Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iiYu24RJQdtdNDcJHEtzpCHiqw0.roa
File: iiYu24RJQdtdNDcJHEtzpCHiqw0.roa (raw, json)
Hash identifier: AMekGpdqi/5BzSgz7rK8ePSLIMDlKNvtMp2uYDi5Gp4=
Subject key identifier: 8A:26:2E:DB:84:49:41:DB:5D:34:37:09:1C:4B:73:A4:21:E2:AB:0D
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019FB2165681793CF9C78BAC0394CB5C3D4F
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iiYu24RJQdtdNDcJHEtzpCHiqw0.roa
Signing time: Thu 30 Jul 2026 08:13:56 +0000
ROA not before: Thu 30 Jul 2026 08:13:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200325
IP address blocks: 185.120.23.0/24 maxlen: 32
185.190.83.0/24 maxlen: 32
194.156.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:16:56:81:79:3c:f9:c7:8b:ac:03:94:cb:5c:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jul 30 08:13:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a262edb844941db5d3437091c4b73a421e2ab0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ca:c4:fd:a6:d8:59:4f:93:d3:6b:c7:ec:72:
af:2e:03:c5:40:30:49:d8:47:ee:63:25:ad:85:04:
87:58:50:51:57:54:24:96:92:15:36:7c:c9:ce:4d:
8c:c8:bd:1b:9f:ef:d3:74:42:28:44:67:02:b0:bf:
a9:32:d4:61:4f:b2:24:4a:15:bb:f4:42:b5:d7:a8:
a4:a0:3a:5e:3d:4c:82:21:1f:31:05:42:5f:36:9f:
5c:4e:bf:25:db:cd:5f:ce:4c:0d:8d:e9:5f:c7:57:
99:5e:c0:70:75:58:b7:9b:be:59:8f:a6:72:be:82:
8f:e6:12:b2:c4:5c:77:1c:49:a7:0c:40:3e:78:8f:
7b:28:e7:88:1d:c1:ed:59:1a:a1:4c:8d:a7:5b:f9:
b8:bf:1b:f5:e7:bf:9c:fa:b3:2e:94:3a:fc:be:5c:
71:11:57:b8:7a:55:65:09:31:de:91:34:e8:53:2d:
fe:d6:bc:5f:9e:2a:1d:9b:b6:d9:08:15:36:54:0d:
75:ed:20:de:04:ff:b5:6a:8e:b6:05:51:58:d6:23:
77:d8:b6:16:ac:60:9b:78:f2:31:d5:dc:43:81:62:
d5:2b:f6:5d:7e:aa:fc:3e:ef:2e:c9:e1:dc:a6:04:
15:82:f0:b1:c0:23:30:15:7d:66:a8:ee:3f:b9:fc:
27:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:26:2E:DB:84:49:41:DB:5D:34:37:09:1C:4B:73:A4:21:E2:AB:0D
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/iiYu24RJQdtdNDcJHEtzpCHiqw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.23.0/24
185.190.83.0/24
194.156.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:f8:29:43:9d:20:f6:73:4a:51:b1:fa:08:bd:8f:96:f8:c9:
ec:b2:9e:d5:3c:25:6a:c8:84:67:74:ca:95:25:b8:58:a0:22:
18:4d:8e:61:96:97:4e:f3:a2:7f:14:6d:4a:e6:fd:dd:65:c6:
54:66:91:c3:56:80:85:1e:db:7f:53:0c:51:a8:f6:6a:a9:34:
74:bb:47:cf:a2:cf:6b:dd:a4:98:56:b8:3c:ac:e6:78:4a:44:
39:27:75:70:1f:bc:e7:68:5c:cd:14:da:d9:1a:d8:de:83:fe:
ab:f2:ac:82:8c:74:14:36:1c:09:2d:25:f7:74:d1:f6:42:bd:
18:e3:e9:4c:8b:0f:90:be:ce:6e:50:4c:c9:04:4a:5b:e5:44:
63:16:f8:66:4f:f0:4d:af:ca:c1:84:98:e3:98:84:97:62:8f:
28:8b:ac:18:d0:39:16:e9:d5:51:10:ca:a6:da:63:80:00:c6:
07:94:90:6a:cd:23:73:81:8c:86:ef:c4:29:bf:ab:fc:e4:90:
4c:27:f9:d6:f3:35:5c:65:27:69:c5:fc:81:7a:78:7e:1e:18:
c0:d1:3c:2c:17:5f:76:90:57:ef:2e:2b:43:84:f1:ed:a7:4b:
7f:cd:2d:cb:3b:a4:11:7b:31:28:be:da:b1:a9:fe:a5:3a:e7:
58:0a:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:01:02 2026 by rpki-client