Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uSQe_pSOJ0YThfOnX4LAX8ROYOo.roa
File: uSQe_pSOJ0YThfOnX4LAX8ROYOo.roa (raw, json)
Hash identifier: 4ie2TBr6bW1PGQkYie8RgGj92T8BcO1k0wBq3j294O8=
Subject key identifier: B9:24:1E:FE:94:8E:27:46:13:85:F3:A7:5F:82:C0:5F:C4:4E:60:EA
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A099EDB64DD497CFA7BFFE4387529473DC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uSQe_pSOJ0YThfOnX4LAX8ROYOo.roa
Signing time: Sun 13 Sep 2026 08:41:27 +0000
ROA not before: Sun 13 Sep 2026 08:41:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 185.220.249.0/24 maxlen: 24
185.230.54.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:99:ed:b6:4d:d4:97:cf:a7:bf:fe:43:87:52:94:73:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 13 08:41:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9241efe948e27461385f3a75f82c05fc44e60ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:9d:1b:dc:e2:ad:c0:39:8f:51:15:35:a7:
db:41:eb:89:03:97:3e:a1:08:d2:c5:5a:26:88:4d:
03:f3:5c:89:eb:f2:90:0d:16:dc:7d:a4:ce:38:27:
ed:b3:43:f4:8c:35:0b:2e:be:52:6c:64:06:43:5c:
bb:af:96:80:ac:79:87:a9:69:28:0e:34:6d:cd:2c:
49:ae:7b:d1:bb:12:a5:01:37:71:a8:8d:6e:b2:e0:
f2:71:8c:ea:21:c8:d0:51:11:9a:9b:7f:ec:61:0a:
67:66:fb:53:49:19:9f:6b:51:c2:17:34:85:8f:e7:
a7:9b:5d:25:22:07:cd:a8:32:aa:00:22:0e:0e:9c:
27:56:73:27:92:0d:62:c4:36:f8:74:01:f2:a0:5d:
35:86:6e:d1:a0:22:e4:fe:f6:f4:b1:fe:2c:8a:ae:
88:45:c6:4f:2b:9e:29:09:ef:f4:f3:46:c2:a0:32:
48:da:f2:cf:f5:a6:2f:46:2b:b6:c5:22:d3:8c:ff:
41:44:b0:4b:2d:b9:21:25:e6:58:79:c9:bb:47:cc:
b5:8a:27:f2:ac:5a:b1:b7:06:d4:10:7e:7f:c1:d4:
c8:13:6d:cc:dc:a8:ac:4f:3d:c7:4f:29:9f:a8:b6:
c5:4b:5e:20:7b:04:fb:ea:46:1d:50:e8:69:c4:7b:
af:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:24:1E:FE:94:8E:27:46:13:85:F3:A7:5F:82:C0:5F:C4:4E:60:EA
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uSQe_pSOJ0YThfOnX4LAX8ROYOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.249.0/24
185.230.54.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:01:e7:c2:4d:4c:d9:bb:0e:24:98:be:ce:7f:bb:3a:8b:ef:
5b:c4:79:0d:29:2f:9d:31:9c:b1:0c:df:89:8c:bd:ea:41:4f:
de:1c:e1:a0:d0:88:15:45:41:01:70:45:c3:5e:5d:a2:37:85:
27:01:66:ef:ab:b6:51:12:9c:1a:cf:8b:fc:06:61:5d:82:00:
46:31:38:6e:ae:5e:3d:be:fd:43:02:e1:b3:4d:77:dc:0d:bf:
08:eb:c0:d2:76:3c:61:9f:ba:5d:51:b4:a2:e1:75:53:ec:bf:
94:b5:7b:51:91:be:2c:d9:9a:52:65:2b:1a:cd:67:12:87:e5:
28:c1:5f:1d:e3:0f:79:7e:84:29:f8:c4:d6:3c:46:85:0d:08:
da:12:b4:e9:7e:a8:10:91:ab:df:4c:02:d6:dc:8f:40:c9:b6:
1d:2a:fd:bc:ce:c7:ff:70:cb:e1:57:f3:4f:f2:0d:a5:17:f3:
9c:3f:52:27:da:4d:be:4d:43:fb:34:bc:bb:22:fc:b2:6e:e0:
1e:f6:f2:3f:3a:20:a0:5a:27:e4:19:bd:1b:76:47:4f:b3:2a:
46:a1:22:ed:10:c1:48:2d:74:6c:f4:7e:57:c0:bf:f8:a1:e1:
45:ab:72:19:5e:55:00:e9:1b:db:a9:a2:0e:33:9e:b1:2f:38:
e9:df:a9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:31:07 2026 by rpki-client