Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/Ux15_f21f5m4FEwsehwwJpF7eyg.roa
File: Ux15_f21f5m4FEwsehwwJpF7eyg.roa (raw, json)
Hash identifier: O+6kt63ebzWPfLmcRxNHSLUa9ESjOp8DHk/Yuz0h0Lc=
Subject key identifier: 53:1D:79:FD:FD:B5:7F:99:B8:14:4C:2C:7A:1C:30:26:91:7B:7B:28
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019EFF012427B050B2745FB411E7755499FB
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/Ux15_f21f5m4FEwsehwwJpF7eyg.roa
Signing time: Thu 25 Jun 2026 13:38:45 +0000
ROA not before: Thu 25 Jun 2026 13:38:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13030
IP address blocks: 194.169.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:01:24:27:b0:50:b2:74:5f:b4:11:e7:75:54:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Jun 25 13:38:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=531d79fdfdb57f99b8144c2c7a1c3026917b7b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:cb:63:be:a9:c5:2c:c4:88:3f:12:2b:65:
c1:8c:5a:a3:85:0f:f8:2c:82:94:79:af:45:c7:44:
96:8a:c6:b9:65:74:fc:45:55:3e:81:8b:17:fa:af:
87:94:89:a6:97:28:04:93:ba:5f:26:61:11:54:87:
c4:e3:70:ba:55:c7:51:16:5b:12:af:b2:54:f0:ba:
59:67:b5:2d:58:b1:df:3d:ac:38:76:0e:66:b1:a8:
11:f4:37:e3:e1:af:2f:d7:28:2e:99:fb:ce:72:41:
79:80:36:fb:65:ea:6a:e5:d8:eb:25:14:75:36:48:
3f:98:46:dd:01:c1:90:d5:30:78:30:2d:c2:76:c6:
61:8d:f0:78:02:fc:26:f9:fe:3d:37:9e:cb:1c:80:
eb:22:79:f3:13:9f:34:dc:0c:a8:28:98:0c:61:7d:
46:e2:77:c9:4b:7e:63:ea:4e:4d:47:00:3f:d2:b5:
45:03:18:79:f7:6a:fb:55:dc:10:68:bb:4c:46:9a:
17:23:68:72:af:61:9b:50:65:54:d2:a3:35:83:96:
19:dc:09:07:a8:49:db:62:14:23:91:b8:7c:92:d4:
59:ac:ba:ee:54:e3:ef:3b:80:06:92:a7:39:a3:e4:
3e:ae:5a:db:b9:d9:32:33:5a:90:21:1f:b2:1c:57:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:79:FD:FD:B5:7F:99:B8:14:4C:2C:7A:1C:30:26:91:7B:7B:28
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/Ux15_f21f5m4FEwsehwwJpF7eyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.158.0/24
Signature Algorithm: sha256WithRSAEncryption
42:42:67:41:46:25:2f:6d:bd:e3:0e:7e:19:a9:2b:05:c1:ef:
5b:77:dc:ee:be:4a:6c:d6:9c:86:aa:d9:69:60:b4:b4:ed:06:
7a:ad:ed:ed:56:76:43:da:7b:05:c2:0a:c3:ed:8b:61:98:f6:
13:02:87:d5:6c:75:73:35:ac:0a:f3:af:76:2b:ee:f4:22:09:
3e:7c:f9:be:39:06:e7:c5:f4:3a:95:0e:8b:5f:06:15:9d:7d:
4b:a8:6e:8c:f3:76:c6:42:55:0d:7b:ab:49:22:3b:cd:a9:71:
1b:b8:02:26:c1:0f:51:83:3c:e0:39:d6:6d:0b:34:d6:64:14:
e3:6f:68:0e:52:c3:3f:03:4b:bc:6e:95:63:8f:a6:26:83:64:
3e:98:0b:35:af:52:25:80:aa:03:ef:e7:df:e2:0d:6f:e8:33:
40:a3:2c:82:84:30:f2:1a:10:5d:41:48:b7:d0:10:93:de:0a:
2a:fd:7b:71:d9:f8:9f:72:d6:ce:bc:ba:b5:c8:89:41:b4:f4:
7d:54:f8:21:93:08:4c:5a:ec:37:ed:c2:34:16:b5:96:4a:e3:
58:2e:e0:1d:0e:48:93:00:d2:43:03:42:b0:2f:a9:b0:87:87:
fc:6f:77:c7:51:3d:d7:2e:59:c8:ae:c9:1b:58:44:ac:88:cf:
cf:0b:ee:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7/ASQnsFCydF+0Eed1VJn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MTM1ZjEzYWJmMDJmYTNmY2E1MDVkNTY4ODE2YWZjNTkz
MzQ5MTYwHhcNMjYwNjI1MTMzODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzFkNzlmZGZkYjU3Zjk5YjgxNDRjMmM3YTFjMzAyNjkxN2I3YjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28XLY76pxSzEiD8SK2XBjFqjhQ/4
LIKUea9Fx0SWisa5ZXT8RVU+gYsX+q+HlImmlygEk7pfJmERVIfE43C6VcdRFlsS
r7JU8LpZZ7UtWLHfPaw4dg5msagR9Dfj4a8v1ygumfvOckF5gDb7Zepq5djrJRR1
Nkg/mEbdAcGQ1TB4MC3CdsZhjfB4Avwm+f49N57LHIDrInnzE5803AyoKJgMYX1G
4nfJS35j6k5NRwA/0rVFAxh592r7VdwQaLtMRpoXI2hyr2GbUGVU0qM1g5YZ3AkH
qEnbYhQjkbh8ktRZrLruVOPvO4AGkqc5o+Q+rlrbudkyM1qQIR+yHFcHZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMdef39tX+ZuBRMLHocMCaRe3soMB8GA1UdIwQY
MBaAFDYTXxOr8C+j/KUF1WiBavxZM0kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQt
OWRmZDc5NWE1YWRhLzEvVXgxNV9mMjFmNW00RkV3c2Vod3dKcEY3ZXlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yODgzMzAtMGZlMy00MmFhLWIyNjQtOWRmZDc5NWE1YWRh
LzEvTmhOZkU2dndMNlA4cFFYVmFJRnFfRmt6U1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwqmeMA0G
CSqGSIb3DQEBCwUAA4IBAQBCQmdBRiUvbb3jDn4ZqSsFwe9bd9zuvkps1pyGqtlp
YLS07QZ6re3tVnZD2nsFwgrD7YthmPYTAofVbHVzNawK8692K+70Igk+fPm+OQbn
xfQ6lQ6LXwYVnX1LqG6M83bGQlUNe6tJIjvNqXEbuAImwQ9RgzzgOdZtCzTWZBTj
b2gOUsM/A0u8bpVjj6Ymg2Q+mAs1r1IlgKoD7+ff4g1v6DNAoyyChDDyGhBdQUi3
0BCT3goq/Xtx2fifctbOvLq1yIlBtPR9VPghkwhMWuw37cI0FrWWSuNYLuAdDkiT
ANJDA0KwL6mwh4f8b3fHUT3XLlnIrskbWESsiM/PC+4M
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:58 2026 by rpki-client