Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vQyYdFlgPi2ZEO7gQymawZOItwQ.roa
File: vQyYdFlgPi2ZEO7gQymawZOItwQ.roa (raw, json)
Hash identifier: xOAiKenWrHQgfbUUiwzu7oXMeccj7djPZ7bbL4Gw5hc=
Subject key identifier: BD:0C:98:74:59:60:3E:2D:99:10:EE:E0:43:29:9A:C1:93:88:B7:04
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A0D2DE45966DCE7587606CBB7F7F7B9879
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vQyYdFlgPi2ZEO7gQymawZOItwQ.roa
Signing time: Thu 24 Sep 2026 10:02:57 +0000
ROA not before: Thu 24 Sep 2026 10:02:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48958
IP address blocks: 185.202.205.0/24 maxlen: 24
185.202.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:45:96:6d:ce:75:87:60:6c:bb:7f:7f:7b:98:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 24 10:02:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0c987459603e2d9910eee043299ac19388b704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4d:5e:94:99:7c:46:91:e7:44:21:d1:cc:29:
90:7e:d0:10:48:f3:2b:6d:cd:a9:42:56:cc:59:bb:
64:12:72:54:49:e5:63:cc:da:22:67:fd:3a:18:87:
0b:84:54:69:51:82:c2:61:aa:f1:fb:9f:98:d7:55:
ce:c0:9e:13:2e:61:17:f0:96:bb:05:a4:53:ad:44:
ee:d9:39:bb:e3:9e:85:42:57:fa:54:f9:c2:dc:66:
df:23:4c:12:14:3b:50:b8:b0:71:e1:6d:bd:ae:0a:
fd:b0:b5:d8:94:be:6a:fb:be:e0:b9:6c:d0:e6:b8:
b9:17:90:1a:0e:55:23:d2:c5:d3:df:88:b5:73:e9:
ac:6a:f5:be:52:b1:62:d0:fe:54:b4:ab:ef:50:68:
8b:e7:7c:3b:30:8b:a8:87:0b:ae:fe:c2:1f:6d:68:
78:9d:2b:a0:2c:88:2f:61:3c:09:05:66:f6:4c:90:
0a:a6:88:58:8d:0e:d8:de:43:bf:3f:55:92:8b:56:
6e:0d:b0:ed:4d:a3:33:61:1d:73:60:52:14:03:e7:
cc:06:4a:17:cf:05:c6:79:45:0b:f8:8e:e4:7a:7f:
04:9f:a1:95:8b:d4:ab:18:7e:7d:1b:1b:64:8e:18:
92:23:7c:de:2c:9c:c1:82:4d:0f:5b:82:f6:91:b7:
1a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:98:74:59:60:3E:2D:99:10:EE:E0:43:29:9A:C1:93:88:B7:04
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/vQyYdFlgPi2ZEO7gQymawZOItwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.205.0-185.202.206.255
Signature Algorithm: sha256WithRSAEncryption
53:f9:b7:da:83:e5:66:e7:15:6a:43:a2:85:87:8f:5a:e0:83:
ca:ce:20:a9:9c:12:00:a6:15:7f:86:cc:ec:54:4b:4a:42:90:
c2:83:fd:ea:18:d0:56:e4:e6:21:9c:80:3d:1d:76:ba:4f:f5:
9e:d8:5a:2a:29:93:e3:d2:8e:7e:7a:11:8e:62:b5:97:48:9f:
fc:44:c3:33:42:7f:91:d1:ab:1b:1a:6c:00:ad:54:2b:18:9b:
18:92:ed:f0:a5:09:89:2e:56:d2:64:ab:1e:f9:80:a0:73:7b:
c2:86:6a:a2:a5:e1:44:3d:2c:ea:ee:d5:65:26:68:2d:38:13:
d1:53:b8:80:f5:aa:b6:0d:97:90:3b:a2:e9:b8:33:ba:71:e8:
8a:4f:5a:ae:2c:2c:5c:4f:db:93:ea:4d:71:b7:dd:13:c0:8b:
2c:bb:77:ce:0e:4d:89:b6:5e:e0:5e:aa:59:44:98:a6:2e:79:
c8:2b:db:db:8b:a7:36:cf:88:84:2a:23:a9:56:5f:90:bd:22:
c1:34:a1:60:66:ce:3e:6f:13:ac:73:a1:b0:bc:82:c7:2d:63:
96:f4:30:28:49:69:26:f6:b0:99:1a:9b:2a:d0:52:bf:f6:6d:
28:b1:b4:ff:a9:d6:4a:86:8e:fa:28:22:81:1f:bc:5a:4f:15:
e0:0c:a0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:17:34 2026 by rpki-client