Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IBWYtTnev8jikReh1K6swlW3Z18.roa
File: IBWYtTnev8jikReh1K6swlW3Z18.roa (raw, json)
Hash identifier: IouehEl+2APoWwdedTme4DoX8HXWD6pCfFgsi6qoZew=
Subject key identifier: 20:15:98:B5:39:DE:BF:C8:E2:91:17:A1:D4:AE:AC:C2:55:B7:67:5F
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019F7F1ADDEF6B8F503EEDC177307F7F5DB3
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IBWYtTnev8jikReh1K6swlW3Z18.roa
Signing time: Mon 20 Jul 2026 10:38:14 +0000
ROA not before: Mon 20 Jul 2026 10:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:1a:dd:ef:6b:8f:50:3e:ed:c1:77:30:7f:7f:5d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 20 10:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=201598b539debfc8e29117a1d4aeacc255b7675f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:de:f3:c1:da:b6:8a:e6:66:94:97:a2:6d:
bb:04:b2:74:8d:0a:dd:5b:e4:1c:d3:35:3c:04:f4:
51:3e:6e:a6:a9:61:c9:df:54:09:53:80:f2:53:fd:
98:28:8a:d9:33:86:93:65:a7:54:52:ca:9d:0e:a7:
21:76:62:f3:a0:5d:42:db:cb:19:ef:72:9c:84:ca:
8c:a1:b3:fb:02:ca:be:f3:82:c7:9f:f0:ae:1f:3c:
47:bf:27:92:3c:a4:79:41:02:cd:c0:9c:40:69:4f:
a8:4e:16:43:4d:d4:c6:11:c8:af:76:f5:f1:f6:e1:
94:ed:35:f5:0f:f7:ef:6f:4c:94:b5:6d:52:c3:d7:
80:88:3f:8a:63:98:3a:23:d2:69:24:d7:1a:01:aa:
92:f6:f8:17:db:9e:91:10:54:46:60:47:60:17:70:
f8:02:c2:0e:db:eb:92:85:19:ab:d4:d0:cb:5d:d1:
cb:0b:43:8a:b5:bb:26:c8:a1:9c:be:7e:cb:22:24:
a8:7e:56:75:4f:24:b1:5d:6f:4c:e1:53:b8:49:ab:
39:a8:90:56:00:74:e1:4c:a5:05:34:ad:b7:33:4d:
59:ec:d0:7f:67:ed:b2:c5:3b:fd:51:b1:c7:75:24:
0a:66:2e:50:0e:0b:02:fc:2f:91:64:0f:2f:66:fb:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:15:98:B5:39:DE:BF:C8:E2:91:17:A1:D4:AE:AC:C2:55:B7:67:5F
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IBWYtTnev8jikReh1K6swlW3Z18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4d:5a:59:5b:72:bc:51:26:4f:eb:f5:4e:11:d8:54:29:dc:
dc:7e:19:ec:c5:e3:9a:50:36:c9:74:4e:ce:0f:f1:74:d4:12:
31:49:45:55:66:a8:d3:63:dd:71:23:c8:a8:44:af:d0:a5:89:
30:57:a4:06:2e:7c:0f:aa:cd:03:3b:d7:66:91:73:61:f4:00:
a6:3e:db:b5:f3:d1:f2:ba:2b:50:2a:2b:45:b4:78:bd:65:3d:
3b:e8:ed:72:8a:a3:80:56:27:e4:e7:c2:27:83:b2:45:b0:b5:
7b:28:f1:55:a7:03:09:2b:06:0b:9a:59:5c:01:8e:1d:da:50:
c6:22:b3:11:cf:f8:a4:6e:49:b2:86:b4:c7:77:70:8e:98:2b:
bc:2a:b3:db:47:b7:d1:43:6c:0d:d7:a4:1c:a7:4d:0c:e6:93:
ce:a1:3b:01:bd:b1:3b:9a:a4:7f:c2:84:8f:e9:22:45:cb:a5:
10:32:70:cb:a6:fa:d0:76:24:c6:7d:20:4f:5c:d3:ce:73:9e:
2c:19:ed:85:c9:cd:ee:35:48:d1:52:d8:f8:80:34:2c:0e:c4:
6a:7e:f3:51:a4:39:bd:80:67:3a:94:63:62:a5:29:51:c5:f3:
83:c1:24:47:40:a5:0f:9f:ba:57:5b:c1:0e:55:39:03:c5:9d:
9b:e7:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:47:06 2026 by rpki-client