Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/u54luoBvJ90jRz4_Cs6k2wJqM2k.roa
File: u54luoBvJ90jRz4_Cs6k2wJqM2k.roa (raw, json)
Hash identifier: Z5bvvUY0X6tpaDJHavzb0oFQRTX2AKCadnWYV41WvK4=
Subject key identifier: BB:9E:25:BA:80:6F:27:DD:23:47:3E:3F:0A:CE:A4:DB:02:6A:33:69
Certificate issuer: /CN=edff0ab25662757afb831675319296f63d989b69
Certificate serial: 01A0423DE545BF386EF2DC2F1988417BF831
Authority key identifier: ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/u54luoBvJ90jRz4_Cs6k2wJqM2k.roa
Signing time: Thu 27 Aug 2026 08:02:27 +0000
ROA not before: Thu 27 Aug 2026 08:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206556
IP address blocks: 185.182.236.0/24 maxlen: 24
185.182.237.0/24 maxlen: 24
185.182.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:3d:e5:45:bf:38:6e:f2:dc:2f:19:88:41:7b:f8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edff0ab25662757afb831675319296f63d989b69
Validity
Not Before: Aug 27 08:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb9e25ba806f27dd23473e3f0acea4db026a3369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:08:ed:4d:c4:ca:40:44:39:09:1e:37:ab:92:
a4:ca:69:7e:e5:f5:77:10:e2:ee:21:79:cf:1e:b1:
fe:88:f8:ac:63:65:64:3f:f4:3d:cf:24:60:31:62:
d3:1f:e7:79:3f:3c:a9:c2:c3:18:12:f4:82:66:0b:
64:1c:65:d7:78:73:06:51:9b:db:74:b8:c1:4b:c9:
50:66:29:1e:f7:0a:a9:71:eb:83:69:d2:9f:2c:0d:
34:73:7e:ae:25:08:a5:10:18:49:b2:01:98:b3:50:
7b:aa:11:83:60:60:9d:ba:df:39:bd:58:72:6a:33:
85:2d:be:cc:50:3c:11:56:66:c0:ee:66:ca:e1:f9:
5d:e9:1f:f9:a9:5f:87:2e:50:f0:5d:5d:8b:2d:bc:
20:56:2a:2e:62:fe:f1:c7:ec:c0:c3:5a:f1:c5:2a:
0c:57:7d:aa:85:56:91:93:b3:58:03:df:9a:61:92:
e5:ba:d0:8c:7e:3e:94:34:01:2d:39:06:38:2c:8d:
94:95:7a:c5:7b:4f:d6:eb:d0:5c:a6:e8:6b:f0:63:
96:f6:45:ad:48:b4:8a:4c:23:bb:b0:c1:cd:05:e3:
e1:3c:f4:79:a9:63:3e:52:4a:f9:f3:c8:45:24:f2:
75:94:ba:12:a1:4a:82:d9:a0:d0:23:45:60:d9:9e:
fc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9E:25:BA:80:6F:27:DD:23:47:3E:3F:0A:CE:A4:DB:02:6A:33:69
X509v3 Authority Key Identifier:
keyid:ED:FF:0A:B2:56:62:75:7A:FB:83:16:75:31:92:96:F6:3D:98:9B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f8KslZidXr7gxZ1MZKW9j2Ym2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/u54luoBvJ90jRz4_Cs6k2wJqM2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e2d729-ba9e-4723-a368-644bfdceb9f6/1/7f8KslZidXr7gxZ1MZKW9j2Ym2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.236.0/23
185.182.239.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:66:db:e5:4a:e0:20:5a:40:a0:bf:de:ee:d5:31:9e:5c:2f:
62:0c:7b:e6:71:ff:5d:38:81:fd:3e:ff:0c:9b:4e:6c:e2:da:
e6:c9:06:2c:b0:0d:e6:38:7b:f6:45:2f:ad:9f:9f:31:6f:03:
04:5c:6a:8d:97:ae:19:25:98:df:60:5f:8f:85:2a:64:43:f3:
38:23:55:a3:70:ee:9e:34:22:ed:0e:3a:89:6e:ec:b9:66:56:
ab:ed:a1:ff:7e:e1:af:28:8d:36:09:73:76:0f:e1:29:e3:cd:
37:9d:66:0c:8b:12:17:f1:3a:cf:da:da:e7:be:02:98:9d:9f:
1f:d9:57:a6:04:64:12:0e:66:ff:78:be:ac:a1:99:90:ec:41:
9b:99:df:f6:39:6d:29:c9:ad:ec:9e:f8:36:55:0b:d2:8f:2d:
7b:16:f8:a2:9b:a5:87:ac:c8:b2:7d:32:b9:55:59:98:31:5d:
23:04:62:44:fe:2c:5a:05:d2:5b:52:75:61:73:08:11:24:05:
05:bf:79:e8:b4:ef:d2:e1:f7:dc:04:7f:30:1e:5b:f1:80:91:
88:ef:2f:3b:04:0a:79:d9:5b:81:2b:3c:4e:ca:8f:53:66:c4:
a8:cf:07:2b:f6:68:04:eb:be:86:99:fa:1d:60:bc:18:5d:13:
c5:5b:58:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:05:35 2026 by rpki-client