Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uOXZ7dA37LwX_dUk0h3whE8VroM.roa
File: uOXZ7dA37LwX_dUk0h3whE8VroM.roa (raw, json)
Hash identifier: B5yZFJxO+rFT+r2NOBvcuBV08rBXM7MSzo2Ev2Or/YI=
Subject key identifier: B8:E5:D9:ED:D0:37:EC:BC:17:FD:D5:24:D2:1D:F0:84:4F:15:AE:83
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 01A0F0FB0C81B7CAF158B014B2FE64237C20
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uOXZ7dA37LwX_dUk0h3whE8VroM.roa
Signing time: Wed 30 Sep 2026 06:22:59 +0000
ROA not before: Wed 30 Sep 2026 06:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 2.182.160.0/20 maxlen: 20
2.183.128.0/20 maxlen: 20
2.183.136.0/23 maxlen: 23
2.183.184.0/21 maxlen: 21
2.183.202.0/23 maxlen: 23
2.188.32.0/21 maxlen: 21
2.188.32.0/24 maxlen: 24
2.188.33.0/24 maxlen: 24
2.188.34.0/24 maxlen: 24
2.188.35.0/24 maxlen: 24
2.188.36.0/24 maxlen: 24
2.188.37.0/24 maxlen: 24
2.188.38.0/24 maxlen: 24
2.188.39.0/24 maxlen: 24
2.188.80.0/21 maxlen: 21
2.188.80.0/24 maxlen: 24
2.188.81.0/24 maxlen: 24
2.188.82.0/24 maxlen: 24
2.188.83.0/24 maxlen: 24
2.188.84.0/24 maxlen: 24
2.188.85.0/24 maxlen: 24
2.188.86.0/24 maxlen: 24
2.188.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:fb:0c:81:b7:ca:f1:58:b0:14:b2:fe:64:23:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Sep 30 06:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8e5d9edd037ecbc17fdd524d21df0844f15ae83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:45:ba:9c:b4:94:e0:ba:f4:e5:ff:36:e7:17:
aa:75:b2:55:8e:76:76:30:99:04:42:9d:85:c1:e3:
ca:12:46:c6:37:ae:85:a5:7c:9e:65:0f:09:ff:19:
65:bb:f5:43:d5:69:c1:aa:33:e6:bd:b7:dc:8f:74:
4a:c0:f7:3f:e6:68:d5:95:2c:12:d3:5c:7b:7c:71:
c2:45:61:b0:d6:a4:66:b1:04:eb:eb:7c:c2:87:c8:
8a:a1:5a:47:df:c4:84:8b:c8:1a:8b:27:06:22:0d:
f3:d5:01:6c:b9:d5:01:8f:57:88:21:84:ff:64:ad:
45:fb:16:24:f5:d3:62:49:e2:67:5f:63:77:a2:4e:
b5:df:24:2f:7d:7e:ab:29:ae:3e:d2:58:e3:4e:25:
84:e3:c3:eb:b8:ac:94:c1:9f:c3:67:77:e8:0e:92:
d3:94:1c:a6:00:3d:3b:b1:9b:33:81:6c:a6:ce:a8:
ae:34:e8:41:48:e7:64:7e:d6:c6:84:c6:83:6f:47:
d8:d8:fb:91:b6:da:2d:b9:ba:37:5a:e2:4b:7c:7b:
13:fd:a2:10:30:15:6e:da:f2:7b:e0:6e:76:7f:83:
50:6b:ee:ba:90:31:3d:ec:b6:12:73:9c:7e:ba:05:
b4:cc:a9:d1:90:1c:81:36:8a:3f:41:34:7f:4a:2d:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E5:D9:ED:D0:37:EC:BC:17:FD:D5:24:D2:1D:F0:84:4F:15:AE:83
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/uOXZ7dA37LwX_dUk0h3whE8VroM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.182.160.0/20
2.183.128.0/20
2.183.184.0/21
2.183.202.0/23
2.188.32.0/21
2.188.80.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:26:74:7f:5a:04:79:be:39:0e:67:d1:1c:11:a6:28:36:e5:
11:b3:a0:93:75:f1:7b:b1:3c:c6:fb:64:bb:d9:da:c4:7f:0e:
78:68:95:f8:bf:e4:ab:5e:62:98:35:38:46:23:ce:54:44:14:
ae:b4:27:b1:54:81:c6:06:b7:32:63:50:ca:fc:9e:14:2d:b4:
ae:57:22:7d:b4:d8:af:b0:e8:3e:01:4c:3b:2d:29:b5:14:cf:
fc:3f:51:11:ce:0e:df:9c:16:33:41:c3:d5:e5:9e:17:79:75:
25:8c:cc:4c:a0:23:e9:ff:80:fc:5f:2b:51:9c:a9:4a:88:84:
0d:6b:97:9d:56:5a:e9:58:83:19:c2:9d:5d:76:16:ea:13:14:
e0:6c:3b:bb:a9:03:19:78:66:cf:9d:66:f8:a4:38:f7:45:8b:
eb:55:c3:20:a0:03:92:ad:c8:60:1f:57:e3:63:b2:75:5e:d7:
10:d5:c8:f0:f3:08:e8:6b:ef:fd:cd:3a:33:2e:23:47:bb:8d:
ec:18:d4:ba:33:24:e3:8b:55:6a:fe:34:50:e4:eb:44:d6:b0:
39:ab:87:be:6c:f2:3b:4c:01:a2:ae:b2:ad:e9:77:71:b8:ed:
b7:a9:97:6e:ec:ca:42:cb:6e:e3:68:21:df:e2:37:7c:4f:f6:
65:3f:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:06:08 2026 by rpki-client