Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa
File: uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa (raw, json)
Hash identifier: G46IsATki7ZM4CXurLt0QLBkG6vi6cJ45QU5pycBC94=
Subject key identifier: B8:4D:7D:18:B6:96:39:A2:FC:59:FE:E5:B5:79:DA:67:30:54:83:1D
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019F74421190033E64035ACF41818E073D40
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa
Signing time: Sat 18 Jul 2026 08:05:14 +0000
ROA not before: Sat 18 Jul 2026 08:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201128
IP address blocks: 185.84.180.0/24 maxlen: 24
185.84.181.0/24 maxlen: 24
185.84.182.0/24 maxlen: 24
2a05:a740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:42:11:90:03:3e:64:03:5a:cf:41:81:8e:07:3d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jul 18 08:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84d7d18b69639a2fc59fee5b579da673054831d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:93:5c:47:42:a7:75:92:84:d0:6d:2b:32:2a:
b8:dd:18:a6:8d:a5:53:96:01:e5:47:f5:11:52:92:
52:b5:f1:bb:f6:b0:ac:b9:6f:5d:d0:d4:d1:7a:78:
fc:f5:75:e4:14:98:80:01:88:3b:f2:f8:ce:7c:62:
9a:0f:7e:bb:40:e0:17:e8:e2:76:1f:a4:36:07:25:
ae:7f:21:cd:61:51:15:6a:e3:7d:65:05:9a:26:7d:
2c:79:a8:31:b5:a5:df:40:00:c7:09:21:d4:ba:a7:
74:d6:63:57:7e:8f:ad:7c:6c:c5:fe:32:2d:21:bc:
36:f1:ce:67:74:05:b6:45:54:e3:44:e4:a3:d8:40:
b7:56:0d:5d:ee:a2:92:a7:99:9e:f3:9e:0e:31:00:
ca:49:37:b1:b8:68:76:c6:cb:8c:aa:02:e2:6a:6a:
83:fb:36:e9:56:f4:a0:bb:1d:cd:83:db:2c:31:27:
6d:93:37:6d:39:86:58:38:94:0c:48:4b:c5:5d:9a:
0a:7f:1d:2a:19:5b:21:ed:8c:48:91:d4:b1:f8:85:
17:9f:91:50:69:61:5d:fe:fb:c7:7b:78:f3:96:c9:
9d:e1:39:1e:5d:df:6d:e8:14:ed:21:93:42:ec:3b:
40:4f:ec:cf:b9:87:ff:81:e1:de:b0:33:7e:25:3e:
97:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:7D:18:B6:96:39:A2:FC:59:FE:E5:B5:79:DA:67:30:54:83:1D
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/uE19GLaWOaL8Wf7ltXnaZzBUgx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.180.0-185.84.182.255
IPv6:
2a05:a740::/29
Signature Algorithm: sha256WithRSAEncryption
07:a8:6f:b4:f5:2d:fb:8e:43:a4:9a:92:c4:e6:f5:f3:a7:ec:
59:8d:21:79:b4:a0:90:a4:eb:da:a6:29:72:ab:34:05:b3:e2:
6f:b6:06:5b:f0:4e:70:6b:cf:01:94:f7:f0:39:51:c7:5f:d1:
69:37:a4:f8:55:3d:6b:95:6b:9c:38:f8:4a:30:da:7c:03:e7:
18:0a:2c:81:67:00:00:ed:ce:43:89:bf:a9:80:14:f5:50:cf:
d1:d9:6e:93:c0:75:d1:c4:25:5f:e5:64:17:18:f9:5c:a3:58:
92:9b:3f:a2:e4:33:df:c1:cd:f1:5a:25:a2:f5:8e:56:63:5f:
f8:74:e1:7d:9d:77:ac:ac:f6:8a:74:98:00:38:01:fe:84:a2:
6d:0f:db:53:9d:f4:81:c9:5d:d5:24:70:41:45:88:ec:41:38:
0f:a9:ad:e7:91:e8:64:ce:6b:da:5a:2a:0f:4d:39:8a:eb:24:
ac:96:80:95:98:8a:e6:a0:a9:3f:71:9e:c5:25:df:25:99:e5:
20:6c:75:8a:1f:cd:1d:bc:37:c3:4a:3e:93:8a:a6:11:42:f7:
d1:2d:c3:04:b3:66:c6:20:98:16:4f:e2:79:ce:cd:46:e0:53:
7a:04:e2:62:04:27:4e:87:66:19:60:76:8e:e0:10:fa:88:fd:
76:a5:f6:c4
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ90QhGQAz5kA1rPQYGOBz1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjYwNzE4MDgwNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODRkN2QxOGI2OTYzOWEyZmM1OWZlZTViNTc5ZGE2NzMwNTQ4MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZNcR0KndZKE0G0rMiq43RimjaVT
lgHlR/URUpJStfG79rCsuW9d0NTRenj89XXkFJiAAYg78vjOfGKaD367QOAX6OJ2
H6Q2ByWufyHNYVEVauN9ZQWaJn0seagxtaXfQADHCSHUuqd01mNXfo+tfGzF/jIt
Ibw28c5ndAW2RVTjROSj2EC3Vg1d7qKSp5me854OMQDKSTexuGh2xsuMqgLiamqD
+zbpVvSgux3Ng9ssMSdtkzdtOYZYOJQMSEvFXZoKfx0qGVsh7YxIkdSx+IUXn5FQ
aWFd/vvHe3jzlsmd4TkeXd9t6BTtIZNC7DtAT+zPuYf/geHesDN+JT6XAwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFLhNfRi2ljmi/Fn+5bV52mcwVIMdMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvdUUxOUdMYVdPYUw4V2Y3bHRYbmFaekJVZ3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAK5VLQD
BAC5VLYwDQQCAAIwBwMFAyoFp0AwDQYJKoZIhvcNAQELBQADggEBAAeob7T1LfuO
Q6SaksTm9fOn7FmNIXm0oJCk69qmKXKrNAWz4m+2BlvwTnBrzwGU9/A5Ucdf0Wk3
pPhVPWuVa5w4+Eow2nwD5xgKLIFnAADtzkOJv6mAFPVQz9HZbpPAddHEJV/lZBcY
+VyjWJKbP6LkM9/BzfFaJaL1jlZjX/h04X2dd6ys9op0mAA4Af6Eom0P21Od9IHJ
XdUkcEFFiOxBOA+preeR6GTOa9paKg9NOYrrJKyWgJWYiuagqT9xnsUl3yWZ5SBs
dYofzR28N8NKPpOKphFC99EtwwSzZsYgmBZP4nnOzUbgU3oE4mIEJ06HZhlgdo7g
EPqI/Xal9sQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:42:04 2026 by rpki-client