Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YgboJj1Te9ee5mYG_9qgBKiaSpE.roa
File: YgboJj1Te9ee5mYG_9qgBKiaSpE.roa (raw, json)
Hash identifier: E/zS+Ia+v4D7RJVNRXjU6o3H+hB3FkccRdDE0LAneUI=
Subject key identifier: 62:06:E8:26:3D:53:7B:D7:9E:E6:66:06:FF:DA:A0:04:A8:9A:4A:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A153E3C705F275F817E7DFCDC44777FE46
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YgboJj1Te9ee5mYG_9qgBKiaSpE.roa
Signing time: Mon 19 Oct 2026 11:19:58 +0000
ROA not before: Mon 19 Oct 2026 11:19:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201136
IP address blocks: 185.210.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:e3:c7:05:f2:75:f8:17:e7:df:cd:c4:47:77:fe:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 19 11:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6206e8263d537bd79ee66606ffdaa004a89a4a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:5b:29:71:ac:39:e4:e3:09:95:8f:66:1b:
fe:57:ff:c3:b0:a8:bd:91:2b:5b:92:59:5c:d7:d3:
9d:5a:52:d3:65:49:65:6c:a8:d9:95:d4:79:37:1c:
1c:0f:39:7c:e6:cb:04:b8:48:79:5c:a7:08:11:dc:
b8:28:70:6b:89:17:35:5a:f7:5e:bf:f9:57:ba:f7:
9b:4e:cf:cf:00:f9:b3:b5:9f:ec:fa:12:5e:16:44:
9b:56:ed:0b:4c:de:eb:e6:62:86:8e:27:26:92:da:
7f:0e:54:db:c4:48:ae:db:4c:57:f4:f7:d0:cd:ee:
19:c4:f0:4d:e6:51:19:7a:4a:82:94:55:11:6a:36:
cd:0f:64:bd:2b:a8:55:cf:43:f7:8c:14:9c:b5:12:
10:16:34:35:e8:c1:67:e2:56:4a:be:1d:50:6f:b9:
6e:b7:e1:56:f0:bf:53:4d:cb:94:94:5e:0c:78:07:
32:85:2b:93:9a:45:f8:27:2e:75:bf:92:e1:83:cd:
54:7f:eb:1b:21:fb:87:a7:05:da:5a:ea:19:74:a8:
71:f5:8b:d8:4b:99:22:de:17:fc:22:9e:b3:9e:94:
cc:1d:19:5c:a0:bc:1e:97:36:cf:99:0e:00:02:f3:
08:22:6b:5f:20:3f:08:ce:6e:26:40:a0:b9:32:d8:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:06:E8:26:3D:53:7B:D7:9E:E6:66:06:FF:DA:A0:04:A8:9A:4A:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YgboJj1Te9ee5mYG_9qgBKiaSpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.152.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1e:44:26:93:78:0c:39:2b:60:d1:dd:66:89:04:d5:58:54:
91:fb:9d:55:c2:f1:18:a6:ba:b9:af:58:b9:08:8e:04:c5:bd:
cd:a4:11:e1:4c:b0:41:a3:f0:5d:ab:58:6e:db:8b:bb:b1:66:
5c:b8:0e:fa:4f:f1:b8:ed:14:0d:c6:48:a2:a7:28:ac:f9:ce:
71:02:21:7e:34:7e:ab:89:fe:b5:86:e7:11:2a:06:f8:c6:2b:
91:11:16:ae:c1:eb:e1:e2:5c:60:8c:94:9a:1f:7c:ec:f9:7f:
b5:67:1e:f5:92:6b:53:fc:dd:9d:4a:ad:5e:60:0f:e7:29:39:
ae:45:81:f3:64:9a:5b:35:49:2c:60:1d:5b:b4:1d:65:19:d2:
1a:89:be:71:41:d1:ae:be:8d:1d:57:f7:b5:00:55:eb:0f:ae:
51:92:a5:96:98:40:77:8d:72:d5:5b:37:87:fc:cb:76:20:ff:
46:7f:7e:0c:61:de:55:05:8a:69:8b:45:6f:c5:f6:4d:dc:70:
80:f4:47:96:7c:e3:22:25:43:ae:a4:85:03:3e:cb:28:6c:a9:
37:43:41:b5:03:08:71:a8:8e:97:68:af:03:05:c7:ff:27:28:
7f:02:50:2e:ea:b0:9f:43:73:b0:0a:a0:73:5c:92:23:fe:6b:
cf:5a:30:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:35:44 2026 by rpki-client