Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Y44BIIL7YFj_IrCRzu1sdjc3oqA.roa
File: Y44BIIL7YFj_IrCRzu1sdjc3oqA.roa (raw, json)
Hash identifier: H+U739ERtHO4DPB86iV6LDoKW0sUm18bW9h/cgn5MC8=
Subject key identifier: 63:8E:01:20:82:FB:60:58:FF:22:B0:91:CE:ED:6C:76:37:37:A2:A0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A12C89E0BB0114DEDE32548E133AF77C20
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Y44BIIL7YFj_IrCRzu1sdjc3oqA.roa
Signing time: Sun 11 Oct 2026 19:56:35 +0000
ROA not before: Sun 11 Oct 2026 19:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.233.0/24 maxlen: 24
194.5.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:89:e0:bb:01:14:de:de:32:54:8e:13:3a:f7:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 11 19:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=638e012082fb6058ff22b091ceed6c763737a2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:57:56:63:fa:60:f1:f8:8a:89:cf:9d:5e:
83:f3:14:44:59:60:02:99:e4:a9:67:d1:61:5e:4e:
0e:6d:8c:a0:61:43:a5:67:90:91:ce:44:8b:76:11:
e1:da:f4:d7:f6:ff:93:e6:8b:b3:3d:ed:66:3e:91:
4e:95:5e:b1:9f:02:fe:e3:52:eb:c0:69:e3:33:ad:
fa:e2:bb:99:e1:c8:29:30:af:89:2d:b3:92:98:51:
d1:7f:8e:4b:7a:25:3f:0c:ed:de:52:53:d9:54:cd:
ef:f7:a0:b2:fb:21:a6:1f:f8:85:6e:f9:0b:f7:3f:
8f:d9:37:ae:c5:b8:80:62:71:bc:46:b1:b2:76:b5:
4e:e4:e1:2e:5b:09:23:89:b2:45:db:47:06:00:cf:
9b:e4:33:7c:b6:18:87:5e:f7:b0:2a:63:44:7a:69:
95:db:f7:59:52:fd:b4:9d:ab:92:a0:a9:46:73:47:
2e:c9:08:e9:4d:7a:45:28:22:9e:93:b0:71:3c:8d:
4f:05:b4:d9:b9:2b:f3:33:88:bb:2b:f2:67:62:42:
74:16:3c:8d:c8:f9:1e:3e:ae:03:d3:84:fd:9d:aa:
26:45:a1:17:7f:e5:c4:34:10:97:62:56:c2:b5:25:
26:ae:a4:d9:23:36:bf:3a:17:f2:b3:7d:8d:5a:0c:
c2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8E:01:20:82:FB:60:58:FF:22:B0:91:CE:ED:6C:76:37:37:A2:A0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Y44BIIL7YFj_IrCRzu1sdjc3oqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.38.0/24
185.209.73.0/24
185.210.233.0/24
194.5.67.0/24
Signature Algorithm: sha256WithRSAEncryption
38:8a:71:fd:56:fe:66:a9:c1:02:a8:68:60:43:34:4c:e5:04:
72:59:dd:88:d2:71:30:fe:98:bb:79:8a:5b:da:1c:d6:c5:33:
89:22:a8:32:a4:b0:ee:31:88:03:9e:3a:77:dc:c3:7a:ef:ee:
66:ae:68:d0:7c:65:99:fc:7a:b9:53:ca:5c:da:e9:3e:18:07:
90:dd:b5:5b:2e:4c:cc:bf:cc:88:e7:2a:86:12:fc:0d:25:e0:
3b:71:0e:52:dc:c7:df:4f:63:11:e8:8c:11:41:52:b5:9a:b1:
f6:fe:a6:53:e8:4d:0f:65:00:2a:06:3a:ef:4a:af:45:f2:bc:
e6:2c:a9:41:c1:56:9e:f6:3a:12:0c:8a:dc:6c:14:3d:bb:e4:
d8:a0:1c:e6:fc:c7:64:43:e6:7f:e1:7a:5b:92:6b:82:a4:4b:
99:4c:c9:b8:ee:39:54:c0:07:d2:73:18:c4:3f:a5:2d:36:58:
8a:e6:df:f5:62:78:61:12:5b:bb:cb:ff:8e:00:f4:9b:0c:0d:
10:0e:52:1e:b7:82:25:0a:5e:fc:c9:4d:8f:d9:d9:d9:e1:d6:
7c:1f:00:0f:39:c4:9c:e6:28:9a:93:14:bc:b4:a9:4a:ad:6e:
6c:a5:53:12:9d:18:e9:ff:01:87:4a:08:87:03:d0:93:67:a3:
a6:a3:07:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:42:24 2026 by rpki-client