Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/osZgVkNp9QvbPY5Byje_V8G7_IA.roa
File: osZgVkNp9QvbPY5Byje_V8G7_IA.roa (raw, json)
Hash identifier: hWB8tmqFOh1ADAbCcPRUaZll3HYfxUBh3rZQhgQS9Kc=
Subject key identifier: A2:C6:60:56:43:69:F5:0B:DB:3D:8E:41:CA:37:BF:57:C1:BB:FC:80
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1CA05CE66EE17494AB1DB73A4E67A05CF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/osZgVkNp9QvbPY5Byje_V8G7_IA.roa
Signing time: Wed 11 Nov 2026 09:52:20 +0000
ROA not before: Wed 11 Nov 2026 09:52:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.223.152.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:05:ce:66:ee:17:49:4a:b1:db:73:a4:e6:7a:05:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 11 09:52:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2c660564369f50bdb3d8e41ca37bf57c1bbfc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:5c:e2:75:c8:84:a2:4a:10:c7:c4:09:c3:
a9:30:bd:5e:e8:5c:ef:05:d4:7a:dc:11:a6:4b:4c:
5f:54:af:74:0b:9b:2b:fd:b3:a0:b1:a2:08:8d:32:
96:f8:83:98:d0:52:2a:6e:3c:f7:6f:b8:7d:1f:23:
7b:de:49:45:90:e9:0e:f8:c6:72:c6:d4:1a:99:49:
f2:69:f7:d3:1a:a3:3a:50:a2:f7:62:e6:6d:07:0e:
25:72:86:c9:66:50:73:e6:25:47:0e:33:b1:ae:a0:
9a:9f:cc:e9:bf:ab:77:9d:2f:8f:95:24:4b:57:0d:
ed:ad:d8:e1:4e:6e:d9:f2:2a:18:69:fe:70:12:55:
59:41:99:dc:3a:38:c8:6a:12:2c:ba:17:a1:5b:1d:
0b:1e:7d:4c:84:0c:e0:cd:94:d8:4e:da:3d:9b:f1:
b5:cc:c4:4f:83:4c:ea:7e:66:73:63:46:f1:89:8f:
a5:7f:d1:0f:46:96:dc:a7:11:7b:d6:81:a9:53:f8:
97:c0:8a:8d:d5:fa:12:1b:6e:1a:21:9c:2c:73:05:
ac:ce:98:e2:8b:b6:a7:b3:1c:08:61:b1:d6:ac:a9:
49:55:72:20:15:6f:9d:74:a9:03:94:d7:18:9b:5c:
e7:ef:87:38:f5:13:97:39:9e:ac:50:09:55:f6:5f:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C6:60:56:43:69:F5:0B:DB:3D:8E:41:CA:37:BF:57:C1:BB:FC:80
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/osZgVkNp9QvbPY5Byje_V8G7_IA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.206.248.0/24
185.218.22.0/24
185.223.152.0/24
185.246.115.0/24
193.58.144.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f7:69:a3:f9:c3:ed:64:e5:4e:74:8a:20:23:91:17:ca:9a:
4e:ea:0d:d2:b3:2c:c3:2a:7a:81:f7:7d:99:23:36:60:9a:27:
9d:fd:10:5b:4f:fb:30:0c:11:f5:4b:10:e0:2c:63:e0:fc:3b:
9d:cf:5e:5a:bc:f4:1b:74:a6:3a:33:80:91:a7:d0:95:a4:04:
77:11:79:6a:34:e0:68:55:f9:10:44:d4:02:12:d6:72:43:77:
0c:81:d2:54:bb:32:c5:bb:31:f6:bb:bb:6a:b6:17:b3:49:8f:
34:27:42:18:f4:00:01:fd:b1:30:bc:a1:56:6e:29:0b:dc:90:
29:a1:a8:5c:e6:e8:60:1f:ef:34:1d:a7:38:1d:4f:3d:ad:f7:
46:c9:aa:28:fb:18:bc:d5:34:fd:11:88:81:74:3d:7b:0a:56:
97:a9:96:d6:86:66:a0:16:da:31:87:96:e4:8e:5c:9b:79:44:
d8:f4:02:11:56:d6:83:9a:df:a2:1f:7d:1e:e5:cf:7b:23:24:
b9:98:08:52:dd:ea:12:29:5e:f0:d8:7b:8d:3f:86:1f:dc:3f:
ce:06:0b:45:28:87:ce:81:49:57:f8:1f:66:ce:2f:2f:95:08:
e3:ae:56:75:aa:f8:77:d7:12:9d:79:0e:cb:63:2f:ad:33:82:
44:e8:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:14 2026 by rpki-client