Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/evZ4YRwANvFQHgrvcTtZN6fYTp4.roa
File: evZ4YRwANvFQHgrvcTtZN6fYTp4.roa (raw, json)
Hash identifier: xbMWrIn9irBjVKCdBk09YRNJ6fLG1Pbye4Wgwvw/qRk=
Subject key identifier: 7A:F6:78:61:1C:00:36:F1:50:1E:0A:EF:71:3B:59:37:A7:D8:4E:9E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019CED97BBBF3691C4BA8E42D59DC476F776
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/evZ4YRwANvFQHgrvcTtZN6fYTp4.roa
Signing time: Sat 14 Mar 2026 18:24:30 +0000
ROA not before: Sat 14 Mar 2026 18:24:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 185.232.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:97:bb:bf:36:91:c4:ba:8e:42:d5:9d:c4:76:f7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 14 18:24:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7af678611c0036f1501e0aef713b5937a7d84e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:de:07:b8:40:bf:02:65:57:20:8d:0a:e9:7a:
25:24:f9:e4:7a:21:32:63:a1:95:04:28:75:cc:a8:
19:6b:05:4f:e9:e8:b4:48:e5:b6:bf:2d:9e:97:ae:
a7:c8:74:56:a2:ec:09:f9:bc:bd:d8:c5:39:18:13:
4e:6d:f2:e2:bd:50:e4:05:54:fd:14:bb:c3:a8:30:
d8:21:0a:9f:07:ce:68:99:a4:5b:a1:12:60:03:30:
7f:09:b5:cb:a9:e6:59:91:a0:df:f6:57:bc:30:a5:
9e:42:dc:28:d4:c4:e2:34:94:36:cb:0b:20:83:d9:
b3:50:3c:57:7d:09:4c:ba:dd:88:43:ee:32:91:68:
e2:7c:17:7c:2e:63:47:da:5d:a1:31:bc:66:60:41:
da:de:c0:f0:dd:56:3f:75:3f:d2:ff:7f:dd:82:8f:
c6:af:9c:e7:4c:af:0f:87:62:f4:fa:5e:10:e1:61:
59:bc:b9:03:46:ae:74:b7:4f:5c:e2:25:67:d0:c5:
85:76:07:bb:18:79:ff:11:66:4d:6d:df:d4:68:f8:
6f:13:6a:83:ad:ca:c3:f3:65:1a:bf:b0:5c:4f:f9:
5f:d8:98:58:ff:4c:ae:cb:cd:f0:0e:07:43:e1:de:
ee:eb:1f:08:75:61:4f:ef:1a:6d:0f:18:a6:57:35:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F6:78:61:1C:00:36:F1:50:1E:0A:EF:71:3B:59:37:A7:D8:4E:9E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/evZ4YRwANvFQHgrvcTtZN6fYTp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.232.206.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c1:fd:57:b1:73:34:79:ea:b9:e9:6f:63:52:f3:8f:ac:85:
30:57:89:8e:e3:0c:bc:4e:35:6e:cc:74:ee:ee:18:11:36:f5:
08:ab:66:22:e1:3d:b1:f7:77:83:af:99:87:c7:ef:5b:8a:70:
81:62:9c:b8:a8:92:bf:a1:48:a9:68:bf:ad:38:5c:bd:e3:0c:
66:38:4a:a5:9f:24:b0:50:83:7f:4d:6a:a7:a1:83:92:fb:bd:
b0:0a:9f:97:e0:70:db:3c:65:73:d7:58:5b:ff:83:88:c2:3b:
d3:28:8e:71:8a:d6:96:67:ed:41:8a:15:d4:82:03:f4:86:de:
d8:04:eb:aa:a5:3b:fa:22:c3:a4:88:3c:f6:6c:0c:24:83:03:
70:56:97:8e:cb:11:d3:c0:34:e9:bb:5c:13:c9:57:3c:57:d9:
27:cc:85:81:76:ab:e7:60:56:b0:aa:df:3d:9b:70:d4:8a:69:
1b:ce:d6:b9:a3:9d:ed:02:27:3e:fa:83:da:ea:f2:e6:e9:8c:
52:ac:72:08:fd:e8:d8:dd:3e:38:ba:78:d2:d7:a8:20:6c:8f:
fb:6b:d7:94:da:56:16:e7:55:c4:96:18:d7:d5:f9:bc:50:64:
99:17:29:0e:4d:25:53:c1:86:ab:b0:3c:96:69:66:71:1a:5f:
a3:14:5a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 22:35:09 2026 by rpki-client