Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/A7_y22PIg0hPAMpCsH_sCKGtyg8.roa
File: A7_y22PIg0hPAMpCsH_sCKGtyg8.roa (raw, json)
Hash identifier: jYk6V/JIFZujPYouL6dTCjVEwQr4OkGYQk0D5ScRZVo=
Subject key identifier: 03:BF:F2:DB:63:C8:83:48:4F:00:CA:42:B0:7F:EC:08:A1:AD:CA:0F
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 019B7758CAC325267926AB8C5F4690F85831
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/A7_y22PIg0hPAMpCsH_sCKGtyg8.roa
Signing time: Thu 01 Jan 2026 02:17:46 +0000
ROA not before: Thu 01 Jan 2026 02:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201453
IP address blocks: 185.160.228.0/24 maxlen: 24
185.160.229.0/24 maxlen: 24
185.160.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ca:c3:25:26:79:26:ab:8c:5f:46:90:f8:58:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 02:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03bff2db63c883484f00ca42b07fec08a1adca0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:87:53:44:99:a6:3a:65:5e:ce:07:e5:dd:
5d:96:f4:d1:a8:bf:eb:83:89:5c:fa:8b:0d:3e:50:
15:8a:89:7a:92:8b:46:89:d7:95:cc:b5:8d:1d:04:
37:b5:b2:03:f4:8c:f3:84:ff:25:16:ba:44:73:36:
c5:6a:38:d9:66:e1:ee:dc:0f:a1:2f:16:6a:b9:b1:
d1:fe:f3:e6:4f:8c:52:d5:ae:f4:cf:1d:d4:d0:dd:
e2:a5:f7:fc:df:1b:6c:c9:2b:73:9a:e9:56:35:36:
f3:59:bd:6a:5f:89:84:b8:b0:bf:72:fc:a1:f3:86:
c9:45:d1:b6:d3:90:58:18:d8:13:51:cc:91:77:e6:
7e:cb:a6:92:1f:74:22:16:35:11:d1:d1:be:07:53:
11:dd:3a:ce:67:28:d1:36:da:a7:3a:e7:20:f5:cf:
51:43:52:a4:4c:0c:19:58:ae:77:c5:70:ec:df:e9:
6b:f2:43:53:f8:de:a5:bf:11:77:bc:ba:91:01:5b:
68:a6:d3:00:d7:7c:3f:24:27:d2:33:ad:14:1e:33:
00:87:31:e6:c9:0e:ff:13:90:f8:25:ba:9e:56:7d:
f4:e8:13:57:7f:b9:e8:22:8e:50:e4:46:eb:72:42:
0b:34:44:a8:bb:fa:0b:52:36:86:ec:49:15:f2:90:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BF:F2:DB:63:C8:83:48:4F:00:CA:42:B0:7F:EC:08:A1:AD:CA:0F
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/A7_y22PIg0hPAMpCsH_sCKGtyg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.228.0/23
185.160.231.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:ad:92:27:19:ae:85:b6:b5:db:e4:e5:c6:6d:8f:54:65:c9:
50:6b:f7:76:30:20:f2:78:21:c6:d0:2c:94:02:a3:6b:3d:83:
06:da:66:de:39:8a:09:ad:f5:58:b8:36:08:85:25:60:47:60:
43:6f:cb:7d:be:3e:dd:7b:1f:00:00:97:90:f1:2e:77:b7:9c:
7f:56:14:52:a0:a4:19:08:b6:fa:7c:36:a2:cc:59:2b:90:dd:
0d:f1:8e:f0:d1:18:e6:f7:a1:10:37:0f:ae:51:37:c5:d4:24:
46:60:cb:dc:7c:64:a2:a4:c1:e9:1a:21:f3:30:59:52:cf:b0:
d5:df:94:f3:d3:53:6d:9b:27:bb:00:41:d1:06:8a:3a:8a:3f:
f0:d5:ba:95:16:c6:f4:35:c4:0c:33:ee:15:5e:cf:a7:42:bd:
14:f7:c1:6e:a3:28:22:f6:32:e0:c7:a3:52:4e:d2:88:41:78:
7c:81:08:b5:cc:bf:b8:f2:74:0f:10:06:dc:26:17:04:99:aa:
4a:e7:cc:4a:b0:7e:a3:47:68:c3:67:50:65:00:b1:73:9b:8c:
b0:c1:55:27:26:ba:5a:55:f8:95:6e:fe:50:85:1f:4a:a5:03:
9d:cd:b1:72:01:75:3c:0b:3a:06:f5:0c:88:b7:73:68:78:11:
e0:c6:14:96
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZt3WMrDJSZ5JquMX0aQ+FgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2JmZjJkYjYzYzg4MzQ4NGYwMGNhNDJiMDdmZWMwOGExYWRjYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2uHU0SZpjplXs4H5d1dlvTRqL/r
g4lc+osNPlAViol6kotGideVzLWNHQQ3tbID9IzzhP8lFrpEczbFajjZZuHu3A+h
LxZqubHR/vPmT4xS1a70zx3U0N3ipff83xtsyStzmulWNTbzWb1qX4mEuLC/cvyh
84bJRdG205BYGNgTUcyRd+Z+y6aSH3QiFjUR0dG+B1MR3TrOZyjRNtqnOucg9c9R
Q1KkTAwZWK53xXDs3+lr8kNT+N6lvxF3vLqRAVtoptMA13w/JCfSM60UHjMAhzHm
yQ7/E5D4JbqeVn306BNXf7noIo5Q5EbrckILNESou/oLUjaG7EkV8pAmpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAO/8ttjyINITwDKQrB/7AihrcoPMB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvQTdfeTIyUElnMGhQQU1wQ3NIX3NDS0d0eWc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuaDkAwQA
uaDnMA0GCSqGSIb3DQEBCwUAA4IBAQCNrZInGa6FtrXb5OXGbY9UZclQa/d2MCDy
eCHG0CyUAqNrPYMG2mbeOYoJrfVYuDYIhSVgR2BDb8t9vj7dex8AAJeQ8S53t5x/
VhRSoKQZCLb6fDaizFkrkN0N8Y7w0Rjm96EQNw+uUTfF1CRGYMvcfGSipMHpGiHz
MFlSz7DV35Tz01Ntmye7AEHRBoo6ij/w1bqVFsb0NcQMM+4VXs+nQr0U98Fuoygi
9jLgx6NSTtKIQXh8gQi1zL+48nQPEAbcJhcEmapK58xKsH6jR2jDZ1BlALFzm4yw
wVUnJrpaVfiVbv5QhR9KpQOdzbFyAXU8CzoG9QyIt3NoeBHgxhSW
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:41 2026 by rpki-client