Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/UyewkK79pRreojzroLlRXjADhms.roa
File: UyewkK79pRreojzroLlRXjADhms.roa (raw, json)
Hash identifier: 1Iliob56hxsn2Zz559M0ZiiL2WJwHA78t4gNKWukqpM=
Subject key identifier: 53:27:B0:90:AE:FD:A5:1A:DE:A2:3C:EB:A0:B9:51:5E:30:03:86:6B
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 01A1C1C03E5BAA172DA5668EF8AB4618BE62
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/UyewkK79pRreojzroLlRXjADhms.roa
Signing time: Mon 09 Nov 2026 19:19:23 +0000
ROA not before: Mon 09 Nov 2026 19:19:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 912
IP address blocks: 185.156.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:c0:3e:5b:aa:17:2d:a5:66:8e:f8:ab:46:18:be:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Nov 9 19:19:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5327b090aefda51adea23ceba0b9515e3003866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d5:c9:56:fa:a7:bd:f2:73:3f:12:fb:99:8b:
ae:ba:33:b1:cf:c5:ad:e2:9d:37:b4:86:a5:e9:53:
89:c5:52:b6:8a:b1:9c:f3:3b:87:a0:39:72:73:26:
6a:05:d0:8c:ff:a8:a5:09:4d:e0:ad:51:d5:0e:23:
14:c7:cf:cb:52:80:fb:0b:24:15:e2:25:9f:c2:93:
a6:0f:a4:f6:db:bd:3e:69:3f:49:8c:78:cf:60:be:
db:f4:45:dc:12:57:d2:a8:6c:ca:89:a1:f0:6b:3a:
44:40:c9:0e:2b:1b:49:85:14:88:d0:e5:54:76:64:
b1:e3:27:49:fb:8c:3c:63:48:8b:48:eb:47:50:20:
51:89:29:25:c4:a8:9b:b8:a4:eb:70:f8:45:f7:33:
64:b1:15:d5:0c:80:30:e7:3b:8f:1b:29:0f:5f:cd:
5d:71:40:01:ff:73:ee:95:3d:80:f2:dd:fa:e1:71:
b4:a6:eb:4a:be:34:a7:8b:63:b3:5d:e5:43:8c:dc:
c1:38:50:f6:2b:21:83:47:0d:e3:e1:56:96:bc:0e:
a5:91:25:2b:f8:7b:18:36:78:6c:a6:3f:78:d7:27:
c2:6a:b8:02:dd:cb:3c:27:05:3e:cc:99:ac:62:21:
d1:fc:ae:02:b2:f6:fc:48:56:e7:9c:98:c8:91:40:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:27:B0:90:AE:FD:A5:1A:DE:A2:3C:EB:A0:B9:51:5E:30:03:86:6B
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/UyewkK79pRreojzroLlRXjADhms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:8d:76:88:b1:d4:4d:e9:39:16:45:63:7f:45:0b:07:dd:8c:
13:1f:7b:c9:e0:4d:4e:9b:f9:fa:e7:3f:91:c5:be:6f:7b:da:
14:30:d8:c4:1a:7d:42:c3:16:26:ce:8f:3c:48:05:d0:82:86:
d4:b9:4b:f7:98:80:88:82:0a:27:c5:4c:0a:63:40:74:61:74:
80:d7:dc:74:91:a5:9c:84:23:51:f6:94:fe:85:5c:d1:6e:58:
37:69:88:d6:9c:47:ce:67:53:07:de:60:a5:f0:ed:0e:af:9e:
7c:e2:85:6f:e7:57:09:49:61:99:2f:df:2d:0a:a1:a2:28:cd:
2d:2a:a0:93:42:40:39:64:3f:a0:95:c7:8b:fc:8c:3b:b1:dd:
99:e9:37:05:8f:a6:40:b0:b4:8e:8b:4f:7b:0a:5d:a1:a1:96:
25:86:fc:10:18:7d:25:9b:17:01:e2:22:aa:44:74:78:d5:2a:
ec:4d:d0:0d:1a:ea:7f:31:9a:40:d2:a8:0f:c7:ba:87:c0:1f:
15:b9:6c:d8:35:64:4a:7e:54:ae:6c:53:8f:63:47:12:31:25:
8f:bb:80:82:40:32:43:76:81:26:03:99:cf:3d:a0:bb:d2:c5:
87:1c:4b:ce:83:66:a6:7e:89:b6:56:15:cb:04:4f:4d:56:a5:
5c:10:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:55 2026 by rpki-client