Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q-vYJQt6DHI-hroD5WeNX9NurZY.roa
File: q-vYJQt6DHI-hroD5WeNX9NurZY.roa (raw, json)
Hash identifier: PVklkeDI5DsTKYMVhpxj3c5+zYqSNKzK3NPxNVyn1cw=
Subject key identifier: AB:EB:D8:25:0B:7A:0C:72:3E:86:BA:03:E5:67:8D:5F:D3:6E:AD:96
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A023B9093B8AC0768F8DF0FE6311F6078D
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q-vYJQt6DHI-hroD5WeNX9NurZY.roa
Signing time: Fri 21 Aug 2026 09:48:44 +0000
ROA not before: Fri 21 Aug 2026 09:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214663
IP address blocks: 185.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 02:32:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:b9:09:3b:8a:c0:76:8f:8d:f0:fe:63:11:f6:07:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 21 09:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abebd8250b7a0c723e86ba03e5678d5fd36ead96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bc:43:4d:ea:a6:c0:84:3d:e0:e9:8f:9b:22:
3d:b9:10:db:e3:36:fb:eb:fd:a2:6c:b5:09:38:ca:
f8:55:97:82:0e:2e:21:06:70:13:72:dd:b0:23:aa:
00:2f:81:a2:a9:a0:f3:4a:0e:03:5f:64:cf:19:bf:
1c:33:bd:49:20:09:36:7e:ac:b8:06:92:b8:92:51:
fe:3f:e1:22:61:4b:a1:50:5a:90:4f:d4:35:c5:e8:
f9:d1:29:b6:08:b3:71:fd:7c:33:73:82:cb:8d:6d:
b8:60:bd:ab:06:2c:d2:ff:d0:d7:e1:50:3f:f1:2b:
b2:29:f7:3e:26:76:c8:70:27:00:e0:d5:6b:2e:6d:
55:04:6a:8d:42:c3:9d:af:45:fd:cc:92:07:e7:54:
d7:9d:8e:d3:3d:b7:6f:37:fc:42:5e:55:b5:bf:04:
6d:a9:5c:45:6a:4e:e6:b1:39:92:d6:3a:97:45:b6:
8c:90:3e:b0:d4:04:82:25:5c:84:4a:c7:7d:3f:e0:
67:35:73:17:b8:c3:26:63:98:cb:75:d2:0a:0c:b4:
d4:6d:13:2d:4b:b9:07:b9:98:83:4f:15:14:e0:ce:
ca:1f:d1:84:46:a0:d8:75:74:33:ea:c3:5d:b6:8d:
2a:ee:e3:21:64:38:16:cd:62:c1:f7:d6:ee:87:de:
c0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EB:D8:25:0B:7A:0C:72:3E:86:BA:03:E5:67:8D:5F:D3:6E:AD:96
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/q-vYJQt6DHI-hroD5WeNX9NurZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:ca:84:18:8b:04:a3:dc:30:58:49:e8:5b:c5:d8:04:22:a0:
84:58:88:a5:33:3b:72:37:8b:cc:67:c7:4e:3d:1c:e6:08:30:
4e:21:10:66:8a:54:42:93:f4:58:29:aa:50:40:45:6d:7e:ff:
42:9a:87:5c:0e:8e:b0:7e:47:7e:2e:6e:18:c3:a4:55:5e:60:
a3:96:67:b0:ef:a0:52:51:0e:2e:d7:61:91:84:07:61:b1:04:
8b:00:50:b3:db:68:4d:3f:85:69:bd:c9:3e:89:2a:51:a8:8b:
05:90:10:15:7f:99:f9:21:1d:10:10:59:a3:b8:b6:b0:95:03:
db:d3:88:58:84:c0:94:3d:c4:c6:d2:31:9f:e5:38:33:25:dd:
c1:4f:78:d2:f6:26:6d:eb:f7:aa:1f:48:c6:14:0c:31:9e:03:
d5:0f:21:1f:e3:0d:73:72:4f:0f:af:48:a2:c5:58:34:0d:39:
7b:4d:84:ac:79:d5:52:77:8c:93:08:26:bf:23:88:60:41:60:
35:d7:02:2f:83:01:81:09:1f:c8:1d:0a:1a:52:50:c7:88:d5:
92:a4:3c:f1:2e:6e:b4:11:1c:87:ee:b2:ec:f0:11:09:b8:43:
7b:74:1b:b1:fe:7c:95:1e:c2:2e:6d:39:73:fa:46:92:97:c1:
88:56:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 09:11:54 2026 by rpki-client