Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/U3uskgBenRf6gNmvfw00tQrNEBw.roa
File: U3uskgBenRf6gNmvfw00tQrNEBw.roa (raw, json)
Hash identifier: w5v1jJOvEj/131xyDcqoUJ1bR2/pHLOj9IxhyRXP9Dk=
Subject key identifier: 53:7B:AC:92:00:5E:9D:17:FA:80:D9:AF:7F:0D:34:B5:0A:CD:10:1C
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019DFD6F7C15730BAF0CF91F1E4A1C5ACE73
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/U3uskgBenRf6gNmvfw00tQrNEBw.roa
Signing time: Wed 06 May 2026 13:17:15 +0000
ROA not before: Wed 06 May 2026 13:17:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214155
IP address blocks: 186.247.32.0/24 maxlen: 24
186.247.33.0/24 maxlen: 24
186.247.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:6f:7c:15:73:0b:af:0c:f9:1f:1e:4a:1c:5a:ce:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: May 6 13:17:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=537bac92005e9d17fa80d9af7f0d34b50acd101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4d:c5:41:d4:b7:90:19:7e:9a:bc:db:13:28:
65:35:45:97:71:2f:1b:2b:3b:ff:b7:37:19:b5:ee:
0b:ac:06:7f:24:83:a7:28:53:ca:60:c2:c5:2c:a0:
f6:fb:a6:ce:47:2d:da:fd:3c:7e:cc:25:aa:23:74:
f2:4e:b0:1d:43:b5:95:04:74:4c:b4:ee:b8:fb:53:
ca:3e:76:25:05:98:8a:5a:d8:35:6b:ed:51:e1:8f:
09:73:96:94:2c:41:4e:82:40:1c:84:05:96:27:67:
11:e8:c4:b7:76:f2:54:ab:b3:4b:b0:6d:12:b8:f4:
2c:33:f5:38:bd:e7:73:87:b9:67:d7:7b:0a:4c:c6:
1e:16:d7:ec:43:7e:b3:ac:e4:fd:0d:1a:bb:a6:8e:
92:c9:49:87:37:d2:76:58:ba:7a:90:29:ce:bf:52:
bf:a8:2b:58:57:20:6a:a0:7b:01:c9:63:16:9a:7b:
57:ed:27:ca:b2:ed:f7:0d:a4:66:37:ea:3d:90:9a:
c9:b9:ff:57:92:dd:f0:79:28:63:f6:2f:ab:1b:7c:
0f:4a:29:fe:4b:29:0b:0d:f8:b3:df:24:40:d1:ae:
78:07:30:5b:87:80:d4:ff:93:9f:ed:4e:04:80:08:
e1:e5:ea:03:58:cf:41:06:e8:57:a5:59:99:93:e1:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7B:AC:92:00:5E:9D:17:FA:80:D9:AF:7F:0D:34:B5:0A:CD:10:1C
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/U3uskgBenRf6gNmvfw00tQrNEBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.247.32.0-186.247.34.255
Signature Algorithm: sha256WithRSAEncryption
3a:d0:ae:b9:42:64:3f:65:a8:b2:97:64:46:f2:97:84:e4:cd:
e7:8b:8b:74:28:30:0b:62:16:44:08:b5:4b:84:3e:c6:87:15:
f8:7f:c5:f8:bf:15:4f:10:a1:d9:9b:d2:6c:aa:04:b8:c3:63:
13:2a:d6:fd:0c:29:07:9f:c3:41:b4:fe:67:4c:ad:1b:44:99:
9a:74:b9:d2:3a:6d:ab:72:b1:87:39:90:e5:9b:b9:5e:7d:1c:
6a:a0:a1:57:81:bf:c2:23:4f:49:6d:2e:52:ca:49:bb:ce:26:
c3:8a:d9:d2:eb:1c:f5:25:77:25:a2:a7:b7:cf:05:b4:00:3b:
68:82:9c:b0:09:af:52:70:33:1b:63:b4:a1:9d:ac:e9:c1:ab:
62:f9:6a:53:5d:00:7d:ea:4a:bd:01:62:e9:b0:20:8f:ea:cb:
95:33:a9:27:9e:58:bd:d2:be:99:b2:ef:97:4f:67:11:c3:71:
ef:f6:6a:8e:53:1b:c3:dd:0b:bb:a1:6a:05:62:ff:2b:5d:7f:
51:c9:94:60:4b:3a:9a:2f:5c:ec:d9:b4:16:8a:cb:4d:bb:4b:
14:0a:40:a2:83:d5:e7:82:f5:47:31:1e:8f:dd:29:d2:04:7b:
d8:11:36:c3:ba:04:78:96:2b:c3:67:f9:56:00:db:1d:1a:03:
43:f4:3a:b8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ39b3wVcwuvDPkfHkocWs5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwNTA2MTMxNzE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzdiYWM5MjAwNWU5ZDE3ZmE4MGQ5YWY3ZjBkMzRiNTBhY2QxMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA503FQdS3kBl+mrzbEyhlNUWXcS8b
Kzv/tzcZte4LrAZ/JIOnKFPKYMLFLKD2+6bORy3a/Tx+zCWqI3TyTrAdQ7WVBHRM
tO64+1PKPnYlBZiKWtg1a+1R4Y8Jc5aULEFOgkAchAWWJ2cR6MS3dvJUq7NLsG0S
uPQsM/U4vedzh7ln13sKTMYeFtfsQ36zrOT9DRq7po6SyUmHN9J2WLp6kCnOv1K/
qCtYVyBqoHsByWMWmntX7SfKsu33DaRmN+o9kJrJuf9Xkt3weShj9i+rG3wPSin+
SykLDfiz3yRA0a54BzBbh4DU/5Of7U4EgAjh5eoDWM9BBuhXpVmZk+GAoQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFN7rJIAXp0X+oDZr38NNLUKzRAcMB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvVTN1c2tnQmVuUmY2Z05tdmZ3MDB0UXJORUJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAW69yAD
BAC69yIwDQYJKoZIhvcNAQELBQADggEBADrQrrlCZD9lqLKXZEbyl4TkzeeLi3Qo
MAtiFkQItUuEPsaHFfh/xfi/FU8Qodmb0myqBLjDYxMq1v0MKQefw0G0/mdMrRtE
mZp0udI6batysYc5kOWbuV59HGqgoVeBv8IjT0ltLlLKSbvOJsOK2dLrHPUldyWi
p7fPBbQAO2iCnLAJr1JwMxtjtKGdrOnBq2L5alNdAH3qSr0BYumwII/qy5UzqSee
WL3Svpmy75dPZxHDce/2ao5TG8PdC7uhagVi/ytdf1HJlGBLOpovXOzZtBaKy027
SxQKQKKD1eeC9UcxHo/dKdIEe9gRNsO6BHiWK8Nn+VYA2x0aA0P0Org=
-----END CERTIFICATE-----
Generated at Wed May 13 15:14:40 2026 by rpki-client