Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sGEAo5_FzCtXTWBMB9BEDJ7CKJE.roa
File: sGEAo5_FzCtXTWBMB9BEDJ7CKJE.roa (raw, json)
Hash identifier: LZwQTyJ91ijI65AgUKzZ8A1f13fKNvKlW2hcQZ1837o=
Subject key identifier: B0:61:00:A3:9F:C5:CC:2B:57:4D:60:4C:07:D0:44:0C:9E:C2:28:91
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0198E5D6A1938DD86A65E59ED938CB32E88B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sGEAo5_FzCtXTWBMB9BEDJ7CKJE.roa
Signing time: Tue 26 Aug 2025 10:05:05 +0000
ROA not before: Tue 26 Aug 2025 10:05:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153997
IP address blocks: 185.227.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e5:d6:a1:93:8d:d8:6a:65:e5:9e:d9:38:cb:32:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 26 10:05:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b06100a39fc5cc2b574d604c07d0440c9ec22891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:c8:77:d4:dd:3c:af:02:e9:ad:ea:c2:37:
10:cf:8d:68:35:5b:0d:dc:c9:10:dd:9a:74:19:2b:
db:d3:e8:c9:f6:91:a5:a8:cf:e0:67:fc:5f:ae:cf:
bb:90:e5:a7:d4:ee:1b:4b:56:a7:79:55:11:4e:49:
95:be:6e:17:90:39:52:6e:16:bb:80:69:26:71:46:
fc:d8:1c:3c:bc:37:ff:14:c0:01:4e:d4:e9:85:ea:
bb:53:56:0d:db:46:7f:e2:20:a8:4b:55:e1:f8:86:
2f:b3:7d:1e:2b:4d:23:56:d2:51:e8:72:46:a6:1d:
83:91:a8:c0:b1:ed:f0:60:32:e8:87:f8:4a:65:67:
4e:fa:a5:a0:67:45:11:22:e4:93:60:55:82:8c:43:
9d:e5:41:73:6d:a5:d6:29:18:8b:20:12:a6:50:7b:
3b:6a:8d:43:a3:0f:03:22:83:66:a5:4d:3f:f8:68:
42:d1:2f:7c:4f:c9:71:82:f0:97:9b:c1:04:a0:54:
a3:9a:fb:24:de:53:78:ac:98:4e:d7:6d:ac:f4:10:
c7:a4:5b:bc:65:48:de:b5:f6:b8:53:30:8c:2c:5f:
c1:f8:11:53:52:d0:47:f3:e6:c0:5e:dc:c2:f5:76:
56:62:2f:df:dc:88:6b:c0:1c:92:09:e8:90:16:1f:
56:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:61:00:A3:9F:C5:CC:2B:57:4D:60:4C:07:D0:44:0C:9E:C2:28:91
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sGEAo5_FzCtXTWBMB9BEDJ7CKJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2d:b0:b1:52:52:cd:30:e5:c9:07:f4:ca:4f:80:5b:bf:ab:
46:a1:64:f4:ea:c3:8c:9b:c1:36:0b:01:fd:fa:7e:45:9c:a4:
90:a8:3d:48:fc:24:ea:d8:d2:5b:24:23:a2:94:25:d2:3c:4f:
9c:e6:39:0e:66:50:3d:81:1a:11:ad:e9:64:6a:89:bf:85:cc:
08:5d:17:ee:90:e8:2d:89:a3:7e:30:fa:10:df:16:c2:9f:ad:
5f:16:fc:83:d7:5b:69:1a:a8:7b:f9:98:9a:91:ac:c2:ad:3a:
e9:bc:27:db:e8:a0:e4:a2:13:0a:61:5c:ee:82:4e:85:f9:fb:
c3:20:e9:f5:a0:01:cb:88:28:9e:08:79:3b:0a:33:4e:14:98:
56:85:c7:42:39:d2:5b:11:c2:f4:57:91:52:c4:4f:f3:32:7f:
8b:36:72:6a:eb:36:49:8f:24:0d:bb:89:27:91:ca:6b:fb:6d:
90:89:6e:d8:9d:11:d1:08:73:f7:98:4a:c8:0e:15:66:b4:23:
5c:b2:7c:60:15:8a:5d:20:67:9f:67:3e:01:fc:e1:31:a8:18:
2d:7c:52:20:eb:60:3c:a3:4a:fc:51:23:f6:7f:40:fb:7f:24:
5e:33:13:fd:79:6f:32:a0:9d:d9:3a:28:09:a6:e3:21:63:b8:
ef:14:8f:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZjl1qGTjdhqZeWe2TjLMuiLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjUwODI2MTAwNTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDYxMDBhMzlmYzVjYzJiNTc0ZDYwNGMwN2QwNDQwYzllYzIyODkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvabId9TdPK8C6a3qwjcQz41oNVsN
3MkQ3Zp0GSvb0+jJ9pGlqM/gZ/xfrs+7kOWn1O4bS1aneVURTkmVvm4XkDlSbha7
gGkmcUb82Bw8vDf/FMABTtTpheq7U1YN20Z/4iCoS1Xh+IYvs30eK00jVtJR6HJG
ph2DkajAse3wYDLoh/hKZWdO+qWgZ0URIuSTYFWCjEOd5UFzbaXWKRiLIBKmUHs7
ao1Dow8DIoNmpU0/+GhC0S98T8lxgvCXm8EEoFSjmvsk3lN4rJhO122s9BDHpFu8
ZUjetfa4UzCMLF/B+BFTUtBH8+bAXtzC9XZWYi/f3IhrwBySCeiQFh9WDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLBhAKOfxcwrV01gTAfQRAyewiiRMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvc0dFQW81X0Z6Q3RYVFdCTUI5QkVESjdDS0pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueOSMA0G
CSqGSIb3DQEBCwUAA4IBAQCjLbCxUlLNMOXJB/TKT4Bbv6tGoWT06sOMm8E2CwH9
+n5FnKSQqD1I/CTq2NJbJCOilCXSPE+c5jkOZlA9gRoRrelkaom/hcwIXRfukOgt
iaN+MPoQ3xbCn61fFvyD11tpGqh7+ZiakazCrTrpvCfb6KDkohMKYVzugk6F+fvD
IOn1oAHLiCieCHk7CjNOFJhWhcdCOdJbEcL0V5FSxE/zMn+LNnJq6zZJjyQNu4kn
kcpr+22QiW7YnRHRCHP3mErIDhVmtCNcsnxgFYpdIGefZz4B/OExqBgtfFIg62A8
o0r8USP2f0D7fyReMxP9eW8yoJ3ZOigJpuMhY7jvFI/c
-----END CERTIFICATE-----
Generated at Fri Sep 19 13:09:44 2025 by rpki-client