Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/U83JSwoM78SuBci4bIU3yu1Tbcs.roa
File: U83JSwoM78SuBci4bIU3yu1Tbcs.roa (raw, json)
Hash identifier: k9vZJbHYBx/dA8DMjVNa9LWbnCs+aqKaVz9gU9NnF8k=
Subject key identifier: 53:CD:C9:4B:0A:0C:EF:C4:AE:05:C8:B8:6C:85:37:CA:ED:53:6D:CB
Certificate issuer: /CN=6252bfb2d62dbeb768733487487cb604caefc394
Certificate serial: 01A0E8728662E13185B699EA87F1278243FB
Authority key identifier: 62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/U83JSwoM78SuBci4bIU3yu1Tbcs.roa
Signing time: Mon 28 Sep 2026 14:36:54 +0000
ROA not before: Mon 28 Sep 2026 14:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 185.140.160.0/24 maxlen: 32
185.140.161.0/24 maxlen: 32
185.140.162.0/24 maxlen: 32
185.140.163.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:72:86:62:e1:31:85:b6:99:ea:87:f1:27:82:43:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6252bfb2d62dbeb768733487487cb604caefc394
Validity
Not Before: Sep 28 14:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53cdc94b0a0cefc4ae05c8b86c8537caed536dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:d1:26:6b:1b:86:d8:81:ad:3d:68:a1:3b:
8c:13:e8:1e:59:a2:30:79:65:c0:c0:db:e1:3f:66:
19:45:30:1f:22:d6:b9:64:87:da:03:d3:3b:b9:fc:
92:17:29:7e:d5:d3:2a:b7:fa:61:cd:74:04:3d:dd:
26:60:63:ac:8d:ec:0b:d0:cf:7c:40:b8:a8:d4:0c:
dd:06:be:cd:cb:01:bf:84:5f:dd:56:cb:b3:51:e1:
83:b9:00:c4:df:c5:47:bf:a9:25:2e:10:97:79:9b:
ce:39:5f:90:3b:69:23:25:5a:5e:84:45:15:83:1f:
58:a4:82:b7:ea:af:68:e3:e3:86:10:9f:8e:70:a6:
4b:10:3c:28:fc:8d:16:a5:a7:60:3e:6a:1e:d1:76:
9b:d2:19:ba:d2:72:6b:38:31:aa:8c:b5:f0:40:23:
1a:8c:3c:d2:f1:3a:e2:19:70:3c:6a:82:42:49:1f:
bf:4e:6a:2b:d9:95:9e:ad:ab:d8:e9:72:ef:21:76:
d0:4f:98:35:92:fb:e3:16:59:07:33:99:d2:55:63:
83:0a:1e:b5:d6:ca:42:a9:b8:51:44:8e:23:d8:1c:
4c:3a:cb:42:71:60:bb:40:6f:67:6d:5a:87:0d:1e:
c4:f8:89:93:2c:eb:b0:40:36:69:b8:b7:b8:2a:fe:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CD:C9:4B:0A:0C:EF:C4:AE:05:C8:B8:6C:85:37:CA:ED:53:6D:CB
X509v3 Authority Key Identifier:
keyid:62:52:BF:B2:D6:2D:BE:B7:68:73:34:87:48:7C:B6:04:CA:EF:C3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YlK_stYtvrdoczSHSHy2BMrvw5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/U83JSwoM78SuBci4bIU3yu1Tbcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c1ab0e-f1dc-43f2-8868-73252383e9e6/1/YlK_stYtvrdoczSHSHy2BMrvw5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:eb:76:1e:f7:cb:e3:f9:50:7f:20:74:6c:04:6a:67:93:43:
a4:5c:20:2b:6f:8c:1a:83:b5:81:6b:1c:20:41:44:9c:c4:aa:
d7:73:48:96:34:c9:87:91:9d:a6:52:61:cc:2d:ab:47:fb:6d:
5b:87:54:c7:4b:26:81:b0:e2:de:65:03:71:03:9b:f7:70:2e:
ce:af:29:47:3d:d2:ff:22:05:a9:b0:8d:e8:9a:34:c4:25:f1:
f4:f3:5b:ee:49:03:79:5e:c7:72:d6:02:66:3e:72:0e:46:87:
6b:07:ad:d8:d3:6e:c8:1d:de:a2:bb:91:84:c0:da:da:3e:d1:
7a:c7:ce:31:99:e2:16:4d:45:a6:42:8c:be:fb:d6:ad:86:a9:
94:ba:8a:c7:20:f7:7b:e8:ed:34:32:d4:87:e3:bd:25:bf:3d:
6d:e8:ed:68:8b:d5:ec:67:92:8d:7d:4e:d4:ce:6d:5a:35:e9:
c7:e4:e2:5e:91:e4:83:b5:b4:9a:16:73:bc:c9:7f:da:4f:bd:
5e:12:bb:d7:c1:cd:53:41:18:5d:16:be:23:f3:38:b8:64:be:
48:19:57:cb:ee:3e:9a:6f:71:eb:9c:0a:f9:c4:b0:48:d5:46:
65:15:45:59:dd:2b:9b:eb:0e:70:d1:f7:47:a6:1a:49:e8:4f:
e2:19:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:50:32 2026 by rpki-client