Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sOwnZNNclwGCjUdyBfGjcY4uXbU.roa
File: sOwnZNNclwGCjUdyBfGjcY4uXbU.roa (raw, json)
Hash identifier: LNqIrpTXMiu24rCO72CsKgTdJVydtx0KWB328feVzmY=
Subject key identifier: B0:EC:27:64:D3:5C:97:01:82:8D:47:72:05:F1:A3:71:8E:2E:5D:B5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A155F4F420208B1C0F1421A7322E14F69B
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sOwnZNNclwGCjUdyBfGjcY4uXbU.roa
Signing time: Mon 19 Oct 2026 20:57:58 +0000
ROA not before: Mon 19 Oct 2026 20:57:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199496
IP address blocks: 185.196.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:f4:f4:20:20:8b:1c:0f:14:21:a7:32:2e:14:f6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 19 20:57:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0ec2764d35c9701828d477205f1a3718e2e5db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:bc:63:b3:bc:cf:82:78:43:92:5d:a5:e6:
2d:75:6c:8a:60:93:83:9e:5b:61:60:15:84:a4:f6:
5c:59:d8:73:18:4a:f3:56:f4:bb:3b:a9:94:d5:b2:
1a:9c:bc:8f:49:fc:d2:af:87:81:86:a8:46:32:89:
83:63:d9:27:10:d2:9d:97:3a:08:9b:9b:d7:97:32:
c9:02:b7:ef:cf:21:c8:65:5c:b2:69:ae:62:3d:b9:
33:44:e1:ea:6e:0d:6f:df:03:8e:82:26:11:3b:db:
9d:e3:0f:e9:cd:89:9d:42:ce:3d:24:2f:69:53:ee:
3e:94:2f:cc:25:b7:ac:d0:4d:0c:dc:06:ba:07:c5:
4e:de:9f:f8:16:eb:18:8f:6f:9b:be:37:b1:0a:d8:
07:ce:26:9a:d1:02:26:73:31:43:8c:d8:30:94:e6:
20:c0:93:03:d9:0a:db:5e:a9:73:80:53:c1:86:36:
e5:ab:2e:98:3a:bc:d6:2a:f8:88:05:52:52:f7:5f:
54:83:a7:cd:bc:ee:08:d1:29:cc:3f:e7:4b:b9:20:
81:4d:6c:c1:6d:6a:ee:4a:d9:a2:4a:42:d1:dd:3d:
f7:76:21:9f:40:88:74:34:5e:d6:15:e7:0c:3f:af:
95:ed:f6:f0:27:3d:04:9e:cf:5d:5d:15:61:e8:c7:
11:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EC:27:64:D3:5C:97:01:82:8D:47:72:05:F1:A3:71:8E:2E:5D:B5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/sOwnZNNclwGCjUdyBfGjcY4uXbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:f7:2a:54:da:ce:55:bb:a5:ce:64:45:32:f3:e4:bb:a5:43:
82:e7:23:f7:25:42:ea:eb:5b:42:64:a0:cd:62:2a:f0:7a:88:
6f:8e:ec:16:cd:9d:99:63:af:be:7c:5a:a4:8d:11:17:39:80:
64:3e:05:e6:91:48:de:d5:86:29:b1:77:0c:be:da:a3:52:8a:
10:b7:fc:33:58:51:2e:0f:18:1e:6f:e5:dd:9b:b3:e4:ea:9a:
88:51:4c:08:1d:a7:68:04:57:36:f7:29:d1:26:57:aa:3a:c0:
44:04:58:a6:9f:f0:da:06:e7:09:d2:86:ad:bb:e5:3b:6d:89:
a1:80:6b:65:49:4e:be:2c:c4:b5:9a:f1:8e:c6:af:27:33:e5:
38:72:f2:1f:78:ba:3c:4c:ac:e2:0a:bd:fb:f1:f6:ee:41:38:
3b:06:4a:3c:e8:35:f3:52:20:39:f5:11:9f:ad:3c:b9:94:70:
00:5a:f6:6a:d9:ff:53:ef:7e:02:04:12:75:6b:99:96:e4:5d:
68:25:10:2b:30:e5:a0:85:b2:92:07:22:3c:f1:1c:cf:49:21:
7d:b0:e0:fd:eb:35:a8:da:e3:b6:1d:a6:dd:08:b7:e8:9d:b9:
19:c2:50:56:4f:a0:ea:a7:16:96:49:79:93:a5:fa:20:19:0e:
3b:3a:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 06:29:25 2026 by rpki-client