Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N_UUjzn3uz6BUbkV8YkXQ6GRQ5Y.roa
File: N_UUjzn3uz6BUbkV8YkXQ6GRQ5Y.roa (raw, json)
Hash identifier: j10TnmbsUqLQx6AvrGiH+VG837tWj0yuDd1MIkhdUY0=
Subject key identifier: 37:F5:14:8F:39:F7:BB:3E:81:51:B9:15:F1:89:17:43:A1:91:43:96
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1354A1B86BC2786705DD8EEA1B9294B2F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N_UUjzn3uz6BUbkV8YkXQ6GRQ5Y.roa
Signing time: Tue 13 Oct 2026 12:43:31 +0000
ROA not before: Tue 13 Oct 2026 12:43:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 185.206.248.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.218.102.0/24 maxlen: 24
185.223.76.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.238.228.0/22 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:4a:1b:86:bc:27:86:70:5d:d8:ee:a1:b9:29:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 13 12:43:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=37f5148f39f7bb3e8151b915f1891743a1914396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:20:f3:bc:53:87:b1:bd:3d:1c:0f:16:db:79:
2b:a2:aa:8f:af:da:66:a2:5d:bc:71:6a:77:d3:af:
0a:b5:32:f4:8a:ca:97:03:16:fa:f5:dd:6e:16:66:
cc:8d:44:23:0a:1e:79:2f:c2:3d:89:26:dc:dc:f1:
8f:6b:ee:92:ff:c4:16:de:e7:44:56:e9:68:40:5b:
3f:2b:42:46:cb:4a:24:65:46:6a:79:ae:44:72:7e:
2b:91:3c:ac:30:da:8a:eb:19:dd:09:d2:26:b5:7f:
5c:ce:8e:21:91:5f:14:ca:fa:73:e9:9c:c0:15:f8:
4f:1a:9c:15:a0:d5:cb:e3:5b:e7:6e:20:5f:3a:13:
16:3f:5a:b0:7b:8d:00:0d:2b:0d:b4:3b:4f:25:95:
b4:bf:db:79:d2:db:7c:30:65:e2:40:f0:44:1f:dc:
21:61:9b:ff:c1:d1:4e:27:5c:b0:4d:c4:fd:54:7c:
ff:b9:6e:d9:b0:4f:10:38:2e:60:8b:a1:5e:10:bb:
b8:15:9f:8e:ef:d7:7f:d5:81:10:66:6d:e1:1f:f9:
b7:f4:59:f5:e2:88:ff:e6:f7:3d:96:76:88:a8:d6:
18:8e:cb:9d:ac:91:95:0f:0b:7b:68:ba:08:96:4d:
97:69:d5:88:7a:c8:29:14:df:92:59:84:69:df:a7:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:14:8F:39:F7:BB:3E:81:51:B9:15:F1:89:17:43:A1:91:43:96
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/N_UUjzn3uz6BUbkV8YkXQ6GRQ5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.248.0/24
185.209.36.0/23
185.210.153.0/24
185.210.155.0/24
185.218.102.0/24
185.223.76.0/24
185.227.145.0/24
185.234.20.0/22
185.238.228.0/22
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
15:dd:f4:ad:82:f4:6d:73:d9:ac:61:7f:82:8e:18:2c:1d:42:
ee:e9:86:f7:27:d8:80:c1:92:45:67:28:36:fa:36:80:b4:75:
3e:3e:ca:b2:be:8b:8c:5e:d4:f8:90:25:e5:1d:77:5e:5d:60:
7b:aa:97:aa:2f:46:81:a5:47:13:c1:55:b0:68:1e:1b:a1:42:
06:a3:66:b0:b1:6a:5c:c2:ad:2a:6b:60:63:b2:dc:3b:21:f8:
89:01:c4:a5:64:8c:72:d6:b7:87:91:c2:59:68:de:3d:da:3d:
4c:c2:da:f4:9b:c3:25:ee:fb:65:ec:3f:1d:7b:0b:90:d7:e7:
ed:e2:3b:04:19:80:55:54:4b:41:05:7f:8c:a5:17:ef:bc:73:
41:0f:82:62:7e:ba:7d:ba:61:30:7d:6c:ec:cb:51:11:af:20:
24:91:b4:cd:ca:2b:10:1b:41:8b:ac:8e:a1:73:f5:b2:12:5a:
09:1f:bd:e5:8e:b8:ba:da:64:82:9b:bf:14:56:38:72:9f:c7:
c3:47:38:2e:69:6a:e5:19:b2:28:70:d7:ee:d5:ec:8e:90:46:
02:d4:24:87:77:94:30:f3:df:58:34:7a:bd:5a:67:e8:df:4f:
96:f0:7c:e9:40:1a:d5:6e:44:22:ab:b5:8c:e3:24:9c:75:e2:
2f:32:d3:b4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAaE1ShuGvCeGcF3Y7qG5KUsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDEzMTI0MzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Y1MTQ4ZjM5ZjdiYjNlODE1MWI5MTVmMTg5MTc0M2ExOTE0Mzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSDzvFOHsb09HA8W23kroqqPr9pm
ol28cWp3068KtTL0isqXAxb69d1uFmbMjUQjCh55L8I9iSbc3PGPa+6S/8QW3udE
VuloQFs/K0JGy0okZUZqea5Ecn4rkTysMNqK6xndCdImtX9czo4hkV8Uyvpz6ZzA
FfhPGpwVoNXL41vnbiBfOhMWP1qwe40ADSsNtDtPJZW0v9t50tt8MGXiQPBEH9wh
YZv/wdFOJ1ywTcT9VHz/uW7ZsE8QOC5gi6FeELu4FZ+O79d/1YEQZm3hH/m39Fn1
4oj/5vc9lnaIqNYYjsudrJGVDwt7aLoIlk2XadWIesgpFN+SWYRp36cOjQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFDf1FI8597s+gVG5FfGJF0OhkUOWMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvTl9VVWp6bjN1ejZCVWJrVjhZa1hRNkdSUTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAuc74AwQB
udEkAwQAudKZAwQAudKbAwQAudpmAwQAud9MAwQAueORAwQCueoUAwQCue7kAwQA
ufvnMA0GCSqGSIb3DQEBCwUAA4IBAQAV3fStgvRtc9msYX+CjhgsHULu6Yb3J9iA
wZJFZyg2+jaAtHU+PsqyvouMXtT4kCXlHXdeXWB7qpeqL0aBpUcTwVWwaB4boUIG
o2awsWpcwq0qa2Bjstw7IfiJAcSlZIxy1reHkcJZaN492j1Mwtr0m8Ml7vtl7D8d
ewuQ1+ft4jsEGYBVVEtBBX+MpRfvvHNBD4Jifrp9umEwfWzsy1ERryAkkbTNyisQ
G0GLrI6hc/WyEloJH73ljri62mSCm78UVjhyn8fDRzguaWrlGbIocNfu1eyOkEYC
1CSHd5Qw899YNHq9Wmfo30+W8HzpQBrVbkQiq7WM4yScdeIvMtO0
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:48 2026 by rpki-client