Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1UGmxNRhyn4nBP2iAoRabuieasI.roa
File: 1UGmxNRhyn4nBP2iAoRabuieasI.roa (raw, json)
Hash identifier: OSv4KiAjNcIdvD2GNrMqvxhhuEfxPJsWz4M/CMqBjCE=
Subject key identifier: D5:41:A6:C4:D4:61:CA:7E:27:04:FD:A2:02:84:5A:6E:E8:9E:6A:C2
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A038866B8113357F03263E03D6BE013FA8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1UGmxNRhyn4nBP2iAoRabuieasI.roa
Signing time: Tue 25 Aug 2026 10:45:28 +0000
ROA not before: Tue 25 Aug 2026 10:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219197
IP address blocks: 185.218.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:86:6b:81:13:35:7f:03:26:3e:03:d6:be:01:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 25 10:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d541a6c4d461ca7e2704fda202845a6ee89e6ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f7:01:00:31:73:9b:a5:46:01:83:89:e9:9d:
35:ca:74:d7:57:bf:96:86:d4:52:4c:41:24:85:a4:
3a:1f:b8:ea:ff:f3:ec:03:a2:5d:ee:66:fd:c2:78:
ef:8d:7c:8d:e4:fe:09:e1:60:26:cb:bd:43:05:93:
8a:e6:b0:cc:b0:42:52:11:90:59:83:89:1b:4f:1c:
8b:02:1b:aa:ce:c7:9a:45:6e:36:22:36:60:3f:a8:
2c:f5:92:f2:71:10:db:3f:a5:e7:1d:42:64:b6:65:
49:81:26:16:c1:31:2c:5a:45:b5:06:fb:71:1f:d1:
bf:3d:83:b1:58:50:57:05:a3:47:29:e5:9c:4a:cc:
ed:9f:ae:7c:f8:03:6a:28:1e:0b:05:c6:7a:8a:f1:
59:a3:e3:90:43:4f:19:ce:ac:ea:2e:03:16:16:ab:
df:d3:14:66:54:da:de:68:ee:33:fe:c1:9a:b1:42:
ea:ef:04:9e:cf:e6:b1:aa:bf:ee:7d:33:db:80:0a:
c4:6c:d1:45:b4:83:5d:58:82:5b:02:94:2c:a5:b4:
83:0a:13:b0:74:eb:02:44:c5:c6:a8:71:49:b0:dc:
64:4a:e2:59:c3:a1:14:26:70:bc:25:19:e9:53:60:
1d:59:b2:28:b6:34:82:19:ed:ad:1b:4b:3d:b0:54:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:41:A6:C4:D4:61:CA:7E:27:04:FD:A2:02:84:5A:6E:E8:9E:6A:C2
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1UGmxNRhyn4nBP2iAoRabuieasI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.87.0/24
Signature Algorithm: sha256WithRSAEncryption
67:c7:24:10:15:51:a2:ce:36:1e:2d:66:14:13:39:51:10:58:
cd:25:a0:0c:5a:95:a7:fc:e0:65:0e:3a:d7:ed:8d:a4:eb:59:
8c:45:09:b8:e4:7e:53:10:08:5e:ca:b6:15:aa:bf:55:80:23:
a7:68:4a:66:de:a5:d0:7c:bd:95:d1:d2:60:73:da:64:48:7c:
ed:b8:e6:bd:32:c0:f6:b0:17:14:84:ca:dd:c1:4a:c5:a9:88:
5e:5d:a4:9f:cf:9e:5d:11:14:33:9c:47:87:49:6c:29:18:7a:
d9:7b:14:af:8d:d5:cd:d7:91:ea:79:cc:b0:c8:06:9d:9e:06:
c4:cf:5f:6f:b5:c4:8f:b2:7d:3e:30:e1:10:93:7d:01:ae:4e:
ac:79:32:ec:43:88:5f:44:5a:a8:30:92:2c:aa:2f:8e:02:1a:
02:8b:ac:55:86:94:9f:93:3c:89:f2:72:55:94:29:a1:04:7e:
c6:26:71:65:02:15:76:c8:74:e0:a7:7d:12:b7:e2:42:f8:6b:
01:6c:2b:2c:e7:83:ef:30:db:ee:72:d0:6c:03:a8:f0:17:96:
6a:ec:85:17:d0:3f:26:94:d9:73:c3:c6:2c:25:c2:e3:40:64:
ab:3f:3e:79:74:6c:be:5c:de:c5:57:54:1d:59:4b:8a:c3:6a:
db:71:82:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:08:41 2026 by rpki-client