Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qygSKeWZ4trWL1-ye5POijJCFtw.roa
File: qygSKeWZ4trWL1-ye5POijJCFtw.roa (raw, json)
Hash identifier: MewSTgZ+lkp5fPWvu2wnDvmd5iue79xuFHyw8yA0GTY=
Subject key identifier: AB:28:12:29:E5:99:E2:DA:D6:2F:5F:B2:7B:93:CE:8A:32:42:16:DC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A1354A1AA28AD7D98D236C254E2753F737
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qygSKeWZ4trWL1-ye5POijJCFtw.roa
Signing time: Tue 13 Oct 2026 12:43:31 +0000
ROA not before: Tue 13 Oct 2026 12:43:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 176.125.248.0/24 maxlen: 24
185.209.36.0/23 maxlen: 24
185.210.153.0/24 maxlen: 24
185.210.155.0/24 maxlen: 24
185.210.232.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.225.0.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:4a:1a:a2:8a:d7:d9:8d:23:6c:25:4e:27:53:f7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 13 12:43:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab281229e599e2dad62f5fb27b93ce8a324216dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:b0:bb:44:b7:65:8d:ad:82:4e:d6:25:d2:
33:17:c6:58:b2:fa:6b:fa:65:78:28:71:c3:f4:db:
64:d1:24:d8:a7:25:3d:2e:ec:d0:aa:29:1d:09:8c:
58:73:51:e8:b5:0b:96:84:30:5f:4b:54:0c:e2:12:
fe:05:9f:16:8c:e2:16:8b:c7:dd:97:01:a5:d2:bb:
50:63:b6:dc:ce:a0:15:22:f4:97:27:8c:95:ae:18:
5f:72:23:9c:ee:15:cc:87:6f:e9:2b:fd:82:b4:b6:
f8:6a:19:c7:b4:66:94:cc:e7:bd:6d:c2:30:86:43:
ed:0e:86:96:f0:40:ab:8d:b5:6c:97:45:4e:56:53:
50:57:3e:59:52:83:58:71:69:17:b5:dd:14:b2:a0:
45:7c:ae:9f:ce:8c:bb:28:4d:6c:6d:14:d7:34:b1:
e8:82:dc:82:a5:a5:56:06:6d:e8:ed:fd:a7:49:e3:
47:52:8a:fd:38:ab:f2:5a:8b:bc:5d:37:76:52:7f:
f4:f7:23:10:40:b3:3e:1a:1d:21:55:35:54:7c:f2:
9e:e7:c5:d1:3e:dd:07:22:52:65:5d:9b:22:ed:69:
78:3f:73:b0:9a:9e:b0:34:12:00:ff:da:d6:26:da:
87:85:04:ce:f4:d5:67:ec:2b:d5:21:da:b9:81:f6:
90:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:12:29:E5:99:E2:DA:D6:2F:5F:B2:7B:93:CE:8A:32:42:16:DC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/qygSKeWZ4trWL1-ye5POijJCFtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
185.209.36.0/23
185.210.153.0/24
185.210.155.0/24
185.210.232.0/24
185.210.235.0/24
185.225.0.0/24
185.227.145.0/24
185.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b2:7b:2e:ea:e0:41:3b:38:ec:3b:a7:34:73:26:75:17:9e:
ea:8b:03:dc:09:cf:2c:11:e5:71:b4:b0:a2:8b:c4:d8:02:32:
0c:6d:e4:17:53:d2:3a:71:54:8c:63:76:40:12:9f:8c:09:c1:
1d:74:45:46:a7:0d:11:bf:06:54:57:c6:ef:bc:e1:e0:18:bd:
33:38:93:69:40:48:1e:58:7e:b8:09:ef:f3:c6:b4:ad:e7:49:
70:d4:ca:6b:f4:f4:65:61:87:fe:87:8e:a5:11:a8:4b:cf:3b:
b6:e1:7e:5a:20:2e:b1:e8:c0:07:ad:0f:02:44:d1:ea:04:85:
2e:18:d9:56:2f:be:64:f4:80:ee:c8:84:32:24:80:50:4e:5c:
f7:94:07:df:06:7f:62:76:c7:db:b4:c2:44:84:07:9a:22:83:
78:ca:e9:0f:df:8c:80:0f:8e:7a:c6:a5:cf:a2:08:14:25:ef:
4b:2a:6f:23:51:99:14:40:8c:d4:ec:59:73:b9:02:9a:55:10:
32:b9:e2:69:b0:44:2d:89:f0:81:7f:d3:ff:0d:1a:b6:70:62:
d1:f7:c9:29:32:4b:dd:97:dd:aa:cb:52:0c:e6:a8:53:97:45:
3a:df:2a:5d:db:b2:17:24:be:2d:5b:43:12:5e:36:77:66:d1:
18:9c:42:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:06:29 2026 by rpki-client