Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa
File: UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa (raw, json)
Hash identifier: JRmODBb7OlHw1Za55dylor0a47b0qEs89+ukqYmHts8=
Subject key identifier: 51:6F:E2:5C:30:73:13:89:E2:D9:A8:62:46:3F:BD:AB:D4:28:04:F3
Certificate issuer: /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial: 019F23692FCEAD4724D2608C179BC44E0A47
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48214
IP address blocks: 185.154.190.0/24 maxlen: 24
2a13:1640::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2f:ce:ad:47:24:d2:60:8c:17:9b:c4:4e:0a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=516fe25c30731389e2d9a862463fbdabd42804f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:45:9d:e3:0a:29:09:8f:ae:85:e9:99:69:
39:05:2b:b2:2b:c9:9c:17:e0:9a:2f:4e:67:7f:34:
0f:6b:b0:19:7c:3a:d6:a3:a7:35:55:fb:71:bd:db:
b4:2a:7a:d4:6d:f6:e2:76:4d:31:16:c7:8e:10:68:
e9:3d:80:27:87:ed:ab:77:9b:30:d0:8f:16:ae:4e:
bf:5d:f4:e8:ad:e1:4f:d6:8f:86:52:b4:c3:63:0e:
34:75:65:96:70:91:3b:79:cb:27:e6:09:92:0d:a1:
8a:99:de:96:80:9f:66:6d:dd:17:3c:1d:68:96:9e:
24:cc:0a:3e:8a:0f:b9:8b:71:52:5a:b3:4d:ab:b7:
d7:eb:86:25:1c:9e:f9:dd:26:69:2a:d4:8a:c6:7c:
a7:18:37:c4:e8:41:45:a0:b2:3c:7b:08:fa:40:29:
7c:13:e4:c5:29:01:02:a9:32:f5:98:19:08:07:dc:
bb:7e:78:65:10:47:1c:fd:87:65:8b:33:31:c3:a1:
30:c5:00:d5:9e:d7:ff:18:27:5f:8c:2e:c3:08:e0:
f0:ad:d8:28:8f:1e:fb:24:88:7e:79:0a:3d:d0:44:
af:e4:2b:f5:9e:d0:f9:a2:1c:52:ba:83:ad:98:cc:
3d:92:3d:f7:1a:46:c1:14:8a:06:07:3d:a2:7d:59:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:6F:E2:5C:30:73:13:89:E2:D9:A8:62:46:3F:BD:AB:D4:28:04:F3
X509v3 Authority Key Identifier:
keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/UW_iXDBzE4ni2ahiRj-9q9QoBPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
IPv6:
2a13:1640::/29
Signature Algorithm: sha256WithRSAEncryption
9e:ec:c3:18:2b:21:5c:65:d0:f9:15:29:e9:b7:94:b1:0d:2c:
b5:ee:f3:a8:3b:f0:f7:50:5f:6b:5e:93:ef:ed:3a:a0:f6:6b:
d7:71:d7:48:5a:82:64:1e:56:a0:88:65:bc:cc:ca:f3:6d:15:
65:ac:25:68:94:66:5e:b6:09:4f:70:a4:30:01:ab:28:a7:24:
cd:3d:64:bf:f9:bf:5f:8b:f1:52:bc:dd:da:1d:d6:cc:cb:66:
c7:89:15:f8:b4:9c:2d:69:83:56:07:21:f4:aa:4b:ee:e5:2b:
83:28:5a:aa:1a:d5:78:4c:63:19:2d:aa:f0:7c:48:db:85:80:
ae:82:0a:41:f2:fc:86:f7:24:a6:20:f0:24:24:bd:77:b0:ca:
a4:f6:5b:88:65:a4:3c:c7:fa:3e:e5:6c:4e:38:a5:63:99:6d:
7e:38:b1:8f:88:9b:06:b5:c1:98:c8:e1:d6:15:ff:f1:a7:80:
37:56:93:a0:5d:2f:75:43:5c:79:99:ef:9c:6e:7b:70:0f:91:
26:a6:11:d8:ea:36:11:48:f0:9f:8f:18:e0:4f:fa:f1:15:96:
f5:e3:63:66:0f:3e:3c:54:ae:2f:01:50:93:f1:46:de:40:4d:
62:d8:8a:60:6d:ca:6a:59:01:73:45:92:b8:7f:2f:05:e5:6b:
6c:ea:2e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:22 2026 by rpki-client