Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Iteqm1fWQJWzyZdUBX3Ux5lYN4Y.roa
File: Iteqm1fWQJWzyZdUBX3Ux5lYN4Y.roa (raw, json)
Hash identifier: mpU0ttS/u3/XUtSgR3X3qzU4KsR8JLVk0qZCaUIQNck=
Subject key identifier: 22:D7:AA:9B:57:D6:40:95:B3:C9:97:54:05:7D:D4:C7:99:58:37:86
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A05706B7C5BBD3CC39C9D3CE59B6DC56A1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Iteqm1fWQJWzyZdUBX3Ux5lYN4Y.roa
Signing time: Mon 31 Aug 2026 08:54:12 +0000
ROA not before: Mon 31 Aug 2026 08:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 185.210.152.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 23:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:06:b7:c5:bb:d3:cc:39:c9:d3:ce:59:b6:dc:56:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 31 08:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d7aa9b57d64095b3c99754057dd4c799583786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:cd:92:ac:04:75:ef:00:c8:ea:db:af:5d:
ab:73:bd:58:90:72:b1:9f:24:ee:7b:2b:91:e9:ce:
e3:59:19:61:7b:77:81:6c:dc:85:a7:1c:ed:2f:63:
d7:9e:1b:73:0c:0a:f8:e1:da:55:14:cc:e7:87:12:
d1:0c:6b:ff:d8:3e:77:b4:ec:6c:3f:da:8a:e1:b0:
a8:b1:86:9b:b5:45:cf:5f:83:16:8e:3b:db:ac:a1:
36:1e:93:85:7a:85:3a:f0:0a:5e:3b:5e:99:e8:a6:
93:90:30:f0:ad:03:61:44:9c:09:15:ba:88:b4:58:
cb:15:98:26:56:e6:71:8b:7b:b1:ea:fd:cf:88:48:
d5:98:fd:18:5f:f0:2d:5b:f4:79:77:fe:f8:f3:25:
28:01:2d:47:c5:94:15:bc:a3:19:c0:04:d8:3b:d1:
22:4b:3d:0f:c0:64:13:35:7f:7d:3e:e3:90:df:a8:
55:0b:c6:83:69:8a:ce:df:39:00:de:97:24:69:53:
b6:4c:2c:7e:e2:a1:bb:f3:a5:39:72:ab:80:a8:58:
ca:05:30:be:6f:00:a6:f9:8d:0c:62:d2:d7:11:76:
fb:99:52:f3:a0:57:15:6c:cd:cd:19:f9:f8:c3:f4:
ef:74:64:fe:8c:34:c1:28:4a:b5:72:fe:05:73:1b:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:AA:9B:57:D6:40:95:B3:C9:97:54:05:7D:D4:C7:99:58:37:86
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Iteqm1fWQJWzyZdUBX3Ux5lYN4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.152.0/24
185.230.53.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:41:95:3c:16:ef:60:c1:71:7f:94:2b:7a:71:64:23:c4:3f:
cb:cb:81:da:17:09:50:cb:e6:a6:59:40:3a:1a:65:31:b0:76:
fa:26:4c:59:e6:5e:0d:44:e1:83:00:04:0f:54:ea:66:23:47:
b5:e3:96:77:a2:57:35:a9:7e:ff:fa:df:6d:e1:6d:6b:65:04:
45:55:5c:28:7e:5f:92:cf:05:56:66:53:73:84:67:18:48:75:
f3:1e:f2:c2:3e:93:13:7a:b1:9b:28:d3:a0:4c:00:14:f6:15:
2d:ea:37:76:25:e8:82:1c:80:60:07:6f:0c:85:01:32:ea:71:
9b:e7:44:17:a4:81:ec:4f:cb:57:61:00:89:86:8f:54:86:a8:
20:c1:d2:b0:fb:0e:74:a7:e9:05:ec:be:fe:67:c2:5c:f8:3d:
55:bf:10:8e:a8:d9:38:08:0f:f3:4e:17:3a:d4:eb:f2:a0:0a:
00:5c:fa:f3:61:57:49:aa:23:e9:b2:f8:d8:f6:85:e4:9e:e3:
84:55:9e:61:7a:e1:42:53:77:30:ef:27:c2:d0:4d:5d:08:53:
1e:ea:3a:bd:e9:e4:23:9d:c8:2a:c3:19:75:d5:b4:a0:1e:2b:
7b:0c:b1:07:80:f3:7f:a0:6c:2e:95:3b:45:ee:35:05:a4:37:
7a:9e:fe:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 07:49:36 2026 by rpki-client