Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/UdacM9ueU4fTZAcn05BbHDu10YY.roa
File: UdacM9ueU4fTZAcn05BbHDu10YY.roa (raw, json)
Hash identifier: zli1vqBuGj4w6sq940v9plUifYC90I/HldwyEsoprOE=
Subject key identifier: 51:D6:9C:33:DB:9E:53:87:D3:64:07:27:D3:90:5B:1C:3B:B5:D1:86
Certificate issuer: /CN=cbe970980d565cc74adb294aa68c7b06f5132890
Certificate serial: 019F27C535E7E330026499AA862FBC15ADED
Authority key identifier: CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/UdacM9ueU4fTZAcn05BbHDu10YY.roa
Signing time: Fri 03 Jul 2026 11:37:43 +0000
ROA not before: Fri 03 Jul 2026 11:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399461
IP address blocks: 185.141.82.0/24 maxlen: 24
185.141.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:c5:35:e7:e3:30:02:64:99:aa:86:2f:bc:15:ad:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe970980d565cc74adb294aa68c7b06f5132890
Validity
Not Before: Jul 3 11:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51d69c33db9e5387d3640727d3905b1c3bb5d186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:79:5c:15:09:7e:40:62:f4:58:2a:44:27:
c4:83:ac:12:1b:ff:09:5d:2f:96:55:db:fa:d1:b8:
44:68:2e:bb:8e:af:3b:46:e6:9e:8e:a7:cb:19:0b:
94:41:c6:7b:6e:75:32:04:03:d8:60:13:77:62:87:
13:09:87:60:84:b0:4e:9b:6f:e6:cb:fb:79:9d:b4:
02:03:5f:ed:0e:d4:a9:20:12:b2:7f:0f:7f:96:20:
61:92:ce:88:b7:1b:d8:7b:20:55:16:5a:72:92:76:
cc:9a:f8:c8:3d:dc:df:b6:df:5f:c2:4e:5f:f8:0f:
ef:ae:0d:d5:3a:54:06:cd:85:0e:40:c1:e5:c2:7f:
58:b7:0f:cd:59:84:72:60:42:56:77:9a:75:4d:cb:
d3:1c:29:a8:d5:3e:d3:06:8d:41:6e:44:bd:3a:0a:
58:d2:a5:5b:1b:d7:18:9d:14:09:a1:14:52:7a:00:
2e:d2:19:51:59:1e:53:16:c0:10:5f:46:93:be:ea:
24:7c:34:c0:8d:a7:4f:07:79:4d:bf:42:f3:80:1a:
3b:03:85:3a:4b:72:8c:e2:1c:1d:32:ce:e7:4a:5e:
c7:1a:d9:0a:a1:ed:ad:f4:18:52:3d:bb:80:6e:94:
b8:34:67:e0:d2:f1:ea:2f:4a:77:80:f8:21:04:39:
b0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D6:9C:33:DB:9E:53:87:D3:64:07:27:D3:90:5B:1C:3B:B5:D1:86
X509v3 Authority Key Identifier:
keyid:CB:E9:70:98:0D:56:5C:C7:4A:DB:29:4A:A6:8C:7B:06:F5:13:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y-lwmA1WXMdK2ylKpox7BvUTKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/UdacM9ueU4fTZAcn05BbHDu10YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3dcf7b-1703-459f-ac0b-756a08a4adda/1/y-lwmA1WXMdK2ylKpox7BvUTKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.82.0/23
Signature Algorithm: sha256WithRSAEncryption
21:8e:01:14:6d:c7:7c:34:c1:af:fa:2c:85:b9:88:65:8c:d4:
f3:c9:0b:f4:48:f7:f7:b8:49:0a:29:87:7b:a7:6e:9d:20:66:
fb:38:39:e2:8c:75:35:1e:e6:9d:55:66:b2:0f:6e:7c:53:43:
87:2f:68:7f:a3:45:5e:b5:84:ba:d0:34:b8:72:7c:d3:7d:4b:
e7:9e:8c:16:e6:18:49:bd:2d:ef:ac:c8:01:20:21:6f:32:13:
6c:73:b3:c0:96:57:9b:76:f7:b6:5e:cc:53:71:15:22:72:5d:
4e:36:ce:0e:87:09:ed:22:77:b8:ff:12:62:9a:aa:21:f4:bc:
56:ea:67:15:97:60:48:0b:db:b5:b0:cc:54:ef:81:0f:99:a5:
d2:f2:97:a0:5c:d8:51:a1:c9:08:a2:12:4e:17:2a:9e:8e:51:
54:17:83:28:96:a9:5d:8f:c4:b7:e5:1b:b4:98:24:00:bb:5e:
63:73:1e:87:2e:d3:2b:a0:9c:6b:2d:d8:ff:91:f7:25:ae:ba:
03:d8:67:0f:be:f1:89:b7:64:86:00:18:b3:ed:88:74:a0:5e:
d3:b6:22:39:c4:7b:b4:1d:e5:a5:b3:3b:eb:77:38:fa:12:c0:
24:2c:a2:95:b6:af:8c:2a:66:f2:80:74:cf:57:7a:da:af:66:
83:20:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:52:04 2026 by rpki-client