Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/U0AA7EaHxwqbTPzMCeNQUIYG4PQ.roa
File: U0AA7EaHxwqbTPzMCeNQUIYG4PQ.roa (raw, json)
Hash identifier: 5cImUEVKi/8eDo+GCbXnHQDUtXyra6YYdj1pJzdPRCQ=
Subject key identifier: 53:40:00:EC:46:87:C7:0A:9B:4C:FC:CC:09:E3:50:50:86:06:E0:F4
Certificate issuer: /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial: 019ED09834F71384E4E065E1E1E0BD22465E
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/U0AA7EaHxwqbTPzMCeNQUIYG4PQ.roa
Signing time: Tue 16 Jun 2026 13:21:36 +0000
ROA not before: Tue 16 Jun 2026 13:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31317
IP address blocks: 91.198.136.0/24 maxlen: 24
185.170.244.0/22 maxlen: 32
185.206.121.0/24 maxlen: 24
2a0a:b900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:98:34:f7:13:84:e4:e0:65:e1:e1:e0:bd:22:46:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Validity
Not Before: Jun 16 13:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=534000ec4687c70a9b4cfccc09e350508606e0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:30:25:4b:2d:42:0a:30:6d:c1:11:d3:4e:
1c:7f:fc:b9:e6:f4:0f:c4:ad:08:f4:8f:0c:d9:b3:
c2:79:65:4c:55:ea:52:6c:7d:9a:b4:31:41:b4:c9:
72:b0:f9:a3:94:12:21:73:34:21:5e:0c:97:bf:77:
9d:a1:8e:96:d3:35:44:37:21:78:f8:00:08:a7:2a:
7d:13:0d:48:9f:c0:f9:a7:ac:6f:a7:93:a2:de:41:
37:67:09:1c:a3:4e:e5:a8:58:87:74:33:3a:8a:66:
b0:6b:c5:ba:a1:a7:11:a5:68:1e:68:a1:db:bc:fc:
02:9e:dd:ca:06:85:97:84:c6:df:3b:37:c8:3b:f5:
e4:91:a6:dd:59:6e:a8:b9:ef:9c:5d:93:a6:b7:20:
a8:51:25:66:13:a3:5e:33:fe:45:07:68:18:b3:d2:
a8:c6:96:9e:ed:c1:80:d3:c7:79:af:2b:4f:a9:8a:
65:17:02:88:01:92:70:5e:fa:65:ab:93:9e:09:71:
ad:0d:4e:49:91:e6:33:7f:52:6b:23:77:ab:7c:63:
53:85:18:a2:10:6c:da:2b:75:32:ae:36:2d:5e:39:
eb:14:7e:7e:b9:f9:60:0b:6c:12:e7:2c:16:85:ec:
12:1e:bf:3b:b5:f9:37:0a:2e:9d:b1:15:ab:42:f1:
41:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:40:00:EC:46:87:C7:0A:9B:4C:FC:CC:09:E3:50:50:86:06:E0:F4
X509v3 Authority Key Identifier:
keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/U0AA7EaHxwqbTPzMCeNQUIYG4PQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.136.0/24
185.170.244.0/22
185.206.121.0/24
IPv6:
2a0a:b900::/29
Signature Algorithm: sha256WithRSAEncryption
1c:20:c5:41:b6:fe:a7:db:ad:c7:2f:de:75:d0:f4:b8:02:20:
85:26:1a:d7:43:be:37:51:25:eb:1b:02:d4:1f:9b:33:a9:51:
e1:c0:ae:c1:a2:2f:9c:80:ae:7a:84:e2:e2:a7:df:8c:65:1a:
b2:e6:b3:82:cd:74:f2:6f:3a:04:17:ac:7d:e9:bf:dc:bd:b8:
67:89:58:6a:2f:bc:47:93:62:f7:29:a8:45:ba:a2:6b:7d:40:
b0:f8:94:95:0a:fd:d4:7f:f3:81:05:cb:19:98:81:1b:2e:c9:
6f:a8:0d:53:b7:e6:da:76:fa:cd:da:4c:3a:90:a5:ed:c4:01:
dd:b0:4f:40:fd:ab:98:5e:e5:03:a1:96:58:fc:ac:86:bd:ba:
ec:17:25:49:b1:6a:18:d4:6e:3a:14:52:63:d8:ec:19:06:5d:
4f:cd:8e:64:0e:12:79:80:bd:7b:78:80:75:b0:f6:bc:23:3c:
85:a6:b3:23:e0:53:af:f8:ba:33:2d:33:3d:f1:89:6e:4d:6c:
61:67:c8:4a:0e:ca:f2:ce:fe:03:c2:d5:f8:fa:95:d6:73:a7:
7a:25:d5:92:22:a5:02:50:e6:fd:82:cc:55:2d:98:4e:5d:b5:
06:5d:4c:00:b8:93:44:48:47:2d:e2:76:94:5c:67:c9:15:16:
78:f7:c7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 20:54:55 2026 by rpki-client