Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qYJ8RcC69PS8dQHjcc2b09LbLe4.roa
File: qYJ8RcC69PS8dQHjcc2b09LbLe4.roa (raw, json)
Hash identifier: /+IjBP55eJ02B8qXJQkTuKM8JR0R2hnSMSlGlkq0Wf8=
Subject key identifier: A9:82:7C:45:C0:BA:F4:F4:BC:75:01:E3:71:CD:9B:D3:D2:DB:2D:EE
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019C8A1184086154229263E90050F5CDEE2B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qYJ8RcC69PS8dQHjcc2b09LbLe4.roa
Signing time: Mon 23 Feb 2026 10:35:29 +0000
ROA not before: Mon 23 Feb 2026 10:35:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214663
IP address blocks: 185.223.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8a:11:84:08:61:54:22:92:63:e9:00:50:f5:cd:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 23 10:35:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9827c45c0baf4f4bc7501e371cd9bd3d2db2dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:a3:70:dc:76:31:19:9d:a8:3b:2e:e3:39:
41:29:2c:d9:9d:e4:96:fb:66:e4:fc:64:59:e2:11:
29:1c:20:17:10:fb:c7:dd:03:e9:93:17:59:73:37:
92:43:c9:c5:35:fd:4b:58:87:ba:0a:44:d5:93:96:
48:75:40:72:8c:28:83:2e:cc:f7:4b:bf:31:05:60:
62:6d:50:06:93:c9:f8:b7:d5:c1:f9:3c:fd:c6:64:
c9:9e:85:2b:44:46:60:e1:90:c9:70:3a:02:53:d4:
a7:6f:ef:32:24:11:b1:e4:cf:23:7e:d8:5f:77:c1:
5d:4e:53:97:8e:df:45:ce:d4:0a:e3:8b:c8:68:af:
a4:d1:a6:d7:bf:38:bc:93:1a:ca:e8:8f:c2:15:3c:
f7:1b:7e:7c:8c:a3:3e:6a:1f:5a:39:90:f4:a5:f0:
f5:4a:24:1e:56:c7:5e:b6:36:94:11:fd:95:61:65:
5a:07:c5:16:6f:6b:67:29:64:b6:fd:b0:4f:93:76:
8e:45:8c:ad:00:49:77:37:09:79:1e:ae:a0:3f:2e:
75:5d:65:52:e6:7d:f2:2e:77:3b:ea:81:f5:16:27:
99:c3:58:5a:fb:08:87:89:00:76:8b:e7:18:f5:d5:
f5:fd:dc:7f:94:5d:e6:55:32:31:90:51:ae:75:46:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:7C:45:C0:BA:F4:F4:BC:75:01:E3:71:CD:9B:D3:D2:DB:2D:EE
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qYJ8RcC69PS8dQHjcc2b09LbLe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.80.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:38:42:69:50:df:3b:a5:5c:71:b1:fe:86:4f:66:e0:0c:83:
db:7d:e4:d4:78:09:1c:6d:4c:68:a9:03:e3:5b:4e:f4:3e:b3:
9a:82:9b:55:9d:ee:d4:ac:bd:27:dd:f5:17:63:96:64:21:6a:
8c:a0:2c:52:60:f0:51:14:c6:29:fe:6d:b2:7b:cd:fb:f8:2d:
20:fe:b0:c3:77:7c:86:58:9b:dd:8e:39:06:53:ea:4a:ad:9c:
20:16:c2:f6:9d:f3:df:0f:31:f0:78:e3:2f:44:9b:7a:43:07:
cc:d8:f8:55:6b:8b:a3:81:64:b0:14:7e:10:b9:b3:5d:55:6a:
b2:45:cb:c7:0a:cb:1a:d7:e6:9a:22:ef:5d:22:24:e7:c4:75:
2e:8a:bc:d6:29:c4:77:72:19:ab:81:c3:4a:fb:a6:43:ee:a7:
5a:f2:69:4b:6b:4f:a0:5e:c5:6d:02:db:3a:66:1e:e8:98:2f:
ed:6a:03:9d:82:34:16:1f:05:b4:c0:dc:ab:a7:a2:2e:eb:f2:
95:fa:d6:8a:2c:9e:a5:73:71:21:12:9c:96:f4:48:9f:67:8d:
17:85:d7:94:b8:bf:c4:19:88:18:4f:d7:3a:3f:8b:cb:50:12:
22:63:65:42:00:77:d9:97:39:58:f2:95:ce:3a:2a:6d:23:6e:
05:5f:43:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 16:43:17 2026 by rpki-client