Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/UApE9cSqKRZ0Txn3JG5Q9Jmj2F4.roa
File: UApE9cSqKRZ0Txn3JG5Q9Jmj2F4.roa (raw, json)
Hash identifier: m1cr622kePBOyq0mO5An5e06+FLt0tPrgEbLeHmtiD8=
Subject key identifier: 50:0A:44:F5:C4:AA:29:16:74:4F:19:F7:24:6E:50:F4:99:A3:D8:5E
Certificate issuer: /CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Certificate serial: 01A1872D7C33A9A2B356C0550043437A885F
Authority key identifier: FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/UApE9cSqKRZ0Txn3JG5Q9Jmj2F4.roa
Signing time: Thu 29 Oct 2026 10:21:07 +0000
ROA not before: Thu 29 Oct 2026 10:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31034
IP address blocks: 185.220.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:2d:7c:33:a9:a2:b3:56:c0:55:00:43:43:7a:88:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7468dccae43c239f8530e8235e3a2d4fcd3e73
Validity
Not Before: Oct 29 10:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=500a44f5c4aa2916744f19f7246e50f499a3d85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:b4:0d:f0:f1:36:a9:b8:c5:39:f9:3c:e9:
14:1c:8f:c9:a9:1f:ac:d3:3d:b7:0f:6f:25:16:cb:
ba:b9:ba:6f:26:74:a5:f4:1b:e4:f6:75:86:f9:4e:
71:6e:8b:df:3a:1b:1f:15:e4:dc:71:24:4c:b5:6b:
a8:7c:fc:e0:61:ca:57:b0:27:75:ef:02:62:ba:e2:
ca:2f:f5:8b:e0:83:07:ff:2a:14:62:0f:32:bc:e7:
d0:ec:2c:8e:14:c8:b4:11:a9:8f:ba:99:97:0d:2d:
59:f1:b9:1f:dc:d0:b5:98:47:50:8e:d0:08:52:48:
01:8e:e2:c5:31:6b:49:eb:bc:e8:17:4c:d6:41:89:
59:1b:d8:06:c0:fe:9e:20:bd:cf:95:b3:78:0d:b1:
30:e2:35:c8:4e:ee:0f:c5:70:1d:60:8f:4d:9b:b1:
79:74:b2:0e:8d:00:bd:1c:1d:b2:5c:86:78:83:d0:
7e:a7:82:9d:93:de:ae:3b:d1:8b:2c:77:04:87:b3:
b0:98:ef:81:16:07:0f:36:46:ad:d6:08:18:46:88:
be:3a:2e:9f:55:e6:b8:de:db:da:49:76:f3:32:2b:
97:44:e8:6a:6a:a0:45:c6:f0:e1:31:77:8f:22:8c:
55:49:10:b5:a5:a2:87:be:f4:77:e8:3c:19:ca:9f:
ee:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:44:F5:C4:AA:29:16:74:4F:19:F7:24:6E:50:F4:99:A3:D8:5E
X509v3 Authority Key Identifier:
keyid:FA:74:68:DC:CA:E4:3C:23:9F:85:30:E8:23:5E:3A:2D:4F:CD:3E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nRo3MrkPCOfhTDoI146LU_NPnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/UApE9cSqKRZ0Txn3JG5Q9Jmj2F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a0c816-765e-4d1a-866b-b3f0942e69ec/1/1-nRo3MrkPCOfhTDoI146LU_NPnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f6:8f:a4:8d:06:9e:dc:d5:c4:75:98:1a:f9:3f:a5:59:19:
84:bc:be:78:58:b7:4a:a7:8a:e4:8e:75:c5:4e:96:67:73:d5:
dd:3e:f2:10:ea:1d:bd:24:4c:e0:9a:42:96:38:b9:92:84:3e:
ea:ac:ef:7d:52:9d:a1:1a:18:8a:88:e5:fc:4a:28:be:80:2a:
b8:4d:ca:2c:0a:af:84:7e:a8:e7:02:d1:6c:c0:7c:f3:3f:28:
8d:8b:f5:25:40:57:27:83:09:6f:e8:07:5e:d6:72:15:49:f7:
1f:e2:96:e4:16:ed:6d:b8:4c:f6:9a:a6:6f:24:d2:3c:b3:22:
53:8f:a7:1e:75:a8:97:6a:82:24:65:6a:42:02:f1:9c:ef:77:
8a:e8:02:08:75:51:63:60:30:57:50:4e:cd:f7:9d:b5:1e:68:
ab:be:a1:59:8d:87:d7:6f:a3:0a:f2:4d:71:af:c4:be:5b:80:
37:44:86:22:f0:87:63:7d:39:8e:38:6d:2a:24:72:b3:2a:37:
57:ee:74:b8:54:f2:13:3d:a4:3c:80:67:f3:11:08:c7:f8:9f:
c3:12:a7:c7:24:24:92:c3:3a:e2:e9:68:64:e5:1f:59:c0:82:
33:62:ed:b4:02:8d:f8:56:61:df:98:82:e3:3a:a7:25:e6:0a:
29:a8:c0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:09 2026 by rpki-client