Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/u2wyBVBRe1bi3p5ICK923c68XQc.roa
File: u2wyBVBRe1bi3p5ICK923c68XQc.roa (raw, json)
Hash identifier: vXZzD7YWtZNTws0B20dl9mPgH4pcz9e5Oj2ZoVWg690=
Subject key identifier: BB:6C:32:05:50:51:7B:56:E2:DE:9E:48:08:AF:76:DD:CE:BC:5D:07
Certificate issuer: /CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
Certificate serial: 019F48622505A00C2DAC8EB4807BEA8531EA
Authority key identifier: 5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/u2wyBVBRe1bi3p5ICK923c68XQc.roa
Signing time: Thu 09 Jul 2026 19:36:59 +0000
ROA not before: Thu 09 Jul 2026 19:36:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205774
IP address blocks: 91.208.100.0/24 maxlen: 24
185.159.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:62:25:05:a0:0c:2d:ac:8e:b4:80:7b:ea:85:31:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a98e3805b949b8a56cb12a242cad8020d9156d4
Validity
Not Before: Jul 9 19:36:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb6c320550517b56e2de9e4808af76ddcebc5d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:a2:d0:a7:88:23:84:57:84:aa:80:0d:73:
ec:49:29:d5:7f:0c:16:21:84:89:5a:e7:fb:89:11:
76:3c:45:86:59:84:08:40:67:9a:9e:10:1d:f5:96:
d8:9e:59:4e:22:ce:7b:ad:00:93:fc:0c:d1:ed:01:
8c:19:4d:86:69:43:13:30:71:65:88:00:6c:ee:0f:
c4:df:01:2a:c0:11:49:10:75:18:0d:a0:ca:7e:a2:
2f:76:ba:1f:f6:58:ff:56:e8:fb:40:cc:71:6b:08:
5e:11:43:ee:7a:ad:d6:22:26:c2:49:77:dd:fc:da:
19:3c:2b:b8:00:bd:40:c8:16:2f:9d:06:db:61:b7:
83:d6:e3:83:47:32:e1:8f:ad:dd:fa:b2:c7:06:b1:
9f:1b:49:73:3c:69:fe:a6:7a:f9:8a:90:81:f1:15:
e5:0d:bd:3f:07:78:51:17:33:2e:57:2f:7a:6f:2d:
d3:cb:f6:8c:a1:49:16:9a:00:fb:00:41:75:85:7c:
04:e5:c3:2e:5d:2b:5c:6a:96:76:85:49:a6:bf:89:
97:7b:10:79:ed:a7:d0:b7:29:56:59:ce:df:6d:0f:
22:a9:fa:60:0c:69:9b:ad:41:ee:70:64:b5:71:26:
70:53:82:1a:e7:da:18:0d:f3:4f:b3:39:ae:27:20:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:32:05:50:51:7B:56:E2:DE:9E:48:08:AF:76:DD:CE:BC:5D:07
X509v3 Authority Key Identifier:
keyid:5A:98:E3:80:5B:94:9B:8A:56:CB:12:A2:42:CA:D8:02:0D:91:56:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/u2wyBVBRe1bi3p5ICK923c68XQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bb9c36-fa56-4f0d-b187-75fb8c49278e/1/WpjjgFuUm4pWyxKiQsrYAg2RVtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.100.0/24
185.159.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:9c:34:b3:df:4a:9b:44:4d:c7:27:83:b6:02:56:56:bf:71:
12:82:cc:c7:0c:68:3a:46:cf:69:76:70:62:ba:c1:1e:a7:e4:
9f:59:cc:64:86:b5:4e:03:1d:7d:fa:1c:95:de:73:ab:06:0a:
6c:a5:27:96:b2:08:d8:b9:b5:36:e3:fc:3b:44:b2:bf:fb:a7:
28:c2:98:3b:aa:a2:88:8f:65:41:17:0b:40:87:ca:8f:36:fb:
de:38:47:42:b3:9c:2e:1d:b8:cf:93:c7:8c:32:6c:77:5d:7e:
9e:05:94:d4:92:cd:aa:c4:3f:13:9e:c6:a6:e2:1d:29:66:19:
c8:a1:5e:03:d2:2d:56:f1:12:30:8a:7f:ed:e5:1f:c3:98:93:
ab:0b:45:83:da:4c:b7:d7:a1:6c:f1:6c:55:34:91:7e:7b:3c:
e0:92:e1:9b:2c:db:68:a7:0f:a0:c9:fc:fc:41:fe:ce:66:33:
02:2e:bc:cf:98:73:16:ae:31:f2:2e:60:c0:08:28:31:71:63:
25:5b:29:b6:ee:9c:09:08:6c:0c:2c:4e:7a:07:ac:a1:80:59:
2e:c0:5a:b1:41:59:11:15:f6:70:b0:85:fb:87:dd:f7:cf:7e:
0e:ad:e9:c6:30:9f:94:e0:6e:2d:7b:96:02:d2:fb:2c:8b:38:
7f:12:bc:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9IYiUFoAwtrI60gHvqhTHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOThlMzgwNWI5NDliOGE1NmNiMTJhMjQyY2FkODAyMGQ5
MTU2ZDQwHhcNMjYwNzA5MTkzNjU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjZjMzIwNTUwNTE3YjU2ZTJkZTllNDgwOGFmNzZkZGNlYmM1ZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Ci0KeII4RXhKqADXPsSSnVfwwW
IYSJWuf7iRF2PEWGWYQIQGeanhAd9ZbYnllOIs57rQCT/AzR7QGMGU2GaUMTMHFl
iABs7g/E3wEqwBFJEHUYDaDKfqIvdrof9lj/Vuj7QMxxawheEUPueq3WIibCSXfd
/NoZPCu4AL1AyBYvnQbbYbeD1uODRzLhj63d+rLHBrGfG0lzPGn+pnr5ipCB8RXl
Db0/B3hRFzMuVy96by3Ty/aMoUkWmgD7AEF1hXwE5cMuXStcapZ2hUmmv4mXexB5
7afQtylWWc7fbQ8iqfpgDGmbrUHucGS1cSZwU4Ia59oYDfNPszmuJyDAPwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLtsMgVQUXtW4t6eSAivdt3OvF0HMB8GA1UdIwQY
MBaAFFqY44BblJuKVssSokLK2AINkVbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BqamdGdVVtNHBXeXhLaVFzcllBZzJSVnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iYjljMzYtZmE1Ni00ZjBkLWIxODct
NzVmYjhjNDkyNzhlLzEvdTJ3eUJWQlJlMWJpM3A1SUNLOTIzYzY4WFFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iYjljMzYtZmE1Ni00ZjBkLWIxODctNzVmYjhjNDkyNzhl
LzEvV3BqamdGdVVtNHBXeXhLaVFzcllBZzJSVnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9BkAwQA
uZ9YMA0GCSqGSIb3DQEBCwUAA4IBAQANnDSz30qbRE3HJ4O2AlZWv3ESgszHDGg6
Rs9pdnBiusEep+SfWcxkhrVOAx19+hyV3nOrBgpspSeWsgjYubU24/w7RLK/+6co
wpg7qqKIj2VBFwtAh8qPNvveOEdCs5wuHbjPk8eMMmx3XX6eBZTUks2qxD8Tnsam
4h0pZhnIoV4D0i1W8RIwin/t5R/DmJOrC0WD2ky316Fs8WxVNJF+ezzgkuGbLNto
pw+gyfz8Qf7OZjMCLrzPmHMWrjHyLmDACCgxcWMlWym27pwJCGwMLE56B6yhgFku
wFqxQVkRFfZwsIX7h933z34OrenGMJ+U4G4te5YC0vssizh/Erxp
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:06:47 2026 by rpki-client