Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/UsfSb8kbVMR3V5PLMt6PJ3rLgiQ.roa
File: UsfSb8kbVMR3V5PLMt6PJ3rLgiQ.roa (raw, json)
Hash identifier: UVQiOpULaEZcLrQvc6D5QZ9BzS1vMwC2aKzYqyaPovk=
Subject key identifier: 52:C7:D2:6F:C9:1B:54:C4:77:57:93:CB:32:DE:8F:27:7A:CB:82:24
Certificate issuer: /CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Certificate serial: 019F236916EEF1C31694B78417D21E056C24
Authority key identifier: A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/UsfSb8kbVMR3V5PLMt6PJ3rLgiQ.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213847
IP address blocks: 89.184.118.0/24 maxlen: 24
185.182.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:16:ee:f1:c3:16:94:b7:84:17:d2:1e:05:6c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08259a41d9c90c871a4a4081eeac98e921c9c96
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52c7d26fc91b54c4775793cb32de8f277acb8224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:a8:c0:57:ca:6b:3d:f9:df:17:45:8d:d3:
43:d6:80:ad:fc:ed:10:85:58:0c:76:48:59:55:e9:
7f:49:d8:fc:04:a7:9a:b9:5c:d3:96:f0:6e:42:87:
72:6f:82:da:40:e6:4d:3d:9f:bd:88:cf:d9:e0:c1:
94:75:41:d7:38:e8:95:f3:cb:32:03:11:29:bd:c6:
41:0e:5b:d0:57:88:59:1f:2f:bc:c2:5b:9e:f9:12:
69:c6:76:54:9e:47:8b:84:2f:93:43:c7:54:d1:fb:
19:9f:4e:2b:75:3c:b9:a6:68:7c:00:50:95:a5:a5:
c3:f0:03:f0:bf:fc:e9:6d:dc:15:54:b0:18:06:e4:
5e:a5:47:7e:49:24:09:06:20:a0:e0:94:aa:9e:c5:
1b:83:09:b0:9d:da:5b:3a:85:b0:c7:88:9e:dd:4d:
dc:7c:a4:a1:ec:ff:f7:52:60:d1:83:82:59:28:cf:
d8:11:e5:7a:d5:8b:be:cb:e7:c2:01:81:12:a2:0d:
cc:52:92:ae:16:73:87:5d:59:bd:cc:48:6a:32:5d:
45:6e:fc:1f:6d:3f:f1:6e:c0:aa:51:31:2c:c7:34:
ef:be:44:59:c5:8a:5c:e2:50:91:6e:28:1a:c8:94:
d6:e0:4f:f6:89:f9:d1:fb:c1:d9:cc:e2:a2:bc:35:
07:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C7:D2:6F:C9:1B:54:C4:77:57:93:CB:32:DE:8F:27:7A:CB:82:24
X509v3 Authority Key Identifier:
keyid:A0:82:59:A4:1D:9C:90:C8:71:A4:A4:08:1E:EA:C9:8E:92:1C:9C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIJZpB2ckMhxpKQIHurJjpIcnJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/UsfSb8kbVMR3V5PLMt6PJ3rLgiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/oIJZpB2ckMhxpKQIHurJjpIcnJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.184.118.0/24
185.182.116.0/22
Signature Algorithm: sha256WithRSAEncryption
11:9c:fb:e5:5d:d8:a7:ba:72:ad:fe:5d:ec:f3:34:71:20:61:
00:dc:60:d4:dd:46:73:09:a5:49:6a:5b:a8:12:74:cb:6e:15:
f2:9a:eb:90:d8:b2:07:90:5b:96:c3:d9:23:a1:82:fa:3b:a4:
3a:cb:6d:ea:b1:2e:17:2e:44:29:f6:25:d8:e7:1c:7d:49:bb:
f2:c5:1a:86:8c:55:32:8a:f8:dc:94:61:cc:5f:db:3f:66:f6:
20:f2:99:02:a4:b7:bc:d6:22:51:20:f9:7d:8a:23:f5:5b:99:
c0:73:71:12:7f:ee:ab:ca:44:98:34:50:3b:81:12:f5:38:cb:
db:c4:6c:ba:23:5d:81:58:47:ce:e7:62:39:53:21:1c:c1:2c:
c1:af:95:ec:fd:cc:23:bc:d3:4e:6c:fd:4e:8b:eb:38:3f:f4:
87:04:10:8e:89:b2:c9:34:b5:4e:de:25:14:94:48:b9:1e:f3:
e3:da:19:82:25:da:57:2f:f4:54:cd:1f:50:2e:70:78:ba:dd:
fc:59:ff:a1:14:e3:b2:de:5f:74:91:1f:c7:b4:ae:80:a7:ce:
09:a8:6d:ac:ab:12:0b:11:0e:0f:45:0e:ce:b8:28:81:a0:af:
fd:13:9a:cf:90:49:6a:e5:dc:17:d6:d0:05:0a:ae:51:f6:d9:
57:96:7b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:54 2026 by rpki-client