Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9bbr5lHQov2tNIidSCsHjVPirHY.roa
File: 9bbr5lHQov2tNIidSCsHjVPirHY.roa (raw, json)
Hash identifier: PW7r2TbtDgA3Wk3W4emSGiooFttUbkTJD0XXCSB2sHg=
Subject key identifier: F5:B6:EB:E6:51:D0:A2:FD:AD:34:88:9D:48:2B:07:8D:53:E2:AC:76
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019DDA553241C3D53034FFCA74132171F5A6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9bbr5lHQov2tNIidSCsHjVPirHY.roa
Signing time: Wed 29 Apr 2026 17:41:49 +0000
ROA not before: Wed 29 Apr 2026 17:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47294
IP address blocks: 185.218.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:55:32:41:c3:d5:30:34:ff:ca:74:13:21:71:f5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 29 17:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5b6ebe651d0a2fdad34889d482b078d53e2ac76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:3b:78:04:bd:25:c3:5f:2f:3d:94:19:7d:
ff:58:c3:c7:dc:3e:8c:7d:6e:67:9c:cb:84:90:a6:
18:25:60:75:08:08:dd:cb:ee:1a:69:00:61:73:a5:
49:8c:bd:a0:30:b4:b0:92:29:3b:5c:79:6b:d3:e9:
32:f3:cd:89:bf:aa:2f:75:44:81:f0:fd:10:5c:ca:
c6:de:e8:fc:50:60:fe:3e:31:7f:b8:10:f8:0e:49:
c2:a5:d6:69:f1:9c:b5:af:c5:33:38:00:95:c0:8f:
7d:8c:fb:10:47:4c:bb:4f:1d:85:cd:c2:17:0f:bc:
0d:1f:9c:f1:b5:1c:eb:f9:5e:af:d6:94:70:33:28:
56:ce:a6:0c:bf:04:d0:96:cf:f9:a2:5d:f5:c0:4f:
d5:1e:32:6f:3e:40:f2:78:0f:a4:fb:0a:d2:9c:33:
43:d2:f0:a8:24:bf:f0:7d:01:fc:58:02:61:ea:23:
fe:9d:b9:e0:59:aa:6d:80:7a:0e:00:06:ed:47:b8:
1a:5d:48:55:2c:a0:e4:cd:7f:86:b9:c5:24:7e:fc:
61:04:2a:f8:00:e6:24:dc:65:be:be:5c:45:5c:2b:
8f:50:ce:3f:84:35:43:72:9a:94:7c:44:f0:5d:8a:
53:2e:d1:cf:6f:77:7a:d7:5c:12:47:39:1e:a0:52:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B6:EB:E6:51:D0:A2:FD:AD:34:88:9D:48:2B:07:8D:53:E2:AC:76
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9bbr5lHQov2tNIidSCsHjVPirHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.23.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:bb:87:c4:70:94:48:e5:ed:bf:57:1e:e2:96:ce:7c:42:e6:
a8:dc:11:7f:37:90:69:f1:c8:13:b2:55:c1:22:61:1d:4b:da:
fa:65:4b:14:a5:4c:b0:70:00:38:28:10:88:64:1a:79:38:72:
01:41:7f:6f:d6:1f:cf:f6:a5:ce:39:46:35:aa:79:fc:70:82:
d6:b7:fd:76:82:39:c1:72:78:2b:d4:1f:71:91:2d:e9:c1:d2:
8f:60:71:a2:3f:4b:a0:86:75:70:ff:53:f5:64:eb:d0:73:55:
1d:e9:d1:d9:89:2a:6d:4c:71:4a:7f:c1:5f:3b:6d:fa:75:7f:
e5:4f:29:22:67:df:8a:f1:de:ef:1a:c4:ec:7b:f7:b2:75:a8:
0c:fe:77:b2:36:0d:3a:b6:28:5d:e6:0e:c9:c4:64:14:1e:6c:
4d:ed:4b:6f:02:e5:21:d5:3a:09:84:93:e5:76:9a:52:56:e4:
26:36:c3:01:f8:7f:ab:fe:69:1b:87:ff:ce:17:e0:3e:86:eb:
bf:59:49:c5:99:79:48:0e:a2:be:58:74:21:95:1c:7c:9d:10:
11:d5:f2:13:37:af:5c:7e:e5:61:cd:b1:8c:5c:93:dc:07:30:
30:a9:5d:79:bc:84:c3:2a:10:cd:b5:ca:38:5d:ff:43:eb:93:
8f:7b:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 20:50:53 2026 by rpki-client