Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/uTltmkY4Yq89HmC7xO7YdnyqWVQ.roa
File: uTltmkY4Yq89HmC7xO7YdnyqWVQ.roa (raw, json)
Hash identifier: pFBAzFh4nQl1Te9x/aO88GWNLmfO6IDPw+/Vc9C0I+4=
Subject key identifier: B9:39:6D:9A:46:38:62:AF:3D:1E:60:BB:C4:EE:D8:76:7C:AA:59:54
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019E07132A49A8BA01FFD58289E5064E6B4E
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/uTltmkY4Yq89HmC7xO7YdnyqWVQ.roa
Signing time: Fri 08 May 2026 10:12:36 +0000
ROA not before: Fri 08 May 2026 10:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203950
IP address blocks: 189.13.114.0/24 maxlen: 24
189.13.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:07:13:2a:49:a8:ba:01:ff:d5:82:89:e5:06:4e:6b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: May 8 10:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9396d9a463862af3d1e60bbc4eed8767caa5954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:10:9e:71:98:ec:8c:55:ce:2f:b9:6c:2a:
17:d6:11:17:1d:9a:6a:35:27:1f:be:fd:66:78:9b:
b1:16:f5:a2:d1:5b:69:1a:a5:ac:ab:22:cc:16:39:
60:8a:a0:6f:2f:66:67:5c:78:fd:bf:5e:59:23:93:
07:4e:51:fc:ed:ec:7f:ea:f9:93:39:00:83:87:ac:
8e:75:6d:4d:9a:85:aa:af:d7:90:07:6c:b6:12:42:
0a:4f:2f:f3:cc:f3:c7:52:3c:f1:72:57:f3:3e:ed:
ab:14:9f:5d:ec:d5:ce:da:50:e9:f6:ad:e1:02:af:
85:0f:db:7a:de:05:14:26:fd:fc:2e:c8:05:c4:08:
90:0f:2a:00:6c:6a:42:ab:42:65:6c:4d:d0:ee:95:
a1:cb:58:bb:69:a1:7e:5e:c8:12:e8:77:39:3c:21:
51:30:5a:2b:45:72:ea:5b:3e:ee:6d:49:91:3a:2c:
cc:e0:5d:f5:8b:83:83:ec:31:36:8e:a8:a6:6b:45:
51:55:b3:a2:cf:f1:68:02:93:a7:0a:3c:ad:b2:a3:
5d:91:03:be:f7:a1:b6:59:58:92:fe:4a:e6:c6:ee:
7f:e2:b6:cf:1e:28:f4:bd:a2:c3:56:62:ba:d0:40:
ed:81:0c:aa:33:a2:82:53:86:95:ff:68:1f:95:16:
9f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:39:6D:9A:46:38:62:AF:3D:1E:60:BB:C4:EE:D8:76:7C:AA:59:54
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/uTltmkY4Yq89HmC7xO7YdnyqWVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.114.0/23
Signature Algorithm: sha256WithRSAEncryption
93:f1:83:d0:3a:62:86:00:29:9d:b1:90:5c:82:d3:59:54:ba:
8b:0b:74:45:99:76:c0:52:b1:eb:6e:29:27:e2:6e:f3:31:62:
84:30:bc:29:fe:1a:a9:b0:1a:4d:a2:e5:db:2e:98:4e:14:8c:
11:63:6d:a8:cb:95:8a:99:c3:df:f6:a9:93:56:25:c7:0e:95:
2a:e6:1c:dc:be:a4:a5:03:06:98:d1:f5:ca:2c:b1:9b:b8:d4:
de:39:a2:c5:e9:51:76:49:7c:d3:59:4b:ba:bb:54:75:76:ce:
93:92:62:27:47:e0:f1:eb:33:95:4d:43:0d:d5:83:e3:50:b1:
82:93:63:db:f0:fd:5e:73:c1:21:77:b6:ba:8b:30:fd:d3:8c:
1b:ca:d6:a2:a7:2d:15:e5:01:36:62:37:a1:7e:c6:55:b2:ad:
59:5f:09:4d:8f:08:82:68:3d:46:72:c4:db:0c:1d:2a:2b:91:
c0:3c:1a:bb:27:cc:4c:8d:c8:d7:1b:a3:2e:7c:e7:4c:55:bb:
c8:da:76:67:a9:05:5c:59:30:83:28:08:6e:b1:24:dc:ec:3a:
a0:0a:5f:6d:86:bf:ae:3c:d8:de:52:64:d9:dc:cd:c5:c8:88:
0a:d1:a6:20:56:ac:03:69:11:de:e1:30:7d:34:53:03:c6:49:
4d:fb:1b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:35:14 2026 by rpki-client