Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/yzRLPzoZ2MhOSW7i0nrpyE146LY.roa
File: yzRLPzoZ2MhOSW7i0nrpyE146LY.roa (raw, json)
Hash identifier: tg0E5guX614VfKY7xu5Oj70TAfWl8YuCBCzyhy6b/fk=
Subject key identifier: CB:34:4B:3F:3A:19:D8:C8:4E:49:6E:E2:D2:7A:E9:C8:4D:78:E8:B6
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 019EDECDC7887A2B9AED6059292B3696AC4C
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/yzRLPzoZ2MhOSW7i0nrpyE146LY.roa
Signing time: Fri 19 Jun 2026 07:34:48 +0000
ROA not before: Fri 19 Jun 2026 07:34:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.222.248.0/24 maxlen: 24
185.222.249.0/24 maxlen: 24
185.222.250.0/24 maxlen: 24
185.222.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:cd:c7:88:7a:2b:9a:ed:60:59:29:2b:36:96:ac:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Jun 19 07:34:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb344b3f3a19d8c84e496ee2d27ae9c84d78e8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:db:b0:81:e0:44:04:3e:c2:9a:b0:b0:c6:
a8:87:55:92:3f:29:ae:31:4e:3a:13:ed:50:5f:33:
6b:91:f8:e5:23:b3:1e:c0:81:26:22:8e:b0:ee:95:
45:2d:06:3b:3f:e9:0e:0a:9e:a2:6a:16:19:c5:7a:
36:d9:ca:15:39:8e:9c:ad:53:92:64:e2:ef:fc:f5:
eb:48:fd:45:a7:de:bf:d8:d9:be:be:d8:24:b9:a3:
24:f1:54:2e:71:4e:cd:c7:07:20:3a:d6:b1:72:e6:
5a:04:1a:e1:42:4c:1c:f5:a0:fc:f4:fe:a1:db:53:
df:7e:78:d6:a7:55:c8:d2:5b:4b:bd:21:c7:9e:ef:
ea:95:d7:ff:94:9f:42:2f:3e:7d:e1:49:1f:ac:c9:
e9:b4:19:95:2c:65:fa:f9:26:dc:80:81:a1:73:d2:
69:f8:44:e0:43:2c:ef:3f:b9:c6:60:b3:e0:38:50:
b9:68:4f:60:59:9b:f8:71:2c:67:45:a3:93:07:53:
86:7e:00:d0:f0:8a:6c:3d:77:8b:59:f5:0a:77:5f:
b7:fa:51:5c:42:25:ed:b6:e1:c2:27:c8:8b:f8:9b:
5d:a3:46:8c:92:c8:69:d6:1f:a3:37:e8:ab:a9:92:
44:b6:ac:9e:fd:9d:98:1d:d2:29:e4:b9:85:c9:04:
b3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:34:4B:3F:3A:19:D8:C8:4E:49:6E:E2:D2:7A:E9:C8:4D:78:E8:B6
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/yzRLPzoZ2MhOSW7i0nrpyE146LY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.248.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:75:dd:69:f5:c8:a8:74:0e:c4:4e:d7:25:76:df:69:8f:a3:
f4:6a:af:e8:0c:57:28:3e:50:76:e2:d4:1f:7c:52:7b:26:1a:
fb:5c:85:6c:05:b0:73:f7:05:d0:4d:b4:80:6a:a2:70:8b:2c:
d1:07:7e:33:83:c7:11:31:1f:5d:e8:ef:e6:c0:3e:67:9d:e3:
52:e1:fa:ff:e7:31:29:af:70:f5:c0:cd:4c:3c:50:f7:f1:10:
b1:dd:30:d1:6a:3b:4d:f3:59:24:2b:1d:70:ce:58:78:d6:15:
53:4d:fd:60:89:a0:a1:f0:ab:0b:4f:4b:ac:8c:fb:4a:9c:16:
ed:c9:0c:9a:27:9e:7b:17:6e:74:7c:5f:a7:db:25:a1:82:60:
3c:0f:15:d1:7a:3e:23:9b:af:e9:9b:e1:f3:f7:52:1b:0f:d7:
16:0b:7e:ed:18:a7:40:53:fd:80:18:c4:ee:2d:60:f1:6c:10:
42:58:e8:f8:05:35:64:f8:16:78:a6:70:ef:f7:bd:0a:90:86:
24:5b:54:72:5c:3e:7c:2e:b1:8f:47:38:1a:37:38:64:a5:af:
c0:ce:8b:f9:42:1c:d1:44:15:f1:d1:ee:4a:30:d0:6a:b3:1d:
ad:a4:ad:66:c4:2c:d1:c2:85:76:94:7d:da:4b:9b:7e:35:54:
99:c9:51:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7ezceIeiua7WBZKSs2lqxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZTE4ZmFkYWVmNzIzMmQzMTYxODg2YWNiZWE4YWIzMjNj
ZjM1NzAwHhcNMjYwNjE5MDczNDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjM0NGIzZjNhMTlkOGM4NGU0OTZlZTJkMjdhZTljODRkNzhlOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyLbsIHgRAQ+wpqwsMaoh1WSPymu
MU46E+1QXzNrkfjlI7MewIEmIo6w7pVFLQY7P+kOCp6iahYZxXo22coVOY6crVOS
ZOLv/PXrSP1Fp96/2Nm+vtgkuaMk8VQucU7NxwcgOtaxcuZaBBrhQkwc9aD89P6h
21PffnjWp1XI0ltLvSHHnu/qldf/lJ9CLz594UkfrMnptBmVLGX6+SbcgIGhc9Jp
+ETgQyzvP7nGYLPgOFC5aE9gWZv4cSxnRaOTB1OGfgDQ8IpsPXeLWfUKd1+3+lFc
QiXttuHCJ8iL+Jtdo0aMkshp1h+jN+irqZJEtqye/Z2YHdIp5LmFyQSzcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMs0Sz86GdjITklu4tJ66chNeOi2MB8GA1UdIwQY
MBaAFJjhj62u9yMtMWGIasvqirMjzzVwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2Njct
NzIxODg1NTY0NmUzLzEveXpSTFB6b1oyTWhPU1c3aTBucnB5RTE0NkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wZjE4ZGYtMjZlZi00ZWM2LTg2NjctNzIxODg1NTY0NmUz
LzEvbU9HUHJhNzNJeTB4WVlocXktcUtzeVBQTlhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud74MA0G
CSqGSIb3DQEBCwUAA4IBAQChdd1p9ciodA7ETtcldt9pj6P0aq/oDFcoPlB24tQf
fFJ7Jhr7XIVsBbBz9wXQTbSAaqJwiyzRB34zg8cRMR9d6O/mwD5nneNS4fr/5zEp
r3D1wM1MPFD38RCx3TDRajtN81kkKx1wzlh41hVTTf1giaCh8KsLT0usjPtKnBbt
yQyaJ557F250fF+n2yWhgmA8DxXRej4jm6/pm+Hz91IbD9cWC37tGKdAU/2AGMTu
LWDxbBBCWOj4BTVk+BZ4pnDv970KkIYkW1RyXD58LrGPRzgaNzhkpa/Azov5QhzR
RBXx0e5KMNBqsx2tpK1mxCzRwoV2lH3aS5t+NVSZyVHS
-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:51 2026 by rpki-client