Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/U-8FrDOeOK5de4SGm5112krE8sk.roa
File: U-8FrDOeOK5de4SGm5112krE8sk.roa (raw, json)
Hash identifier: o2eipC2G68KUUyxkW1wKlR0Xd/ksbF/8pHbqmTK5ob8=
Subject key identifier: 53:EF:05:AC:33:9E:38:AE:5D:7B:84:86:9B:9D:75:DA:4A:C4:F2:C9
Certificate issuer: /CN=5f38b8ba758be2723b8ef02f50bf33d38a877063
Certificate serial: 01A0BEFD027289E473D24B9A219FD1439F79
Authority key identifier: 5F:38:B8:BA:75:8B:E2:72:3B:8E:F0:2F:50:BF:33:D3:8A:87:70:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/U-8FrDOeOK5de4SGm5112krE8sk.roa
Signing time: Sun 20 Sep 2026 13:24:07 +0000
ROA not before: Sun 20 Sep 2026 13:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.239.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:fd:02:72:89:e4:73:d2:4b:9a:21:9f:d1:43:9f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f38b8ba758be2723b8ef02f50bf33d38a877063
Validity
Not Before: Sep 20 13:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53ef05ac339e38ae5d7b84869b9d75da4ac4f2c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:48:d4:8b:2a:1a:19:76:a9:0b:ce:88:c1:
37:00:82:a1:f8:d3:e9:cc:30:73:05:5c:49:60:09:
c3:b1:0f:1a:7a:c1:bd:03:de:69:d7:f6:5b:14:4c:
a7:fc:b4:55:36:57:db:5c:bd:2d:4a:05:ae:6f:f3:
d1:ef:50:3a:a8:6c:8e:d0:29:91:c4:65:e5:de:4c:
fb:8b:83:0a:3f:9a:7d:a0:bc:8b:d8:09:74:75:ae:
41:74:65:0e:40:a5:91:e6:ef:e0:d9:d8:96:3c:48:
52:fc:d8:36:08:57:94:15:1e:9a:d1:5b:40:04:1f:
4d:8e:d8:89:fb:ce:4b:e5:f1:a1:a0:f1:d8:35:28:
45:b3:e3:8a:3a:e8:98:1a:86:d6:e2:39:08:94:53:
4d:02:6c:40:c6:cc:ef:68:93:d1:55:73:b3:36:2e:
2e:b9:6e:20:e1:51:46:79:b6:e1:13:c6:94:1a:8d:
ba:00:d9:c5:44:4a:8b:29:b0:f1:e6:4d:ee:7c:65:
65:8b:f5:f5:e3:ea:63:25:3f:81:a6:7d:6d:39:0d:
da:29:1c:87:6b:55:4a:86:d5:4d:a5:9e:86:98:16:
19:c2:2b:71:ba:7f:1f:ea:49:17:e0:dc:58:ad:b0:
83:d0:a2:5b:be:2a:b5:db:a6:57:2e:52:ed:16:80:
76:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EF:05:AC:33:9E:38:AE:5D:7B:84:86:9B:9D:75:DA:4A:C4:F2:C9
X509v3 Authority Key Identifier:
keyid:5F:38:B8:BA:75:8B:E2:72:3B:8E:F0:2F:50:BF:33:D3:8A:87:70:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/U-8FrDOeOK5de4SGm5112krE8sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.173.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e0:3d:47:35:cd:f3:f0:a0:9c:34:11:5b:16:3c:71:01:13:
e9:c7:39:85:9c:17:e5:ca:ea:37:89:1c:77:a9:b4:48:1d:74:
17:6b:0b:2f:73:34:e2:b3:8f:8a:a8:57:0f:7b:87:22:35:c0:
17:27:c3:01:3e:b2:c4:ca:32:74:ef:32:03:f9:47:aa:47:de:
52:0b:54:c1:6b:6a:50:a5:a1:9b:c4:40:64:67:3d:90:33:3d:
a4:e7:83:e6:5b:cc:c5:6a:16:9a:0d:72:43:e1:e7:ae:fd:a0:
c8:4b:be:bf:b2:b9:db:39:40:b7:67:64:b9:dd:41:a9:54:d9:
1c:73:01:50:8b:8b:0e:12:a0:e2:4f:62:6d:b2:b1:b8:6c:ad:
fc:0e:4f:02:01:35:70:9c:45:13:24:ef:97:af:62:9e:74:9a:
3a:4a:b6:b0:57:4b:7f:4e:90:6d:81:df:fe:74:81:a6:c9:90:
a9:4b:68:81:c0:c3:a4:b8:c0:ec:0b:27:c0:28:e7:b0:fc:8f:
bb:20:18:7f:cd:2f:94:ce:6c:b6:61:66:11:c8:45:e5:37:fb:
8d:f5:b2:f3:f3:2e:37:ec:08:1d:30:95:3a:b7:b6:81:42:12:
30:1c:7f:89:4f:b5:6f:44:c1:8f:53:4a:37:4e:63:4a:8f:1f:
71:e8:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:17:53 2026 by rpki-client