Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/7YaL6PY_sroo1Zf11ji6qRi_7lk.roa
File: 7YaL6PY_sroo1Zf11ji6qRi_7lk.roa (raw, json)
Hash identifier: qz6+US2SLy4x2h5vs1rwSF0WDuZKap7YcM7RTdhaafw=
Subject key identifier: ED:86:8B:E8:F6:3F:B2:BA:28:D5:97:F5:D6:38:BA:A9:18:BF:EE:59
Certificate issuer: /CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Certificate serial: 01A0F578F454DF26842F86114C6D70317583
Authority key identifier: 49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/7YaL6PY_sroo1Zf11ji6qRi_7lk.roa
Signing time: Thu 01 Oct 2026 03:18:59 +0000
ROA not before: Thu 01 Oct 2026 03:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 958
IP address blocks: 185.213.60.0/22 maxlen: 22
185.213.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.mft
rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:78:f4:54:df:26:84:2f:86:11:4c:6d:70:31:75:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=493e63e071904e21e1b878ae4550813f0e07ae4a
Validity
Not Before: Oct 1 03:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed868be8f63fb2ba28d597f5d638baa918bfee59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ce:7c:76:7b:c8:e0:45:ba:d3:48:07:b7:d3:
75:98:e5:3e:10:4a:6f:a2:d9:c8:fa:0d:5d:b7:6b:
4c:a5:69:dc:c0:5e:d2:af:89:3c:69:d7:98:5f:d5:
f7:68:b0:84:d4:85:d6:94:fb:72:b3:2b:7a:59:79:
8b:7c:4d:e7:94:79:2d:1f:f2:5f:4e:d5:0e:85:a7:
5e:df:2c:d0:e3:cc:a4:ce:04:75:4f:cf:83:06:70:
35:db:ad:34:88:8e:87:29:6b:89:e1:cc:a6:b9:6b:
37:cf:fd:44:5e:94:4a:f6:20:c9:9a:63:f9:c5:40:
5b:24:fc:75:d2:5d:e0:4c:44:33:73:0b:bc:90:e2:
a9:15:aa:c1:12:60:18:84:81:f9:21:b7:60:9b:b7:
5d:59:4a:32:2a:49:d7:70:f6:8d:b7:7d:2b:c9:83:
8f:ba:4c:46:9b:40:f5:38:d7:d3:4e:02:51:fe:2e:
ff:90:18:5c:8f:0f:fc:6b:34:3d:86:6a:21:e2:14:
38:17:92:d8:d2:ef:db:f9:f5:c7:53:72:14:db:5e:
67:83:9a:e4:2e:79:51:05:8a:c4:05:34:eb:bf:71:
b8:3f:6e:31:6d:8c:a5:e6:0f:f8:94:5b:c0:ad:29:
9e:43:c2:c8:f9:b0:95:59:fa:fa:32:a3:57:32:02:
25:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:8B:E8:F6:3F:B2:BA:28:D5:97:F5:D6:38:BA:A9:18:BF:EE:59
X509v3 Authority Key Identifier:
keyid:49:3E:63:E0:71:90:4E:21:E1:B8:78:AE:45:50:81:3F:0E:07:AE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ST5j4HGQTiHhuHiuRVCBPw4Hrko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/7YaL6PY_sroo1Zf11ji6qRi_7lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/140e67-c5ff-4859-adc5-0cbc22dd044a/1/ST5j4HGQTiHhuHiuRVCBPw4Hrko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.60.0/22
Signature Algorithm: sha256WithRSAEncryption
da:f2:52:24:c3:12:8a:e1:8d:5c:35:00:36:06:87:c2:51:51:
9d:6e:44:27:9d:44:66:ec:56:82:f9:9a:a4:b2:a1:be:3b:d5:
d5:d4:eb:f4:ec:41:fb:3e:6d:eb:a4:6e:70:16:38:cb:d1:cf:
38:2a:14:bc:0b:79:ac:12:f9:f2:47:f9:58:a8:10:14:2e:0e:
a0:93:61:52:45:3d:f3:e6:bb:28:8e:cd:f0:5f:3e:bb:44:34:
4f:74:1b:54:f2:81:bb:28:9c:e5:ce:49:30:fa:c4:28:ce:6e:
11:3d:31:e7:b9:a0:14:5f:96:d9:e1:ee:8e:09:35:bd:a0:3f:
e2:03:dd:8f:1a:69:fe:6a:30:36:09:f4:a3:43:7a:61:7c:18:
5d:c7:9b:34:b4:e6:94:15:8d:29:09:00:75:48:e9:9d:90:7f:
fb:58:e6:7b:2b:6d:77:6e:ac:a4:4c:f2:25:ec:30:56:f2:94:
95:bc:d7:26:5a:4f:7b:e7:c8:f2:67:6e:a2:c2:4a:da:3e:8e:
75:a1:46:8e:6d:da:a6:11:44:c6:10:37:15:de:d5:68:b4:ed:
a9:39:a4:8a:bc:f9:11:f7:7f:a1:de:de:d7:14:fd:4a:e5:14:
cf:5a:9f:36:88:37:ab:5a:4c:47:ac:a0:e3:ac:1f:f9:ff:97:
41:2e:8c:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD1ePRU3yaEL4YRTG1wMXWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5M2U2M2UwNzE5MDRlMjFlMWI4NzhhZTQ1NTA4MTNmMGUw
N2FlNGEwHhcNMjYxMDAxMDMxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDg2OGJlOGY2M2ZiMmJhMjhkNTk3ZjVkNjM4YmFhOTE4YmZlZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4M58dnvI4EW600gHt9N1mOU+EEpv
otnI+g1dt2tMpWncwF7Sr4k8adeYX9X3aLCE1IXWlPtysyt6WXmLfE3nlHktH/Jf
TtUOhade3yzQ48ykzgR1T8+DBnA12600iI6HKWuJ4cymuWs3z/1EXpRK9iDJmmP5
xUBbJPx10l3gTEQzcwu8kOKpFarBEmAYhIH5Ibdgm7ddWUoyKknXcPaNt30ryYOP
ukxGm0D1ONfTTgJR/i7/kBhcjw/8azQ9hmoh4hQ4F5LY0u/b+fXHU3IU215ng5rk
LnlRBYrEBTTrv3G4P24xbYyl5g/4lFvArSmeQ8LI+bCVWfr6MqNXMgIlSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2Gi+j2P7K6KNWX9dY4uqkYv+5ZMB8GA1UdIwQY
MBaAFEk+Y+BxkE4h4bh4rkVQgT8OB65KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1Q1ajRIR1FUaUhodUhpdVJWQ0JQdzRIcmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xNDBlNjctYzVmZi00ODU5LWFkYzUt
MGNiYzIyZGQwNDRhLzEvN1lhTDZQWV9zcm9vMVpmMTFqaTZxUmlfN2xrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xNDBlNjctYzVmZi00ODU5LWFkYzUtMGNiYzIyZGQwNDRh
LzEvU1Q1ajRIR1FUaUhodUhpdVJWQ0JQdzRIcmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudU8MA0G
CSqGSIb3DQEBCwUAA4IBAQDa8lIkwxKK4Y1cNQA2BofCUVGdbkQnnURm7FaC+Zqk
sqG+O9XV1Ov07EH7Pm3rpG5wFjjL0c84KhS8C3msEvnyR/lYqBAULg6gk2FSRT3z
5rsojs3wXz67RDRPdBtU8oG7KJzlzkkw+sQozm4RPTHnuaAUX5bZ4e6OCTW9oD/i
A92PGmn+ajA2CfSjQ3phfBhdx5s0tOaUFY0pCQB1SOmdkH/7WOZ7K213bqykTPIl
7DBW8pSVvNcmWk9758jyZ26iwkraPo51oUaObdqmEUTGEDcV3tVotO2pOaSKvPkR
93+h3t7XFP1K5RTPWp82iDerWkxHrKDjrB/5/5dBLoyr
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:59:03 2026 by rpki-client