Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa
File: kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa (raw, json)
Hash identifier: o5DgZsV413bg/omkWA7yGgiwOhEayAL+iXDGxDZd72U=
Subject key identifier: 92:26:05:00:46:7E:9B:A7:42:0A:A6:54:5D:75:CC:ED:49:31:12:E4
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 019B7FF1E64EA86D90CE60A8ECE3692BED37
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa
Signing time: Fri 02 Jan 2026 18:21:57 +0000
ROA not before: Fri 02 Jan 2026 18:21:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47935
IP address blocks: 185.106.134.0/24 maxlen: 24
2a10:1680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:e6:4e:a8:6d:90:ce:60:a8:ec:e3:69:2b:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Jan 2 18:21:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92260500467e9ba7420aa6545d75cced493112e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:1f:b0:ac:98:68:05:f6:5c:88:93:c6:e1:
b5:8a:71:46:43:21:e4:51:db:65:18:db:d5:e9:ed:
aa:a9:01:27:ad:04:cf:cd:81:fe:62:d9:68:b1:ff:
49:7b:f8:d4:e7:26:fb:78:b9:cc:99:29:81:1f:08:
d5:f6:66:dc:02:d1:f7:74:1c:18:1e:08:d4:4b:04:
1d:c8:22:cf:4c:fe:66:3c:f8:5f:a1:a2:9b:c2:d5:
e2:25:a6:8c:02:bf:cc:ec:ab:30:5e:14:d1:15:f8:
40:35:55:b6:e6:67:56:89:d3:2b:58:95:fc:2b:c4:
29:69:ad:25:e4:42:54:a7:67:f3:da:a3:b0:0a:01:
57:31:9a:63:a9:77:68:47:a4:7c:fc:85:bb:6c:78:
8c:e8:6d:f0:28:95:47:b3:73:a5:0a:6b:c7:79:07:
a4:59:73:42:6c:85:1d:9a:9a:a5:a3:3c:7c:62:2f:
7b:79:9d:0f:10:3c:51:35:6d:76:f3:cc:01:63:83:
f6:49:d8:9c:e2:5e:a8:37:3d:fb:b9:20:7d:d7:d5:
d4:1a:45:c2:0a:9a:1d:fa:f8:c3:8d:e7:d1:b9:2d:
57:85:55:1f:4f:1f:10:32:de:70:32:6e:c4:60:12:
22:4d:43:a3:04:22:1a:f6:79:47:00:3f:50:65:c6:
7c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:05:00:46:7E:9B:A7:42:0A:A6:54:5D:75:CC:ED:49:31:12:E4
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/kiYFAEZ-m6dCCqZUXXXM7UkxEuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.134.0/24
IPv6:
2a10:1680::/32
Signature Algorithm: sha256WithRSAEncryption
0d:ae:24:fd:42:a5:e4:28:aa:1d:76:10:a3:0a:80:26:8a:3b:
07:0f:69:0a:a5:95:db:58:8d:4b:16:15:da:81:a5:3b:55:a8:
b1:1d:d8:19:51:7c:99:da:d7:d8:3e:f9:0d:63:18:16:25:dc:
58:a0:18:d3:38:ac:b4:26:dd:76:1f:1e:0c:7c:f6:39:41:25:
6a:2f:19:3c:25:af:66:98:70:e2:7c:a6:c0:4a:84:29:26:db:
c0:f2:53:c8:fd:2e:10:af:a1:a2:01:2b:78:f3:fb:c2:61:93:
9b:ab:46:60:01:44:98:3f:7c:26:6a:df:67:f2:ff:34:54:6a:
66:6f:8f:6d:b0:a0:a6:25:05:ea:3c:03:e8:93:24:2e:20:5f:
3c:67:0a:76:dc:6d:c8:b7:98:71:f8:5f:1d:42:df:4f:7c:d9:
e0:c5:db:f2:9f:e9:93:d9:a9:07:ae:0e:79:8c:bb:91:a1:96:
9f:85:b5:1a:89:9f:a8:27:c5:2c:53:9f:20:91:55:14:59:66:
b4:0a:d6:ba:cb:97:34:65:1d:ed:34:0a:a3:db:73:7a:f3:1d:
4f:fa:25:a7:25:c3:c4:0b:1f:8e:a1:d2:ec:10:10:37:34:63:
4d:bf:d4:f1:49:68:73:d2:4e:13:2d:e6:22:2f:ac:e0:54:a5:
5f:50:f7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:36:08 2026 by rpki-client