Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/U152Yfw0tlZO5D0QOCZGFHPQbCo.roa
File: U152Yfw0tlZO5D0QOCZGFHPQbCo.roa (raw, json)
Hash identifier: pSg/8IbWdTI7oKk2zOuLJpffDKTA9Zw6JyTBCm/9/C8=
Subject key identifier: 53:5E:76:61:FC:34:B6:56:4E:E4:3D:10:38:26:46:14:73:D0:6C:2A
Certificate issuer: /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial: 01A0C8C8A29A12C446553D7C7C34396C37C6
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/U152Yfw0tlZO5D0QOCZGFHPQbCo.roa
Signing time: Tue 22 Sep 2026 11:03:07 +0000
ROA not before: Tue 22 Sep 2026 11:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51970
IP address blocks: 84.247.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c8:a2:9a:12:c4:46:55:3d:7c:7c:34:39:6c:37:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
Validity
Not Before: Sep 22 11:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=535e7661fc34b6564ee43d103826461473d06c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:56:91:64:0b:50:06:e3:71:ec:0c:ab:a0:
45:75:74:73:4f:a9:97:57:cd:0c:bd:df:99:6c:09:
91:cb:9c:b5:db:98:46:0e:66:99:2c:c2:69:e7:71:
33:50:05:7e:73:cd:7b:2b:59:e5:13:59:8a:df:bf:
95:85:cf:48:b9:b9:fa:32:00:8b:93:bc:43:90:1b:
7c:ee:c9:9b:3d:88:98:10:14:cb:a9:bd:cf:78:aa:
42:20:a3:1e:63:a6:31:92:86:51:3e:3d:f6:b0:07:
89:05:fa:5c:70:a9:84:ed:aa:0f:7b:d3:fa:b7:ac:
98:51:d7:14:39:fd:38:1d:1b:c5:a5:99:f5:1d:0f:
52:05:9a:bb:b5:c9:ec:e7:4b:60:17:48:a2:21:52:
bf:3c:ab:34:75:86:5c:c7:bc:2e:0c:70:17:36:8c:
5f:cb:3c:69:5d:8b:c0:15:a0:ea:87:c0:8e:89:7b:
8a:78:a5:09:6e:38:3e:55:9e:89:c6:94:9a:12:4a:
6c:3a:5e:3d:65:62:ab:bf:94:74:ff:c9:2d:7f:80:
6b:9a:15:5a:14:95:e3:96:73:d0:52:31:51:fe:d7:
87:e1:fb:98:5c:af:e5:40:20:3b:39:48:7d:d5:be:
63:a5:bd:df:ed:20:c8:ad:7f:19:e5:0d:e7:ac:c6:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5E:76:61:FC:34:B6:56:4E:E4:3D:10:38:26:46:14:73:D0:6C:2A
X509v3 Authority Key Identifier:
keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/U152Yfw0tlZO5D0QOCZGFHPQbCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.22.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e6:9d:81:00:51:fc:21:77:dc:78:7c:31:37:ed:9a:70:75:
03:be:9f:f9:8c:22:6c:97:bb:0c:ba:cf:16:b7:c8:89:2a:aa:
eb:5c:b9:43:52:06:37:9d:24:05:f2:43:45:e9:81:f4:f7:79:
cf:b1:d7:ab:2e:f7:df:6d:30:c8:77:03:16:a8:14:94:22:18:
d5:ac:6c:b6:f0:3e:85:c7:93:f6:e8:8e:8b:4b:0e:d8:c1:ae:
9d:6c:60:0c:94:f1:90:a1:c5:69:79:cb:9b:ad:ca:01:c0:e8:
94:8c:69:53:2f:ea:cb:4c:f8:04:3d:46:8e:07:b0:8e:2c:f1:
09:c8:53:06:32:e5:9c:b3:fc:fe:b8:5b:22:9d:4f:fb:29:3f:
01:1b:5a:22:5a:f7:29:df:96:58:e5:b9:85:48:92:01:75:5c:
c6:39:d5:57:a9:6c:10:df:d8:13:24:31:b0:17:3e:5f:8f:f4:
49:7c:49:a2:54:b8:dc:57:3e:27:02:bc:9a:a0:7e:1a:e4:a9:
e7:58:06:4c:56:f4:96:3c:62:d9:26:30:f0:4b:02:9b:13:98:
b2:1d:53:54:63:bd:da:cf:5b:66:9f:d1:1b:35:18:19:ad:12:
45:01:7f:a6:0a:74:cb:26:15:f9:7a:b5:ae:9e:6e:70:f0:8e:
fa:c2:96:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:01:09 2026 by rpki-client