Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/uRJk88mVgln0mDJsVPTFR2vCKi0.roa
File: uRJk88mVgln0mDJsVPTFR2vCKi0.roa (raw, json)
Hash identifier: +Rsrws+LEH6pBf+Nk7Xi3zhnBEWpJpw/X652ZbMiNAA=
Subject key identifier: B9:12:64:F3:C9:95:82:59:F4:98:32:6C:54:F4:C5:47:6B:C2:2A:2D
Certificate issuer: /CN=d0825b153d54ce96dc8f932abb85baa0bf8061c1
Certificate serial: 01A0B3D920ADC5E98D1ECAE3E5D9D851E7EF
Authority key identifier: D0:82:5B:15:3D:54:CE:96:DC:8F:93:2A:BB:85:BA:A0:BF:80:61:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/uRJk88mVgln0mDJsVPTFR2vCKi0.roa
Signing time: Fri 18 Sep 2026 09:29:06 +0000
ROA not before: Fri 18 Sep 2026 09:29:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57029
IP address blocks: 91.230.51.0/24 maxlen: 24
185.150.56.0/22 maxlen: 22
2a07:72c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:d9:20:ad:c5:e9:8d:1e:ca:e3:e5:d9:d8:51:e7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0825b153d54ce96dc8f932abb85baa0bf8061c1
Validity
Not Before: Sep 18 09:29:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b91264f3c9958259f498326c54f4c5476bc22a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ff:36:8e:0d:bf:19:e3:d3:d4:f6:a5:17:d2:
4b:6b:7d:3e:4b:13:1d:65:7f:1b:47:9d:9b:3e:08:
30:73:64:e0:39:e9:af:49:66:eb:cd:78:7b:15:82:
a1:37:08:50:00:d1:8b:67:9d:3b:58:72:b6:5c:9c:
bd:1e:5e:93:3a:19:c5:32:6f:fa:ae:80:6e:20:ca:
7d:5d:19:02:48:25:ab:29:68:63:46:ea:2e:7e:c3:
b5:bc:0f:9d:20:e4:86:57:66:76:4e:14:a7:db:a5:
1f:59:e1:22:8d:3a:28:3d:56:d6:da:ba:37:14:03:
2d:ea:39:36:66:7c:bf:32:40:c0:0f:e1:81:fa:bb:
43:9f:47:d0:43:21:74:4b:47:b0:b3:df:f7:2e:24:
a7:3e:68:89:12:bc:31:34:45:e7:32:4e:e7:26:22:
f8:99:89:c8:1d:05:6d:0c:5d:f7:63:6b:9f:6e:43:
c5:b7:f9:43:24:58:71:af:83:9d:24:65:cd:b6:bb:
05:94:08:55:ac:31:96:70:9c:9b:3a:c6:28:60:d5:
ae:9a:3c:39:a8:cc:44:34:4b:00:64:36:69:ec:4a:
3e:56:e2:05:96:9c:c6:99:d2:ce:ea:ea:a5:6a:be:
96:cb:c6:1e:6b:62:df:bd:27:56:05:77:9a:82:f8:
cd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:12:64:F3:C9:95:82:59:F4:98:32:6C:54:F4:C5:47:6B:C2:2A:2D
X509v3 Authority Key Identifier:
keyid:D0:82:5B:15:3D:54:CE:96:DC:8F:93:2A:BB:85:BA:A0:BF:80:61:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/uRJk88mVgln0mDJsVPTFR2vCKi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/57feb4-a99d-44eb-8007-13019ca9d64d/1/0IJbFT1Uzpbcj5Mqu4W6oL-AYcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.51.0/24
185.150.56.0/22
IPv6:
2a07:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
48:a2:51:ca:32:d3:0c:7d:2a:9f:73:4d:db:50:95:7e:e1:9b:
a4:bf:67:e3:8a:14:ac:97:45:31:1b:07:9c:fd:b7:7a:32:a3:
7d:e0:08:70:ad:4d:4a:c4:49:1c:ba:e6:fe:48:80:30:47:ed:
7e:ef:67:34:e1:0b:75:d1:d6:79:cc:d4:87:8b:94:a2:12:8c:
90:37:17:fd:32:3c:b3:5f:67:52:12:df:c7:1f:0c:8d:ff:ca:
fe:a3:e2:90:2f:c8:8b:9d:3e:d5:f7:1e:01:26:f3:9d:c0:7c:
ef:d1:0c:4d:55:06:3a:33:29:43:a0:c4:93:e9:e9:29:bc:c3:
b5:89:8f:a0:51:81:07:9b:06:4b:b2:59:3a:f3:15:bd:2e:46:
23:96:c3:d5:d6:7e:fd:4e:2a:e6:e8:58:33:49:f7:68:c7:fd:
40:58:1d:28:f2:1a:e2:da:bc:b3:f8:b7:e2:99:85:7b:e6:97:
27:e1:78:cb:66:2b:55:dc:b2:20:1e:bc:10:de:21:cf:a7:99:
c2:f8:5f:a2:aa:b4:3b:d2:7b:8a:de:38:81:9f:e3:d9:7b:ae:
6f:db:dc:fa:44:c9:84:53:75:43:9a:e0:04:a6:ff:b0:83:7c:
bc:df:51:06:e4:8b:0d:75:05:4d:42:04:c8:8f:94:d6:89:5b:
1d:c2:be:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:24:43 2026 by rpki-client