Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QLt7bNeW17rrN9VxB2ljz3YjBDU.roa
File: QLt7bNeW17rrN9VxB2ljz3YjBDU.roa (raw, json)
Hash identifier: MuN5j8G3gpkTdPh8YTod7xmllYjT1JBR6y29O2NsK90=
Subject key identifier: 40:BB:7B:6C:D7:96:D7:BA:EB:37:D5:71:07:69:63:CF:76:23:04:35
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A177474434816FCBD2892E36DFEED2D514
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QLt7bNeW17rrN9VxB2ljz3YjBDU.roa
Signing time: Mon 26 Oct 2026 08:15:21 +0000
ROA not before: Mon 26 Oct 2026 08:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 185.206.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:47:44:34:81:6f:cb:d2:89:2e:36:df:ee:d2:d5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 26 08:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40bb7b6cd796d7baeb37d571076963cf76230435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:92:0c:6c:b5:39:b1:d9:20:c9:cd:fe:47:a2:
6f:2f:5a:48:f1:fb:f9:04:fe:6a:26:75:e2:70:22:
00:4b:61:3f:57:9b:7e:d4:4e:c1:d7:bb:ee:ec:c0:
09:e8:25:59:23:ed:58:97:0c:75:21:e0:01:60:b2:
41:66:d9:b1:bd:c5:74:51:84:78:bd:f7:f5:c0:f2:
95:e4:34:61:65:51:ad:ea:0e:68:92:73:4e:10:0e:
91:c1:d8:f1:78:16:6f:90:4d:4a:a7:28:d1:b1:d2:
67:92:e3:b0:1f:0c:04:61:43:15:73:60:b2:09:d4:
91:cd:cf:34:71:86:f7:13:ff:82:e0:b2:8e:e6:64:
66:87:6e:69:2f:9a:db:ef:5e:9d:07:ae:bc:f3:19:
14:92:9f:cc:f1:e3:64:40:0b:33:79:c2:2d:31:f1:
a4:cb:4e:51:73:fb:81:18:07:5d:f4:5e:65:4e:3b:
f6:23:4d:d5:ca:0c:cf:71:44:22:e8:d5:fc:61:d3:
47:e9:44:49:50:61:f2:bb:63:25:20:1e:2e:e4:b9:
a3:8b:42:19:d3:ab:2a:0f:a0:54:49:17:27:ec:cd:
10:38:67:85:34:53:32:5a:e7:e9:06:67:91:c0:01:
db:5d:b8:74:a4:e1:35:0a:a9:58:36:20:d1:0a:5d:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BB:7B:6C:D7:96:D7:BA:EB:37:D5:71:07:69:63:CF:76:23:04:35
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/QLt7bNeW17rrN9VxB2ljz3YjBDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.251.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ab:3b:0e:49:25:3a:30:2e:88:aa:f6:c9:1c:76:79:04:b2:
7c:85:05:bc:d3:50:0b:73:5f:d8:c2:be:a5:7b:cf:33:11:a5:
1b:04:74:9d:a1:f4:90:1a:56:72:2e:16:8a:ea:2c:e9:3c:ed:
74:cd:ba:e7:1b:09:ea:df:63:39:01:80:e9:6e:08:96:c6:34:
3f:74:0b:f6:74:87:80:1c:ee:9e:7c:80:b2:36:38:0f:c4:0b:
e0:38:5b:9c:49:08:8e:77:68:8f:6b:95:5b:7b:47:ee:60:63:
96:ad:7e:94:a4:0d:ba:c7:9c:32:f6:8e:3d:3b:fe:99:01:9d:
92:e0:da:f5:d3:33:e8:a3:91:96:b8:3d:33:c7:4f:03:63:10:
6c:d2:f6:56:d7:42:d6:ca:0b:e6:08:1f:d7:a9:f2:89:07:20:
4a:de:7c:ee:00:34:fc:44:b2:a4:7b:2e:d1:ea:96:ef:c0:20:
08:64:fd:f4:6f:6c:fb:89:bb:f4:ce:be:34:98:6e:b6:c4:ae:
68:53:11:14:ef:03:d0:72:9d:98:50:10:36:97:1d:21:f3:5d:
93:d9:1b:29:d3:33:a6:d3:7a:ab:2b:05:e2:7c:ac:e6:f5:7b:
47:40:cb:b7:99:19:2d:5b:0c:db:49:87:46:79:06:12:71:3f:
9c:4d:20:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaF3R0Q0gW/L0okuNt/u0tUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDI2MDgxNTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGJiN2I2Y2Q3OTZkN2JhZWIzN2Q1NzEwNzY5NjNjZjc2MjMwNDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZIMbLU5sdkgyc3+R6JvL1pI8fv5
BP5qJnXicCIAS2E/V5t+1E7B17vu7MAJ6CVZI+1Ylwx1IeABYLJBZtmxvcV0UYR4
vff1wPKV5DRhZVGt6g5oknNOEA6RwdjxeBZvkE1KpyjRsdJnkuOwHwwEYUMVc2Cy
CdSRzc80cYb3E/+C4LKO5mRmh25pL5rb716dB6688xkUkp/M8eNkQAszecItMfGk
y05Rc/uBGAdd9F5lTjv2I03VygzPcUQi6NX8YdNH6URJUGHyu2MlIB4u5Lmji0IZ
06sqD6BUSRcn7M0QOGeFNFMyWufpBmeRwAHbXbh0pOE1CqlYNiDRCl2d1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEC7e2zXlte66zfVcQdpY892IwQ1MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUUx0N2JOZVcxN3JyTjlWeEIybGp6M1lqQkRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc77MA0G
CSqGSIb3DQEBCwUAA4IBAQBYqzsOSSU6MC6IqvbJHHZ5BLJ8hQW801ALc1/Ywr6l
e88zEaUbBHSdofSQGlZyLhaK6izpPO10zbrnGwnq32M5AYDpbgiWxjQ/dAv2dIeA
HO6efICyNjgPxAvgOFucSQiOd2iPa5Vbe0fuYGOWrX6UpA26x5wy9o49O/6ZAZ2S
4Nr10zPoo5GWuD0zx08DYxBs0vZW10LWygvmCB/XqfKJByBK3nzuADT8RLKkey7R
6pbvwCAIZP30b2z7ibv0zr40mG62xK5oUxEU7wPQcp2YUBA2lx0h812T2Rsp0zOm
03qrKwXifKzm9XtHQMu3mRktWwzbSYdGeQYScT+cTSBo
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:48 2026 by rpki-client