Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qvNwztQMNkOZtSDTsAjK00tVYHs.roa
File: qvNwztQMNkOZtSDTsAjK00tVYHs.roa (raw, json)
Hash identifier: dkwBPkfDG0E7LpTC6VmzeYLagZlK+lFQFDRSadBCdac=
Subject key identifier: AA:F3:70:CE:D4:0C:36:43:99:B5:20:D3:B0:08:CA:D3:4B:55:60:7B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A13958F40BDCC336BC4447FAF0050C8966
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qvNwztQMNkOZtSDTsAjK00tVYHs.roa
Signing time: Wed 14 Oct 2026 07:38:13 +0000
ROA not before: Wed 14 Oct 2026 07:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218524
IP address blocks: 185.214.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:58:f4:0b:dc:c3:36:bc:44:47:fa:f0:05:0c:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 14 07:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaf370ced40c364399b520d3b008cad34b55607b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:6a:0b:e3:3c:38:25:2e:a5:e3:5d:10:99:
61:37:9a:89:e1:0f:ba:2c:e5:54:7e:15:a3:41:4d:
79:e0:3c:e4:db:a5:1e:3e:be:a5:18:97:03:2e:75:
fa:16:ad:bb:2a:ae:17:3d:e8:96:b5:e7:b6:0a:11:
7f:01:2b:33:84:0e:9b:9c:23:e4:55:37:15:5e:10:
14:58:8d:4d:9e:75:74:91:c6:47:78:8c:fd:e6:c1:
f6:0a:8b:d0:3c:1f:54:a4:14:06:2d:e9:b2:56:24:
74:b7:47:f5:05:21:d7:ce:86:d1:19:5b:2e:8b:09:
05:17:3c:17:cd:77:9d:54:23:e9:92:78:20:5f:0c:
fd:09:ee:ab:9d:93:ae:a8:bf:b2:08:92:f4:26:4d:
2c:c0:9a:5a:16:cf:e8:c8:19:2e:d7:ca:4e:1f:76:
8c:7d:a1:af:c5:79:11:f2:d4:95:57:5e:8f:77:21:
20:28:d0:3b:de:99:db:33:bd:86:f4:5a:c2:30:14:
9f:8b:b7:8d:a2:bf:27:39:41:9d:cb:4c:f1:c0:65:
01:4e:7c:84:1e:2d:8c:72:85:42:56:36:fc:ce:87:
44:aa:04:d0:b6:57:b1:f2:3c:77:22:0b:d2:bd:c4:
16:ee:e7:9e:24:14:27:7f:68:0f:07:9a:12:8a:27:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F3:70:CE:D4:0C:36:43:99:B5:20:D3:B0:08:CA:D3:4B:55:60:7B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qvNwztQMNkOZtSDTsAjK00tVYHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.108.0/24
Signature Algorithm: sha256WithRSAEncryption
76:cc:c6:20:e5:8b:b7:01:c7:53:e3:a1:fc:f0:92:26:64:f0:
e0:82:b7:d0:60:18:62:ad:e8:cf:07:5f:78:44:a7:6c:4e:d1:
ed:20:20:70:70:43:36:ea:88:f3:a4:21:63:f8:00:82:9d:60:
78:5c:34:88:91:e7:61:88:86:18:b6:38:12:30:34:ef:9c:a1:
db:27:dc:09:41:08:19:33:be:e1:35:09:0c:86:0e:fd:5b:26:
88:43:a8:83:e5:c7:03:c8:69:b3:29:ac:89:a0:be:b5:25:09:
74:dd:68:54:b5:8e:3e:87:e3:a2:9c:4f:88:2c:7d:e7:33:76:
10:e9:e0:4c:b1:90:d6:9d:bb:78:06:b6:81:e3:b4:6c:42:da:
e1:cc:1c:57:6d:85:76:83:68:b2:6f:2c:d2:aa:a0:a9:86:a9:
e2:ec:1e:fa:5c:46:a5:ae:68:d4:16:ea:61:b7:db:79:f5:a5:
7e:b3:f8:90:d4:40:7f:16:4e:ad:d8:f9:03:0a:e2:31:ea:6a:
5b:3b:f6:f2:bf:af:f4:e3:2f:17:4e:6d:77:c4:c0:fc:cb:da:
ad:57:12:e3:c4:52:9c:72:70:50:9b:d1:94:1c:f2:e0:b3:7a:
b0:28:93:08:5e:99:72:f2:c9:8b:17:7e:a1:5c:2f:66:28:a2:
ad:cc:85:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE5WPQL3MM2vERH+vAFDIlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYxMDE0MDczODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWYzNzBjZWQ0MGMzNjQzOTliNTIwZDNiMDA4Y2FkMzRiNTU2MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDVqC+M8OCUupeNdEJlhN5qJ4Q+6
LOVUfhWjQU154Dzk26UePr6lGJcDLnX6Fq27Kq4XPeiWtee2ChF/ASszhA6bnCPk
VTcVXhAUWI1NnnV0kcZHeIz95sH2CovQPB9UpBQGLemyViR0t0f1BSHXzobRGVsu
iwkFFzwXzXedVCPpknggXwz9Ce6rnZOuqL+yCJL0Jk0swJpaFs/oyBku18pOH3aM
faGvxXkR8tSVV16PdyEgKNA73pnbM72G9FrCMBSfi7eNor8nOUGdy0zxwGUBTnyE
Hi2McoVCVjb8zodEqgTQtlex8jx3IgvSvcQW7ueeJBQnf2gPB5oSiifiDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKrzcM7UDDZDmbUg07AIytNLVWB7MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvcXZOd3p0UU1Oa09adFNEVHNBakswMHRWWUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudZsMA0G
CSqGSIb3DQEBCwUAA4IBAQB2zMYg5Yu3AcdT46H88JImZPDggrfQYBhirejPB194
RKdsTtHtICBwcEM26ojzpCFj+ACCnWB4XDSIkedhiIYYtjgSMDTvnKHbJ9wJQQgZ
M77hNQkMhg79WyaIQ6iD5ccDyGmzKayJoL61JQl03WhUtY4+h+OinE+ILH3nM3YQ
6eBMsZDWnbt4BraB47RsQtrhzBxXbYV2g2iybyzSqqCphqni7B76XEalrmjUFuph
t9t59aV+s/iQ1EB/Fk6t2PkDCuIx6mpbO/byv6/04y8XTm13xMD8y9qtVxLjxFKc
cnBQm9GUHPLgs3qwKJMIXply8smLF36hXC9mKKKtzIXl
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:55 2026 by rpki-client