Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/sY6OPme-4XW1wydMpIocxtPWZI0.roa
File: sY6OPme-4XW1wydMpIocxtPWZI0.roa (raw, json)
Hash identifier: /VQFULaP2rFxSXp7ymnfARVbmPYlOSUriNDMXj7WzDo=
Subject key identifier: B1:8E:8E:3E:67:BE:E1:75:B5:C3:27:4C:A4:8A:1C:C6:D3:D6:64:8D
Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Certificate serial: 01A11D12B1C0FB08589E19D6765247F23E39
Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/sY6OPme-4XW1wydMpIocxtPWZI0.roa
Signing time: Thu 08 Oct 2026 19:52:06 +0000
ROA not before: Thu 08 Oct 2026 19:52:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208324
IP address blocks: 176.105.236.0/24 maxlen: 24
176.105.237.0/24 maxlen: 24
176.105.238.0/24 maxlen: 24
176.105.239.0/24 maxlen: 24
185.132.248.0/24 maxlen: 24
185.132.249.0/24 maxlen: 24
185.132.250.0/24 maxlen: 24
185.132.251.0/24 maxlen: 24
195.7.9.0/24 maxlen: 24
195.7.10.0/24 maxlen: 24
195.7.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:12:b1:c0:fb:08:58:9e:19:d6:76:52:47:f2:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15
Validity
Not Before: Oct 8 19:52:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b18e8e3e67bee175b5c3274ca48a1cc6d3d6648d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:dc:8d:06:34:2c:f1:8f:28:3d:c1:af:62:
4c:a9:93:18:50:4c:c3:a7:56:6a:fb:0b:55:3d:cb:
08:4f:30:ba:6e:b7:dc:f1:ea:26:29:52:09:ad:ce:
b5:e9:2a:71:bd:61:c4:83:c0:9e:5b:c4:d3:4c:36:
53:36:7b:4c:36:be:3e:ac:a0:03:e3:a2:9a:1f:3a:
fa:77:83:29:b4:b3:2d:12:49:90:39:bd:8e:5e:55:
11:ee:8c:43:93:f3:98:3b:de:b2:7c:67:07:0d:99:
f5:17:5b:ff:9e:66:62:e3:11:fd:6d:53:cd:37:a6:
d8:ff:f0:f7:6a:e1:58:e4:60:c6:49:14:c4:5b:47:
71:90:19:21:3e:88:31:b3:b8:be:ff:a9:82:d7:53:
af:86:72:be:5c:24:b0:bb:b3:0a:9d:11:eb:b2:de:
19:a2:7f:0f:d1:4b:6a:67:6e:e9:fb:8d:7e:38:e1:
de:ee:2a:36:f4:7b:46:ad:0c:53:c8:ab:40:1c:eb:
30:0a:d0:5e:a8:9e:eb:03:1e:4f:4a:95:92:4c:fb:
dd:f9:be:e3:9a:df:51:38:55:e6:f8:a0:b0:44:86:
e4:d4:dd:88:0f:e7:81:d6:41:68:35:ee:01:d9:2f:
6c:77:e5:8c:c6:2a:10:21:0c:c4:8b:f3:b4:9f:96:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:8E:3E:67:BE:E1:75:B5:C3:27:4C:A4:8A:1C:C6:D3:D6:64:8D
X509v3 Authority Key Identifier:
keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/sY6OPme-4XW1wydMpIocxtPWZI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.236.0/22
185.132.248.0/22
195.7.9.0-195.7.11.255
Signature Algorithm: sha256WithRSAEncryption
99:a8:2a:0b:20:c4:dc:3a:ba:31:98:90:47:38:bc:c3:0a:2d:
7e:f1:c2:e2:da:69:67:74:dd:23:07:bd:4b:50:77:c1:04:06:
4c:71:b0:c8:70:28:dd:99:6e:03:0c:3b:23:66:58:09:1a:36:
a5:b1:25:7a:f7:e1:4f:bc:c2:fe:84:08:53:45:1a:6e:63:2b:
8f:84:f3:39:fe:43:94:cf:59:e3:a9:30:69:b7:4c:07:98:b6:
ab:13:35:46:ae:69:64:fe:ef:cb:4b:f3:7e:b2:b0:3d:20:6b:
73:2c:20:ff:84:06:42:6d:f8:1f:20:84:b1:6b:c5:4c:cc:8c:
1c:01:09:ee:01:75:5d:f8:98:94:89:84:c2:c7:6a:03:ab:c6:
9e:d7:fe:c8:12:59:14:4f:78:ef:d8:be:0d:41:8b:0a:e4:26:
65:a8:56:cd:5a:fe:ae:04:fa:a9:76:60:73:3f:d1:ed:87:77:
9a:4b:88:d4:ad:a2:10:0d:5b:e6:3f:60:33:75:4f:a7:61:15:
5f:e8:d4:43:30:3a:c4:d6:0a:5e:ce:d9:1b:85:ba:3e:0d:28:
ac:f9:70:af:d8:d2:39:71:68:77:0a:fb:cf:4f:8c:fa:12:c6:
31:2e:d2:94:a9:4a:8a:71:e8:ab:65:01:15:d5:f4:55:7c:a5:
f8:13:70:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:31:53 2026 by rpki-client