Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a4M3JILme0oolpzwA6TeVIujSv8.roa
File: a4M3JILme0oolpzwA6TeVIujSv8.roa (raw, json)
Hash identifier: fapGqUYf+Gu5+U9dssVmV2eafVfahWxeCm3fKCIZGCI=
Subject key identifier: 6B:83:37:24:82:E6:7B:4A:28:96:9C:F0:03:A4:DE:54:8B:A3:4A:FF
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A099EF8B43D61AD8E129DECEB6A00ABD1D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a4M3JILme0oolpzwA6TeVIujSv8.roa
Signing time: Sun 13 Sep 2026 08:43:27 +0000
ROA not before: Sun 13 Sep 2026 08:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 185.210.152.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 08:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:ef:8b:43:d6:1a:d8:e1:29:de:ce:b6:a0:0a:bd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 13 08:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6b83372482e67b4a28969cf003a4de548ba34aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:a7:8c:37:1e:ec:2e:4d:94:14:66:71:44:
da:2e:c0:fc:a7:36:c5:2a:e2:87:67:56:a2:e0:9d:
bc:75:ae:cd:1b:8e:e1:bb:df:86:c0:64:92:49:05:
e3:90:e1:7d:43:28:87:d1:8c:5f:c6:e9:ee:56:f2:
fd:8b:a0:0b:76:01:04:39:fb:6d:ed:c4:f2:6f:1f:
43:7f:47:6e:85:b9:29:4e:f1:83:0f:47:fd:c8:2b:
fa:57:2b:c8:56:12:22:0a:6c:e8:7d:05:4e:80:cd:
8d:be:23:4b:68:40:72:0b:89:b0:07:e7:11:d1:75:
4d:4d:7c:08:f0:a8:3e:83:31:1f:b1:c4:b3:c5:1a:
8b:76:b6:83:4d:54:30:ae:e9:cf:bf:c8:19:af:21:
88:28:1a:9b:6c:8b:67:0e:68:82:a6:b8:49:79:79:
ae:c3:99:1c:31:bb:df:cd:bb:37:33:40:a2:8e:73:
de:89:4d:76:19:d7:5c:65:99:3a:96:da:7b:66:cb:
ab:33:e2:2f:7d:78:ed:a7:bb:b7:45:75:bd:fd:1b:
1b:b3:56:d2:3b:5d:84:69:38:6f:ec:c0:f0:03:31:
f1:e1:59:ba:cc:63:0a:50:bd:50:29:26:d2:c2:73:
99:3e:e3:f6:07:f7:2e:d0:c9:97:a5:7b:aa:c3:30:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:83:37:24:82:E6:7B:4A:28:96:9C:F0:03:A4:DE:54:8B:A3:4A:FF
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/a4M3JILme0oolpzwA6TeVIujSv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.152.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
28:e7:81:0f:d5:d2:e3:22:7d:80:67:25:85:a9:48:64:f9:3d:
6a:e3:14:ff:3a:47:26:2d:c7:9f:f3:1b:1e:35:8d:a1:52:10:
48:c0:be:6a:a8:81:87:8c:d7:7f:d4:8c:8b:12:8d:a6:a9:91:
4a:1b:1f:d1:2a:5a:8f:ae:24:dd:0d:cf:52:d5:33:0e:98:99:
c0:6b:3e:4a:6c:23:e0:8e:d3:24:3c:2f:a1:f9:23:91:59:ad:
97:24:06:6d:b2:7a:4d:24:f0:09:ce:f3:bf:32:47:cd:59:a1:
10:ff:39:2c:7a:b8:3b:57:9e:36:3f:4d:79:01:5f:ec:1c:c7:
17:78:e9:b4:9e:67:97:3c:76:44:43:3c:c3:92:35:ab:b8:54:
35:86:d5:94:99:c1:b0:ea:f7:50:71:53:b6:14:ac:07:2d:98:
08:fe:9d:76:3d:ce:24:d0:8d:a0:31:23:4a:c1:aa:5d:07:d9:
82:ce:29:52:5f:95:d2:6a:06:8d:01:c7:e3:5a:58:2f:e8:e8:
59:3b:b4:3e:16:2e:2e:fd:31:15:1a:d4:5f:d7:bd:fd:f6:e8:
4b:15:28:1d:3e:7a:e8:64:6d:88:47:a3:6a:f4:84:47:4d:2c:
b4:e0:cb:e7:20:87:10:ef:28:60:a9:bf:b2:11:ef:2b:38:90:
d5:75:6c:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCZ74tD1hrY4SnezragCr0dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwOTEzMDg0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjgzMzcyNDgyZTY3YjRhMjg5NjljZjAwM2E0ZGU1NDhiYTM0YWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu+njDce7C5NlBRmcUTaLsD8pzbF
KuKHZ1ai4J28da7NG47hu9+GwGSSSQXjkOF9QyiH0YxfxunuVvL9i6ALdgEEOftt
7cTybx9Df0duhbkpTvGDD0f9yCv6VyvIVhIiCmzofQVOgM2NviNLaEByC4mwB+cR
0XVNTXwI8Kg+gzEfscSzxRqLdraDTVQwrunPv8gZryGIKBqbbItnDmiCprhJeXmu
w5kcMbvfzbs3M0CijnPeiU12GddcZZk6ltp7ZsurM+IvfXjtp7u3RXW9/Rsbs1bS
O12EaThv7MDwAzHx4Vm6zGMKUL1QKSbSwnOZPuP2B/cu0MmXpXuqwzAl7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGuDNySC5ntKKJac8AOk3lSLo0r/MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvYTRNM0pJTG1lMG9vbHB6d0E2VGVWSXVqU3Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudKYAwQA
wpMRMA0GCSqGSIb3DQEBCwUAA4IBAQAo54EP1dLjIn2AZyWFqUhk+T1q4xT/Okcm
Lcef8xseNY2hUhBIwL5qqIGHjNd/1IyLEo2mqZFKGx/RKlqPriTdDc9S1TMOmJnA
az5KbCPgjtMkPC+h+SORWa2XJAZtsnpNJPAJzvO/MkfNWaEQ/zkserg7V542P015
AV/sHMcXeOm0nmeXPHZEQzzDkjWruFQ1htWUmcGw6vdQcVO2FKwHLZgI/p12Pc4k
0I2gMSNKwapdB9mCzilSX5XSagaNAcfjWlgv6OhZO7Q+Fi4u/TEVGtRf17399uhL
FSgdPnroZG2IR6Nq9IRHTSy04MvnIIcQ7yhgqb+yEe8rOJDVdWwX
-----END CERTIFICATE-----
Generated at Sun Sep 13 19:30:40 2026 by rpki-client