Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NC4_muM7ayXKU8VaWQeu7YCg62k.roa
File: NC4_muM7ayXKU8VaWQeu7YCg62k.roa (raw, json)
Hash identifier: fJ2gbZ6aE1IIkzIDzZjLJj1Z/O6baueHZejpi4er9IY=
Subject key identifier: 34:2E:3F:9A:E3:3B:6B:25:CA:53:C5:5A:59:07:AE:ED:80:A0:EB:69
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0802FF2217F0884E33382D6FD65EADD0A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NC4_muM7ayXKU8VaWQeu7YCg62k.roa
Signing time: Tue 08 Sep 2026 08:43:40 +0000
ROA not before: Tue 08 Sep 2026 08:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 185.232.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:2f:f2:21:7f:08:84:e3:33:82:d6:fd:65:ea:dd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 8 08:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=342e3f9ae33b6b25ca53c55a5907aeed80a0eb69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:da:b7:81:b8:0f:c0:84:e2:1f:56:19:99:
c6:e5:1f:dc:70:8b:c7:41:04:1b:8b:8b:59:28:8a:
f4:17:d2:e3:4a:34:34:d2:00:d2:e4:a3:85:ae:13:
39:53:14:2e:a0:8c:ba:ad:d7:64:68:67:2e:ca:e7:
46:68:48:e3:8f:fb:57:47:fe:3a:ff:be:ea:e4:c2:
78:5e:82:26:f8:6c:e1:8f:69:f3:f9:df:7d:93:a0:
f2:52:a1:ce:63:46:0d:13:d0:6e:3f:5c:49:96:83:
ba:9e:7e:97:a4:2f:e5:17:3d:72:93:e7:1f:eb:ec:
bb:f6:7a:cc:fe:07:56:90:a6:98:0d:68:4c:31:77:
95:d6:1e:bd:b6:3d:bf:35:81:8b:1e:f7:96:96:17:
e7:6b:63:40:ef:a5:7e:6c:8e:9e:07:af:b4:d2:0d:
b4:a6:06:ac:8d:ab:6c:77:8f:df:c2:e8:02:92:cc:
1d:14:a4:27:3d:33:6f:dd:55:da:ad:d0:15:0d:16:
bb:5e:e0:4e:cd:3c:10:06:69:9e:1d:23:a8:e8:be:
b6:92:71:cf:39:e3:3d:7a:07:4b:b8:a7:ee:d8:b4:
29:20:ce:d2:21:0d:4b:fe:06:59:fd:4e:d3:27:a7:
cd:58:39:58:cd:d9:69:17:a3:69:98:ee:bc:75:12:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:3F:9A:E3:3B:6B:25:CA:53:C5:5A:59:07:AE:ED:80:A0:EB:69
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NC4_muM7ayXKU8VaWQeu7YCg62k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:f9:0e:de:a0:12:27:57:fa:66:23:2d:bd:c0:1e:b2:62:47:
01:4a:38:65:e1:25:99:91:76:eb:87:d9:c0:9c:0d:28:9a:c7:
0c:7a:f4:d2:df:12:34:26:6a:b0:29:5e:ce:7b:16:c4:c2:3a:
cf:4f:59:2c:e1:be:1c:1e:bf:2c:e8:d5:77:ae:b8:b2:20:18:
53:b1:e0:47:0d:fa:82:e8:98:1e:e6:d3:c6:1b:d2:63:8f:eb:
a9:49:76:a2:4d:53:8a:66:eb:59:57:c5:98:4c:52:e0:a5:67:
a3:8e:60:33:50:b1:85:9e:e2:cd:78:2f:70:d2:33:29:83:9b:
14:e4:5c:6f:03:50:45:cf:01:73:9d:b0:bc:6e:2e:dc:7d:7a:
75:f6:35:6e:3f:ad:65:a0:46:e8:a7:08:96:98:b8:fc:61:b9:
0c:4b:3e:c1:45:67:38:34:16:b6:c5:3e:4a:d1:8c:3e:09:8b:
02:f0:92:23:14:97:58:d8:d4:96:03:9d:69:66:f9:91:f6:ac:
f2:c2:dc:0a:9d:24:02:c7:46:dd:25:d7:1f:90:aa:bc:44:06:
77:57:4b:78:67:8e:1b:bc:e7:a1:9f:d3:1c:bc:22:f8:c5:fc:
47:2f:ed:dd:47:97:df:9d:aa:67:26:bc:41:64:bd:c6:71:09:
f5:c4:20:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 13:37:49 2026 by rpki-client