Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cS2Nw7ylOaXHrK6JmAsO4jlKkQM.roa
File: cS2Nw7ylOaXHrK6JmAsO4jlKkQM.roa (raw, json)
Hash identifier: XcJEyFJIGkkYyc7bWyQXFTJCofcncarKaBjWgP1xIzA=
Subject key identifier: 71:2D:8D:C3:BC:A5:39:A5:C7:AC:AE:89:98:0B:0E:E2:39:4A:91:03
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019F7F1D9C739F53988768FE787DCF403CA8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cS2Nw7ylOaXHrK6JmAsO4jlKkQM.roa
Signing time: Mon 20 Jul 2026 10:41:14 +0000
ROA not before: Mon 20 Jul 2026 10:41:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 185.246.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:1d:9c:73:9f:53:98:87:68:fe:78:7d:cf:40:3c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 20 10:41:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=712d8dc3bca539a5c7acae89980b0ee2394a9103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:45:eb:4b:3c:e1:3a:5c:9c:e7:0b:87:55:6a:
b3:ab:11:ee:43:d9:b2:0f:fb:8b:8d:9d:12:bd:cd:
35:7b:c6:b1:e6:e3:8a:65:95:0e:71:3f:61:d4:3a:
2c:ff:50:c2:2f:9f:a9:a1:53:a8:b9:81:c7:f0:6f:
bb:5e:39:f9:de:2c:b2:3d:ed:df:a9:fc:38:a5:68:
5c:0b:37:a3:00:49:f5:7d:86:e2:a7:bf:a8:7b:03:
38:67:f5:4e:97:25:a0:8b:80:78:b5:1b:5f:3d:2c:
17:78:05:13:49:00:db:d0:c5:e2:8c:6e:fd:62:d0:
cf:e3:32:11:e8:91:db:61:2d:95:7d:cd:49:88:d3:
af:58:37:66:72:7c:dc:e4:d5:d6:3c:63:6b:4c:7d:
d1:73:d6:a8:1f:0b:75:78:b4:a1:00:59:e6:9b:18:
76:72:d1:02:73:c1:36:45:b2:41:76:d0:c7:59:58:
2c:c4:70:72:00:29:bf:b7:88:93:ca:f1:ee:e8:80:
72:de:64:07:9b:00:be:81:9c:6d:9d:64:61:5b:37:
04:32:c1:b0:8b:a7:cc:d7:7c:d6:3f:59:e9:2b:04:
93:93:c8:86:20:3d:f1:82:29:b4:cd:56:ca:da:4e:
2b:e3:5c:cf:18:d6:fb:9a:aa:32:9e:a2:1b:ff:8e:
6e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2D:8D:C3:BC:A5:39:A5:C7:AC:AE:89:98:0B:0E:E2:39:4A:91:03
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cS2Nw7ylOaXHrK6JmAsO4jlKkQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:91:8d:59:3b:1b:42:72:c8:68:be:e1:4a:51:88:25:f6:40:
45:cc:56:40:51:43:73:56:d3:71:cb:ac:d4:fd:75:49:90:be:
f1:96:5a:5c:23:ce:8a:2a:76:50:e7:6f:97:30:63:c5:a7:56:
29:1d:80:ed:48:89:59:78:db:9e:14:a3:4d:14:2f:7c:6e:8f:
fa:8a:c7:ae:de:02:77:6d:11:13:7a:5a:f0:42:9c:9f:7c:64:
09:15:83:19:81:29:ea:ca:e3:22:64:f5:9e:b7:d4:89:af:90:
bb:34:90:05:ef:f8:4a:d8:b6:4e:05:24:e2:e6:ce:3e:73:62:
98:df:28:c4:09:63:73:c9:20:33:c5:8a:27:de:4f:8d:eb:4b:
f1:e1:85:a8:49:35:b8:25:82:65:92:c1:ec:05:79:54:db:a6:
0d:92:5e:55:bc:47:17:87:02:af:7f:ce:de:d2:b6:15:2b:25:
f6:39:a4:94:f0:f4:70:97:fe:b8:4d:c1:77:f1:8c:09:f0:2d:
9d:ad:33:e3:3f:f7:18:2e:e0:84:e0:73:24:55:b0:a1:e4:00:
a1:bb:ff:21:02:90:e0:e2:f6:c9:7f:07:06:8d:c1:49:07:01:
78:6f:dd:38:2a:8b:2a:5a:23:83:2f:db:e6:5f:5b:92:d3:44:
f2:cd:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:47:05 2026 by rpki-client