:46:89:F4:A3:04:D8:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A09F248CA2DF79D7EB6BCCA018457302EC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/98ZZFo980JP72f9yRUaJ9KME2BE.roa
Signing time: Mon 14 Sep 2026 08:59:27 +0000
ROA not before: Mon 14 Sep 2026 08:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.206.250.0/24 maxlen: 24
185.225.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:24:8c:a2:df:79:d7:eb:6b:cc:a0:18:45:73:02:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 14 08:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7c659168f7cd093fbd9ff72454689f4a304d811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:e8:76:24:2b:6b:47:ce:1a:9f:f6:81:21:
fa:1c:ba:63:d6:02:be:8c:3b:9a:2e:af:80:97:59:
02:ea:74:f9:f2:3a:4b:b5:3e:2c:92:a5:39:6b:b5:
b4:8d:79:43:46:2d:08:7c:e9:27:ee:ef:df:91:99:
53:13:a4:36:ab:ae:62:1e:7a:c5:55:05:56:d5:df:
2b:e8:ef:ef:78:94:ca:21:1c:19:da:82:db:cf:9c:
d6:68:58:a2:3b:7b:be:1a:98:9c:73:fb:0e:0a:6f:
91:b7:d3:aa:f8:4d:3a:e2:fb:0f:41:73:ef:13:7e:
b7:dc:a5:1d:78:37:54:f7:2c:32:13:30:72:dd:7d:
9c:67:e5:54:c6:93:32:77:89:db:bd:bc:f8:3f:c3:
e2:11:11:5e:d9:ad:01:b7:0f:97:bf:88:65:d8:2d:
50:c9:f1:06:b8:1b:74:a2:81:e2:47:1d:76:27:34:
78:24:3f:51:94:82:4b:85:5e:7b:cd:e5:8e:d6:ba:
b1:94:7b:a3:eb:4a:9d:50:ec:84:08:5c:b7:bc:a8:
f0:87:86:1f:53:95:d5:1a:6f:eb:52:01:0b:22:0a:
1d:07:45:09:ae:31:9d:2d:20:8d:53:7f:38:cf:9c:
9a:67:b2:b4:b4:5c:47:28:01:87:af:6b:36:ec:cf:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:59:16:8F:7C:D0:93:FB:D9:FF:72:45:46:89:F4:A3:04:D8:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/98ZZFo980JP72f9yRUaJ9KME2BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.250.0/24
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c5:5e:05:96:93:f1:70:fe:67:0f:50:7a:1d:08:14:01:a9:
45:00:8d:5f:26:9b:c7:c9:70:2c:54:9f:9d:de:c8:55:a8:80:
8e:47:04:29:5a:4e:1a:c8:e0:22:91:c1:5b:12:e0:de:b9:48:
85:c8:d3:8c:96:b8:45:c6:3e:fe:a9:21:cb:44:26:c1:2f:fe:
04:62:a8:45:a7:58:dc:79:92:4f:f2:62:50:a9:4b:48:60:3d:
bf:64:47:ea:84:e1:70:a9:9a:bc:f0:fa:d8:e3:74:bf:96:c2:
28:5f:e5:a7:d7:24:89:dc:0f:ca:d5:32:57:42:8d:ca:12:62:
09:ca:1e:38:b2:66:97:0e:1e:d3:d8:2b:13:b2:82:98:64:e0:
4c:17:85:3b:6a:76:b6:78:22:12:92:bc:7f:67:d2:2f:e9:76:
70:9f:2d:c7:bd:49:e5:6f:34:30:c9:98:7c:d3:30:8e:88:92:
c7:83:21:bd:39:6c:8d:d6:c3:be:ac:4a:0c:c8:6b:65:d9:1b:
db:07:24:c1:4e:80:38:ed:3a:27:f5:91:e6:af:7b:f1:ba:1a:
1b:e3:cc:42:5d:68:fa:a9:a2:7d:8e:2d:0a:31:0d:00:77:e8:
d7:cc:da:38:e6:1e:ff:11:1f:15:8b:f0:56:0f:43:0f:62:e7:
e8:0e:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 20:40:57 2026 by rpki-client