Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xYaefJ3eGqBncdryEhIN80XA-X0.roa
File: xYaefJ3eGqBncdryEhIN80XA-X0.roa (raw, json)
Hash identifier: X3wc66+jMekcG5d10BkpTs1o4m5pHQyLVq6IRYBBdjE=
Subject key identifier: C5:86:9E:7C:9D:DE:1A:A0:67:71:DA:F2:12:12:0D:F3:45:C0:F9:7D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A037F5C34AAD50891CCF9FAD3D6E0314D9
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xYaefJ3eGqBncdryEhIN80XA-X0.roa
Signing time: Tue 25 Aug 2026 08:07:28 +0000
ROA not before: Tue 25 Aug 2026 08:07:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 185.210.152.0/24 maxlen: 24
185.230.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:f5:c3:4a:ad:50:89:1c:cf:9f:ad:3d:6e:03:14:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 25 08:07:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5869e7c9dde1aa06771daf212120df345c0f97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:3a:4c:70:93:a5:0e:b2:20:56:3f:5c:6b:
bc:23:4b:6d:5c:0b:34:6a:5d:85:ed:af:c1:f4:be:
9e:37:0c:93:7e:b8:e8:40:10:87:4a:68:02:b6:a4:
1a:28:04:bd:a7:06:b9:bf:8b:8b:fc:f1:d6:1c:be:
3f:18:b2:00:64:9d:a8:c4:4e:77:1c:47:d3:07:ab:
c9:84:08:53:3b:52:83:10:b8:f4:ef:d2:20:82:02:
3c:67:71:98:e6:0c:bf:ed:dc:a7:b9:6c:b3:3d:9f:
93:19:af:07:d4:40:5d:0c:1c:c8:59:9b:55:95:49:
af:be:19:b9:4c:c1:8e:d6:11:c0:16:d0:54:1c:97:
da:36:b2:2c:ca:16:8a:6b:b3:96:a7:4f:46:aa:c6:
3a:c5:0c:04:c0:1b:66:fa:35:b5:ac:62:1b:f1:ac:
55:27:09:7f:e5:87:dd:11:e1:f6:71:bf:73:46:71:
1c:fc:df:6e:8c:40:af:b5:b8:7f:ee:fc:48:bf:b2:
cd:fa:e2:f9:c9:9a:51:8d:9d:7b:99:3a:ac:d7:5b:
59:ae:c0:22:1a:40:16:2a:79:5b:ca:c9:87:fd:46:
6c:d4:80:d8:63:09:11:8c:c2:f1:60:13:37:e6:cf:
c6:63:fe:46:7f:6d:81:0b:84:50:03:3a:25:a9:01:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:9E:7C:9D:DE:1A:A0:67:71:DA:F2:12:12:0D:F3:45:C0:F9:7D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/xYaefJ3eGqBncdryEhIN80XA-X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.152.0/24
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:46:9a:12:72:b0:9f:79:84:2b:6d:cf:ee:d0:72:6b:3d:02:
ed:71:cb:55:01:65:9e:54:a5:ae:dc:18:b0:22:38:cb:8e:3f:
ed:4b:73:42:1c:64:35:76:d2:5a:67:77:18:01:c8:75:fa:20:
f8:c4:c6:87:2d:0a:0b:07:d4:3e:f1:61:68:1d:fc:fc:08:cf:
e1:4e:a2:b0:48:54:ae:b4:2a:82:c7:4a:65:74:ec:35:5e:6e:
fa:a8:92:94:fc:a1:0a:2a:98:9e:b1:2b:a5:1c:56:69:e3:81:
07:b1:11:02:3c:82:16:42:5f:25:cc:5a:37:03:2a:a7:2c:ea:
cb:5c:ac:00:d9:4a:11:ac:18:d0:72:77:83:7e:25:f5:1a:73:
8a:d7:85:7e:d0:20:2e:1c:e4:03:5d:77:d1:b9:7b:0e:21:00:
ce:c0:e1:a0:ad:6c:d5:2f:91:d2:12:6f:97:4b:71:65:d4:d1:
34:09:57:b2:e9:ff:ab:59:9c:ef:d0:e2:c4:2a:e5:81:2a:65:
fb:14:5c:79:57:d9:8f:2a:2f:bc:4d:37:75:ce:40:9c:4d:a3:
1b:5f:dc:c3:90:53:bd:26:ba:00:f5:c0:0d:2f:1a:a1:ee:1b:
88:bd:c7:b0:8d:49:18:75:a5:5b:33:29:4b:e0:59:0a:b0:ef:
ed:24:df:8f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaA39cNKrVCJHM+frT1uAxTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjYwODI1MDgwNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTg2OWU3YzlkZGUxYWEwNjc3MWRhZjIxMjEyMGRmMzQ1YzBmOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVo6THCTpQ6yIFY/XGu8I0ttXAs0
al2F7a/B9L6eNwyTfrjoQBCHSmgCtqQaKAS9pwa5v4uL/PHWHL4/GLIAZJ2oxE53
HEfTB6vJhAhTO1KDELj079IgggI8Z3GY5gy/7dynuWyzPZ+TGa8H1EBdDBzIWZtV
lUmvvhm5TMGO1hHAFtBUHJfaNrIsyhaKa7OWp09GqsY6xQwEwBtm+jW1rGIb8axV
Jwl/5YfdEeH2cb9zRnEc/N9ujECvtbh/7vxIv7LN+uL5yZpRjZ17mTqs11tZrsAi
GkAWKnlbysmH/UZs1IDYYwkRjMLxYBM35s/GY/5Gf22BC4RQAzolqQEpDwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMWGnnyd3hqgZ3Ha8hISDfNFwPl9MB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEveFlhZWZKM2VHcUJuY2RyeUVoSU44MFhBLVgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudKYAwQA
ueY1MA0GCSqGSIb3DQEBCwUAA4IBAQBORpoScrCfeYQrbc/u0HJrPQLtcctVAWWe
VKWu3BiwIjjLjj/tS3NCHGQ1dtJaZ3cYAch1+iD4xMaHLQoLB9Q+8WFoHfz8CM/h
TqKwSFSutCqCx0pldOw1Xm76qJKU/KEKKpiesSulHFZp44EHsRECPIIWQl8lzFo3
AyqnLOrLXKwA2UoRrBjQcneDfiX1GnOK14V+0CAuHOQDXXfRuXsOIQDOwOGgrWzV
L5HSEm+XS3Fl1NE0CVey6f+rWZzv0OLEKuWBKmX7FFx5V9mPKi+8TTd1zkCcTaMb
X9zDkFO9JroA9cANLxqh7huIvcewjUkYdaVbMylL4FkKsO/tJN+P
-----END CERTIFICATE-----
Generated at Wed Aug 26 15:03:22 2026 by rpki-client