Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa
File: hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa (raw, json)
Hash identifier: cWZgtl6Fe0hqFBrcZyuN1x8H8xcw1ByuFigP7rHanh4=
Subject key identifier: 85:9F:D4:E1:A2:28:DD:28:AF:BF:87:09:B0:C3:29:5C:35:F7:34:6F
Certificate issuer: /CN=520135439eed3505f7886326676dabf37cebbf36
Certificate serial: 019F23687DF786C895A9320DB7EAD291F556
Authority key identifier: 52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa
Signing time: Thu 02 Jul 2026 15:17:58 +0000
ROA not before: Thu 02 Jul 2026 15:17:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196932
IP address blocks: 178.255.136.0/21 maxlen: 24
185.192.200.0/22 maxlen: 24
2a03:40e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7d:f7:86:c8:95:a9:32:0d:b7:ea:d2:91:f5:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520135439eed3505f7886326676dabf37cebbf36
Validity
Not Before: Jul 2 15:17:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=859fd4e1a228dd28afbf8709b0c3295c35f7346f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:e0:e7:7f:51:dd:8f:63:c5:a3:c8:4b:7f:
b4:6c:4e:fa:21:d2:ef:75:c8:a0:56:9b:52:a1:7d:
61:57:6e:12:71:a9:cf:a7:1b:f0:ed:b4:2e:f7:34:
12:b5:17:df:07:26:5b:96:9a:c0:dc:36:bb:d5:5b:
8c:cd:ff:38:c4:fc:13:1b:34:35:4e:1a:0b:30:41:
70:3d:91:35:7b:3c:70:27:2b:91:d9:ed:f0:78:74:
27:c6:18:82:d8:48:a0:54:69:3e:1d:f2:c2:09:cf:
82:e6:f2:b4:ca:b9:7a:06:f4:be:0b:8a:3b:11:a1:
1f:42:5c:3d:55:b5:d5:aa:3b:03:c3:09:75:b9:f6:
14:b5:e6:74:50:67:15:6b:4f:1a:96:8d:fe:8d:51:
13:3a:f1:02:81:d8:70:bc:e7:83:94:da:80:f0:2d:
70:7e:d0:cf:74:e4:e4:6d:6e:22:8b:b6:e4:4c:5b:
6c:ee:e2:51:35:7a:d8:83:4e:50:83:f2:b0:c0:80:
b7:26:17:51:50:98:c8:2e:1e:76:41:c6:68:da:ce:
7b:31:50:e6:02:c1:14:1b:07:26:7d:8f:3f:0a:73:
87:30:da:6d:50:fe:94:25:b9:23:36:60:49:d3:73:
e6:41:4b:42:23:0e:19:50:94:d3:5c:81:c7:b1:18:
79:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9F:D4:E1:A2:28:DD:28:AF:BF:87:09:B0:C3:29:5C:35:F7:34:6F
X509v3 Authority Key Identifier:
keyid:52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.255.136.0/21
185.192.200.0/22
IPv6:
2a03:40e0::/32
Signature Algorithm: sha256WithRSAEncryption
35:56:6a:7a:46:86:6f:3e:f9:46:74:26:f5:e7:f4:b9:66:d6:
1a:12:c6:6d:c6:85:0f:99:5d:e7:41:9f:fe:b5:46:83:9a:72:
be:11:a7:1b:cb:86:d4:49:c0:f8:d1:7b:4e:65:fc:be:c0:cd:
41:69:29:94:64:48:14:39:f5:7d:0a:f4:2f:e5:af:a1:93:ef:
30:f2:b2:f0:3e:30:f5:82:42:87:97:28:71:85:60:84:75:c7:
f4:fe:44:41:5a:da:f6:82:53:f5:ea:9e:d5:90:42:8e:d3:ac:
75:64:41:4c:15:a5:a0:69:49:6b:29:2c:2b:57:82:79:4d:f2:
d5:49:d8:8e:c0:86:6a:89:37:7b:14:d6:fb:f5:14:bd:91:f6:
46:7d:57:5c:09:39:17:df:6f:fb:6e:92:a1:bd:dd:44:e4:77:
d1:ac:50:0b:d0:cc:89:f4:99:a2:23:6f:f4:ab:9c:43:de:b5:
31:44:3a:95:7d:c4:8d:80:48:3e:db:29:15:2f:17:24:59:f5:
09:e0:63:be:20:6f:38:8b:99:47:ee:25:f9:a0:4d:55:b7:df:
81:49:92:28:2c:e6:7c:e4:a0:54:a7:67:59:be:95:1d:ac:e9:
f4:96:46:ad:89:f1:c2:67:fb:a8:f4:38:57:37:7c:0f:d0:f7:
46:fc:47:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:12:01 2026 by rpki-client