Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/p1UFe-A3GVCl1HWOXokFR0BLgRI.roa
File: p1UFe-A3GVCl1HWOXokFR0BLgRI.roa (raw, json)
Hash identifier: 6aN5iLeMiZgkWpmsYw7Km4jSWi66YA1EMnL+ubOl3gs=
Subject key identifier: A7:55:05:7B:E0:37:19:50:A5:D4:75:8E:5E:89:05:47:40:4B:81:12
Certificate issuer: /CN=9256ebf66b80f08135858d144ced6f785834f5f4
Certificate serial: 01A1CF663A538DAA5D4B7B1D2C0FD1969DAE
Authority key identifier: 92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/p1UFe-A3GVCl1HWOXokFR0BLgRI.roa
Signing time: Thu 12 Nov 2026 10:55:45 +0000
ROA not before: Thu 12 Nov 2026 10:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 185.168.160.0/22 maxlen: 24
185.168.160.0/24 maxlen: 24
185.168.161.0/24 maxlen: 24
185.168.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:66:3a:53:8d:aa:5d:4b:7b:1d:2c:0f:d1:96:9d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256ebf66b80f08135858d144ced6f785834f5f4
Validity
Not Before: Nov 12 10:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a755057be0371950a5d4758e5e890547404b8112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:65:c3:7d:a2:19:11:dc:21:c8:03:26:49:
a7:2b:c2:14:54:25:70:1c:0e:be:e8:70:4f:96:9c:
78:d2:8e:2e:8f:df:f3:53:b4:4f:66:9d:b7:87:cf:
96:aa:3d:9d:a5:a6:c1:f3:fb:b9:0e:70:5e:c3:77:
13:b2:f5:ea:61:1e:da:4f:0d:77:0a:60:69:ec:d9:
fe:e8:e2:b2:84:00:9a:c4:ce:47:04:81:19:03:ad:
a3:32:c5:06:1f:1b:7c:98:74:8e:99:5d:be:51:18:
52:9e:8d:e1:e0:a5:55:aa:37:6e:53:d1:74:d7:36:
61:f5:a7:e5:11:76:a0:d1:bb:de:33:34:37:a3:cd:
da:95:a8:11:f2:ea:35:5a:ea:c2:c3:41:c4:10:70:
cf:2a:56:c6:a2:09:98:46:a9:a7:72:89:dc:62:a3:
ef:f8:0d:b8:8f:ec:4a:cb:fd:94:01:2c:3d:6e:ca:
11:5e:1b:78:c0:e2:ce:47:8f:41:cc:7f:6f:e1:a0:
dc:66:7a:9a:11:ce:c5:5d:b4:4e:41:46:8e:3a:ad:
1d:6a:79:d1:c5:ba:e0:6c:89:8e:72:d3:33:49:78:
5d:ef:3b:d3:93:74:21:b0:6e:15:e0:ed:14:59:6b:
19:99:1e:85:75:e6:1a:b7:67:f7:21:58:e1:20:ee:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:55:05:7B:E0:37:19:50:A5:D4:75:8E:5E:89:05:47:40:4B:81:12
X509v3 Authority Key Identifier:
keyid:92:56:EB:F6:6B:80:F0:81:35:85:8D:14:4C:ED:6F:78:58:34:F5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbr9muA8IE1hY0UTO1veFg09fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/p1UFe-A3GVCl1HWOXokFR0BLgRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b717c5-a64b-4475-be3e-5da8d677d847/1/klbr9muA8IE1hY0UTO1veFg09fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.160.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b5:40:6a:dc:61:59:a9:12:29:2d:bf:56:f6:8e:fd:a1:04:
ed:aa:9c:b9:fe:6d:c7:93:9a:49:83:be:39:43:7e:ef:7a:b4:
1c:cf:ab:55:ae:4d:34:c2:1d:88:6f:db:db:12:35:cb:68:e9:
0c:1c:c6:38:22:d6:a4:fb:d4:1a:69:5f:76:53:26:19:38:cb:
dd:20:70:a4:ca:aa:e9:73:59:b3:d4:2e:3c:ac:26:d0:b0:01:
6c:0c:ce:fd:78:88:3f:be:a2:70:ca:32:32:c6:fd:e5:4f:15:
2b:a6:09:5d:ec:83:78:b8:88:23:43:a9:07:a3:c3:7d:f2:de:
32:40:b8:66:f7:47:ce:fd:03:23:bc:3a:2e:ac:13:da:74:38:
53:51:43:76:5c:1b:90:1d:ac:b6:48:2d:a4:4e:b0:d6:36:1e:
30:05:ab:c1:82:4c:6e:24:d7:03:ff:19:e1:81:fc:2a:dd:be:
29:5c:dc:fd:b9:fa:ab:24:a4:74:1f:91:ee:31:ba:2a:65:9e:
b7:db:4c:c9:96:61:e2:cc:e5:93:61:9b:d2:eb:0a:0c:85:6c:
46:ec:b5:2b:54:51:9b:4b:27:96:39:23:6c:ca:11:b1:07:01:
c4:e1:15:05:1e:dd:7c:79:92:a0:4d:ee:49:93:5e:f5:2a:4a:
f0:a0:95:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:38 2026 by rpki-client