Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/uNRa4zAzcrZDnOveV1CME0I3J4w.roa
File: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (raw, json)
Hash identifier: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=
Subject key identifier: B8:D4:5A:E3:30:33:72:B6:43:9C:EB:DE:57:50:8C:13:42:37:27:8C
Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Certificate serial: 019DBFB77DFA97BD61524B126F8B48BD960B
Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/uNRa4zAzcrZDnOveV1CME0I3J4w.roa
Signing time: Fri 24 Apr 2026 13:39:26 +0000
ROA not before: Fri 24 Apr 2026 13:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214487
IP address blocks: 185.216.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bf:b7:7d:fa:97:bd:61:52:4b:12:6f:8b:48:bd:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba
Validity
Not Before: Apr 24 13:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8d45ae3303372b6439cebde57508c134237278c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:f8:1c:51:80:e5:98:85:e6:95:81:e1:da:
80:9f:57:2c:e1:65:4a:d2:40:ae:70:cd:0e:da:34:
f9:dd:22:a9:dd:d2:51:46:c1:91:58:a5:a5:56:d3:
1e:1b:13:70:61:df:e8:4b:4c:9e:45:2e:4f:f5:01:
0d:a1:16:66:e2:c6:4f:45:aa:01:4a:8d:d3:77:69:
13:a5:9b:52:a1:23:6f:3c:f5:f4:9e:eb:c5:74:f7:
74:79:ec:3f:7a:ee:9e:aa:5c:7b:81:d6:3f:c2:e2:
5c:9f:8b:df:46:01:0d:83:a2:c0:fa:55:8c:41:0e:
a0:9f:03:8e:1f:bf:7a:5c:d3:9e:2a:f9:d9:c4:12:
bd:90:ce:f0:22:c5:30:4e:53:ee:1a:a8:ad:5c:b9:
92:7a:1d:39:bd:53:34:06:24:49:a2:70:e2:cd:8f:
29:4d:5b:ec:26:54:83:06:33:2d:22:30:db:42:5f:
c9:2d:6a:4f:92:b7:9b:d9:86:97:28:3b:95:c0:6a:
68:e9:88:5b:6a:57:1b:30:46:19:22:cd:7d:0c:94:
1e:d8:7e:88:5f:80:71:ae:14:61:66:3a:89:d9:c8:
c8:d1:44:8f:43:78:2e:31:a3:ef:74:3c:ef:c7:3c:
d4:9a:12:77:4f:2b:55:50:f9:58:3b:17:a6:ed:22:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D4:5A:E3:30:33:72:B6:43:9C:EB:DE:57:50:8C:13:42:37:27:8C
X509v3 Authority Key Identifier:
keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/uNRa4zAzcrZDnOveV1CME0I3J4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.173.0/24
Signature Algorithm: sha256WithRSAEncryption
96:01:13:fa:15:59:3a:97:b1:96:19:20:5d:e8:3e:19:a7:25:
ed:a2:9c:e0:b4:7e:1e:cc:dc:c8:70:6a:24:2e:3f:6e:1d:13:
ae:f6:ee:16:cf:4d:30:29:f0:bd:78:58:9b:cb:f9:1e:c5:ef:
11:be:65:30:c2:e3:01:b2:3a:02:2b:b3:6e:e4:2b:84:12:08:
b3:db:dc:b6:39:57:dd:a1:c9:88:6a:64:cb:72:02:c5:c7:cc:
fe:c8:0d:17:04:7b:1e:98:ac:ec:0d:c8:cc:52:ee:9c:25:0e:
ce:5b:1d:82:0e:1c:6e:5c:b0:fc:fb:0f:a1:d0:4c:02:42:c4:
c9:49:50:2a:1e:4b:53:be:7c:6b:c2:3c:ac:ef:39:23:66:97:
fa:81:e4:ab:90:6d:2b:bf:df:e5:99:b4:65:9a:9d:f8:a2:62:
4a:d5:29:2c:8d:46:eb:fa:86:7c:7e:7f:75:84:91:5e:3e:d9:
7d:25:2f:97:f7:7f:23:30:14:8c:4e:1b:2b:6e:04:b3:8d:0a:
e3:ea:2e:02:3b:f5:54:7e:2c:cd:6c:3a:42:50:a1:2d:5f:ac:
da:0f:80:1e:3d:1c:16:80:96:a4:24:a0:a0:58:7e:7b:6e:38:
f4:a1:fc:67:d1:7d:8c:64:f3:9a:03:25:43:47:06:a2:57:ee:
df:e6:3f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:37:44 2026 by rpki-client