Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UrGH6QUr29jtLkvTKTz8JHtLqZU.roa
File: UrGH6QUr29jtLkvTKTz8JHtLqZU.roa (raw, json)
Hash identifier: F+IEjVakePX6p/Bd9zdNmOnBM6AOtnsnO20Gtqmr6Q8=
Subject key identifier: 52:B1:87:E9:05:2B:DB:D8:ED:2E:4B:D3:29:3C:FC:24:7B:4B:A9:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1982D455936E6C3A53F8813C4F743C496
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UrGH6QUr29jtLkvTKTz8JHtLqZU.roa
Signing time: Sun 01 Nov 2026 17:34:26 +0000
ROA not before: Sun 01 Nov 2026 17:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200239
IP address blocks: 185.194.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:98:2d:45:59:36:e6:c3:a5:3f:88:13:c4:f7:43:c4:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 1 17:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52b187e9052bdbd8ed2e4bd3293cfc247b4ba995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:e5:d8:8d:90:7f:c5:2c:3d:4f:a8:a5:fe:
2a:e2:b1:0c:a0:49:28:ba:f2:24:4d:e6:e1:42:bd:
fe:0d:06:8f:da:d9:5b:cb:10:3c:75:ad:65:9f:20:
fb:f5:9d:2d:bc:9a:a7:34:6e:ac:0d:bf:cb:84:78:
a3:3f:fe:2c:bc:f2:0f:b6:2a:ea:86:38:c5:e6:ec:
15:98:98:d3:c7:a4:84:de:e7:4c:e9:40:d8:47:27:
7e:16:ad:33:d2:29:c8:57:4c:a9:e5:0e:f1:df:f4:
56:64:d5:df:1a:c9:e6:9b:03:3a:82:6c:d8:04:97:
a8:0e:a0:b8:f3:6d:2a:ab:ca:5e:06:51:fa:64:7c:
d2:88:38:34:20:38:42:1e:89:5b:ea:49:07:d0:4e:
76:66:17:43:6c:3f:f6:32:ae:b9:d5:2d:7c:6e:23:
5e:85:59:49:6a:ec:5d:47:9b:dd:66:3e:3f:b4:56:
18:8d:4a:b6:2a:64:f0:f4:b7:ac:fc:2a:74:a9:ae:
cb:5a:6f:6a:54:55:83:7a:6c:f7:25:06:96:01:ca:
35:e8:20:8c:b8:ec:23:3a:1c:0f:7b:a0:e7:90:cb:
21:38:a1:6b:6c:a6:46:19:50:f7:a2:08:e5:26:e8:
06:e0:e3:90:aa:28:b4:fe:ba:f3:01:92:50:f4:05:
3f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B1:87:E9:05:2B:DB:D8:ED:2E:4B:D3:29:3C:FC:24:7B:4B:A9:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/UrGH6QUr29jtLkvTKTz8JHtLqZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.30.0/24
Signature Algorithm: sha256WithRSAEncryption
40:31:83:8d:94:8b:41:7f:f2:44:22:52:36:50:b8:4b:84:2c:
64:73:f8:a0:81:ad:bf:9d:2d:03:5d:8b:ac:82:4c:dd:20:24:
90:3d:04:7a:f7:14:66:9e:fc:fa:ee:9f:d2:d2:13:15:25:6a:
c3:74:29:7f:3a:69:bc:ec:31:bf:91:8e:f5:97:2c:80:e3:ca:
df:7a:60:ef:78:2c:71:e9:e0:5b:ea:71:92:26:af:9a:ef:f8:
96:af:5c:cd:7d:0c:cb:85:20:ea:72:dd:76:99:32:68:9a:32:
2a:d6:d9:40:56:c9:dc:34:f1:d3:07:80:59:61:ed:77:89:25:
c4:9d:74:e0:99:cf:8b:6f:d2:a0:64:0f:da:55:65:45:c3:cc:
bf:bb:a8:f9:53:1c:1b:2d:61:05:90:66:25:91:0d:c7:88:f5:
b6:43:3a:c4:94:b3:55:c1:1a:a8:dd:c3:0a:56:e3:7d:86:ba:
54:fc:c8:d2:00:3b:4a:12:9f:e8:ec:d2:92:3e:69:eb:ec:a4:
bd:ee:3b:15:7f:3f:9b:a6:7f:b3:d5:d4:0c:2b:a0:21:93:e8:
5d:d2:57:09:95:2c:cd:1d:7b:15:33:07:0a:cc:51:7c:c9:42:
b7:53:0c:99:77:81:79:a5:be:22:57:ff:94:48:f8:40:95:69:
4d:dd:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:43:26 2026 by rpki-client