Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sLcQGkC7B_od41OsWc1BN9eoeDE.roa
File: sLcQGkC7B_od41OsWc1BN9eoeDE.roa (raw, json)
Hash identifier: Iyih3DvwLppgQNOnfvMx0qlss5j+GcxNtH7qPQetk4U=
Subject key identifier: B0:B7:10:1A:40:BB:07:FA:1D:E3:53:AC:59:CD:41:37:D7:A8:78:31
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A153E4B16BCF6CB0BDDAF9F51D446CC337
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sLcQGkC7B_od41OsWc1BN9eoeDE.roa
Signing time: Mon 19 Oct 2026 11:20:58 +0000
ROA not before: Mon 19 Oct 2026 11:20:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 185.225.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:e4:b1:6b:cf:6c:b0:bd:da:f9:f5:1d:44:6c:c3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 19 11:20:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0b7101a40bb07fa1de353ac59cd4137d7a87831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a2:54:53:12:e7:f1:74:57:5b:d7:c4:65:52:
e6:b9:43:3d:9a:ba:69:34:ab:10:c7:eb:ed:05:a5:
37:9e:3a:e1:37:73:c4:f8:4e:69:ce:b5:41:11:cd:
15:cd:af:51:09:34:5c:92:31:ed:98:bc:e6:dc:77:
e2:71:7c:e1:2f:8d:30:45:7a:e7:e4:cb:79:57:6d:
81:a8:fa:71:cd:b9:58:9f:ef:b7:a8:08:c0:b7:b5:
b9:13:71:4d:a2:eb:20:00:cf:fa:73:ca:e1:02:6c:
40:17:03:ca:08:ae:98:e7:69:dd:92:93:00:14:0a:
1a:e2:de:f2:0a:98:81:71:49:e7:22:6a:71:94:1d:
af:d5:16:6d:36:35:03:62:bf:52:10:3e:51:cb:ed:
91:83:5d:0e:0f:90:4a:21:77:fd:37:1b:8c:3c:98:
14:74:3e:32:7e:e9:ba:87:04:d2:54:e5:fa:4c:00:
a4:84:c9:c9:96:0b:04:b2:5c:65:37:b2:8f:f9:6f:
14:3e:44:2e:c2:0e:2a:b2:6b:45:f2:29:c8:e9:41:
d2:cc:53:bc:0a:ff:9b:db:7a:76:25:02:f2:17:62:
39:4c:9f:64:ab:0d:3e:d3:af:9d:9c:25:92:1a:71:
bd:b2:c9:72:31:d2:46:37:fb:5e:45:d5:f1:79:55:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B7:10:1A:40:BB:07:FA:1D:E3:53:AC:59:CD:41:37:D7:A8:78:31
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sLcQGkC7B_od41OsWc1BN9eoeDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:0a:2e:1f:a5:78:7a:c3:a3:53:cd:23:da:94:35:43:cc:4d:
d6:47:dc:75:ac:e8:5b:14:98:bb:cc:1c:f9:e5:d7:57:ab:05:
0b:80:67:9a:f9:93:44:11:cb:2e:d6:a6:46:77:7c:93:52:aa:
e4:f3:e6:c3:7c:54:9d:60:24:56:5a:5d:da:b9:27:ac:db:6c:
49:ee:f0:3f:90:48:78:03:a7:35:ae:92:db:d7:03:60:54:40:
a3:22:cc:3c:53:ce:93:8d:26:4b:16:66:d0:35:e8:f2:f5:a9:
3a:25:cf:d0:6f:eb:1b:b3:dc:bb:37:1e:b3:24:17:e0:2e:7e:
f2:a6:d9:33:ff:f4:75:f1:19:24:7f:69:c8:7e:98:92:6d:67:
a0:7d:ba:42:33:c9:42:03:4a:9d:d3:59:e0:89:55:8f:5f:da:
7a:b1:21:ee:3f:e2:1e:6f:a3:88:73:76:5b:e5:ca:2e:38:7c:
22:be:46:06:3b:55:af:aa:fa:81:70:33:10:04:71:44:a8:53:
0d:a0:c8:ca:ba:08:0a:44:b2:76:05:4d:02:ec:e8:14:db:59:
e7:65:84:37:f3:a0:73:d4:a6:23:a4:d9:98:65:08:38:81:6e:
aa:20:80:75:46:eb:4b:4d:99:4f:c8:ff:e0:b3:8e:7e:df:43:
da:99:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:41:03 2026 by rpki-client