Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/U3z2UwwtJfDwPF04tJx4HYAWqfA.roa
File: U3z2UwwtJfDwPF04tJx4HYAWqfA.roa (raw, json)
Hash identifier: HuQjDIAqN0uW/r+0BXG7wnBu0UWfqjaAQNHtUxgCY7s=
Subject key identifier: 53:7C:F6:53:0C:2D:25:F0:F0:3C:5D:38:B4:9C:78:1D:80:16:A9:F0
Certificate issuer: /CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Certificate serial: 019CDD3BD1688FE5DCD1B28F1EE33B230434
Authority key identifier: BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/U3z2UwwtJfDwPF04tJx4HYAWqfA.roa
Signing time: Wed 11 Mar 2026 14:10:10 +0000
ROA not before: Wed 11 Mar 2026 14:10:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30866
IP address blocks: 147.234.136.0/24 maxlen: 24
147.234.137.0/24 maxlen: 24
147.234.138.0/24 maxlen: 24
147.234.139.0/24 maxlen: 24
147.234.140.0/24 maxlen: 24
147.234.161.0/24 maxlen: 24
147.234.162.0/24 maxlen: 24
147.234.163.0/24 maxlen: 24
147.234.164.0/24 maxlen: 24
147.234.165.0/24 maxlen: 24
147.234.166.0/24 maxlen: 24
147.234.167.0/24 maxlen: 24
147.234.171.0/24 maxlen: 24
147.234.172.0/24 maxlen: 24
147.234.173.0/24 maxlen: 24
147.234.174.0/24 maxlen: 24
147.234.192.0/24 maxlen: 24
147.234.193.0/24 maxlen: 24
147.234.194.0/24 maxlen: 24
147.234.195.0/24 maxlen: 24
147.234.196.0/24 maxlen: 24
147.234.238.0/24 maxlen: 24
147.234.241.0/24 maxlen: 24
147.234.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:dd:3b:d1:68:8f:e5:dc:d1:b2:8f:1e:e3:3b:23:04:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba267b8e2153fbfc9903847b4502a2bef44b56e6
Validity
Not Before: Mar 11 14:10:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=537cf6530c2d25f0f03c5d38b49c781d8016a9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:dc:0f:8d:da:3c:17:9a:ef:c0:72:08:c5:
31:11:f9:7f:a9:a6:fb:78:3f:62:7b:ab:21:76:6c:
93:1b:5e:b1:24:ff:48:5b:23:8e:9b:dc:96:4f:82:
2d:0c:a0:a5:5a:20:89:e9:54:3e:97:b9:ff:c2:19:
2a:36:50:a5:02:7e:b3:cb:6f:06:00:1b:98:f1:69:
2c:28:d8:92:ab:20:3b:ed:55:77:c9:ab:b7:c3:bc:
6c:c5:ce:72:de:cf:83:e6:55:50:19:41:25:78:9c:
72:94:37:1b:5a:c9:b1:71:82:eb:e3:b5:18:44:16:
2b:0f:dd:10:6e:51:20:fc:a5:e3:2c:01:d1:35:03:
4d:c1:66:6c:2a:6c:bd:b7:19:cb:89:7f:ea:ca:70:
95:1d:9a:e0:ca:de:f0:eb:12:d1:7e:ea:19:48:c4:
f1:80:e3:7e:b4:57:82:b2:bc:ec:e3:04:b6:0c:35:
79:70:60:80:74:8c:7d:5c:5a:eb:5e:25:af:ce:2f:
70:aa:c8:d5:f5:a3:54:ae:7c:0f:b9:d4:97:0b:e4:
e9:25:1c:db:81:74:43:4c:02:ea:7c:12:70:57:70:
4b:f6:0f:41:9e:18:ec:e8:2f:f7:43:e9:8b:f7:e0:
40:20:4c:13:0e:a8:75:d0:b5:eb:2d:d3:8b:47:9b:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7C:F6:53:0C:2D:25:F0:F0:3C:5D:38:B4:9C:78:1D:80:16:A9:F0
X509v3 Authority Key Identifier:
keyid:BA:26:7B:8E:21:53:FB:FC:99:03:84:7B:45:02:A2:BE:F4:4B:56:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uiZ7jiFT-_yZA4R7RQKivvRLVuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/U3z2UwwtJfDwPF04tJx4HYAWqfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/985da5-788c-47a0-ab8e-8854b019db9a/1/uiZ7jiFT-_yZA4R7RQKivvRLVuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.136.0-147.234.140.255
147.234.161.0-147.234.167.255
147.234.171.0-147.234.174.255
147.234.192.0-147.234.196.255
147.234.238.0/24
147.234.241.0-147.234.242.255
Signature Algorithm: sha256WithRSAEncryption
34:29:25:eb:88:34:16:f1:2b:ed:4b:ce:9a:fc:ec:b7:4d:16:
72:9c:94:d7:65:22:5d:b1:cf:18:cf:95:05:47:a7:5b:0c:db:
13:b2:17:20:71:23:d8:91:a8:9a:e9:30:bd:63:2a:2b:d6:ef:
67:af:f5:6c:c0:f8:96:c0:4e:2a:d5:34:b6:8e:e0:62:c9:b8:
ea:28:bc:04:c1:40:e6:6c:e3:ef:e8:ec:57:29:06:5b:c1:18:
da:1e:d4:b7:9e:21:3e:07:a8:7f:c6:b7:93:f6:0c:b3:f1:72:
20:3a:d1:f7:70:8f:2b:fa:b9:d1:74:df:83:a0:95:76:41:ec:
9f:15:3c:3e:8d:c6:82:63:e8:16:2c:f8:d2:ac:4d:c0:3b:29:
b9:c8:d2:e7:f0:e5:13:09:a5:52:ec:9c:da:d2:ce:ba:17:88:
52:03:7f:52:2f:0a:74:e2:0c:66:93:98:db:f9:72:d1:10:34:
33:76:b8:d7:1e:4e:ee:0f:d0:2b:8b:29:77:4e:bd:f6:0c:04:
ce:15:e9:54:79:73:e8:6d:e1:3a:1c:2b:2e:b1:3c:39:72:be:
b9:3e:ea:9c:a6:7c:28:e8:04:8c:15:7d:72:10:33:d1:44:71:
d9:4b:22:27:09:c8:93:4b:9b:31:74:1f:d2:c1:bc:0c:50:b6:
4d:2e:a1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:47 2026 by rpki-client