Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UKY6mojcacWKM5FKZ-jGxUG5IIk.roa
File: UKY6mojcacWKM5FKZ-jGxUG5IIk.roa (raw, json)
Hash identifier: nLh73I8uXHvPvcxmMFjA2vr4Oz6XyinvQ/Ie2fQPHVM=
Subject key identifier: 50:A6:3A:9A:88:DC:69:C5:8A:33:91:4A:67:E8:C6:C5:41:B9:20:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A01F440D0B119C258F5D600698AAF7EFDB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UKY6mojcacWKM5FKZ-jGxUG5IIk.roa
Signing time: Thu 20 Aug 2026 13:02:28 +0000
ROA not before: Thu 20 Aug 2026 13:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210328
IP address blocks: 185.218.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:44:0d:0b:11:9c:25:8f:5d:60:06:98:aa:f7:ef:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 20 13:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50a63a9a88dc69c58a33914a67e8c6c541b92089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:47:ee:05:25:8a:40:6c:88:1e:2b:3b:39:
dc:49:c9:8e:1e:5a:fa:76:99:10:43:c0:84:0a:25:
c9:3a:31:1b:c5:ad:44:ee:56:7f:32:5b:cb:95:82:
a9:36:d6:90:93:03:30:fe:bf:6f:ad:cc:9c:31:88:
ce:53:c3:05:bb:e5:fb:06:45:47:95:51:80:21:c5:
54:55:bc:23:66:2e:3a:1b:cd:63:3a:9d:5f:50:82:
2b:9b:f4:9e:f8:28:ac:e0:77:9d:ba:ad:ee:8b:d4:
c8:f5:4d:74:d6:34:12:74:df:37:bc:a6:b9:55:bc:
af:f4:b5:0f:64:e1:3d:0f:88:bb:e0:3c:15:b3:67:
81:bb:f4:79:96:bf:25:26:41:ea:96:ff:80:d4:b0:
13:fb:86:73:0e:9e:34:33:5c:d5:d8:76:5f:93:b8:
bf:e7:69:08:4f:b0:d5:10:2e:4e:f6:38:8f:74:61:
62:39:e4:90:1b:0d:ec:0d:bd:e2:d4:33:93:09:85:
fb:4b:82:c1:1e:8b:d9:82:15:6a:77:e9:e9:3a:31:
f7:fd:a4:16:b3:5f:f0:ee:41:a0:d2:f0:20:63:91:
fb:6c:fa:c8:c8:f1:0f:28:51:35:08:87:00:a6:c8:
98:65:3f:7b:e5:62:fd:dd:9f:bc:50:04:66:ad:3c:
ba:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A6:3A:9A:88:DC:69:C5:8A:33:91:4A:67:E8:C6:C5:41:B9:20:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/UKY6mojcacWKM5FKZ-jGxUG5IIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.138.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5d:0d:12:2c:ec:ad:49:80:09:95:db:9d:c3:f8:a8:6f:d4:
0e:4d:7c:0b:6b:16:0e:af:c7:1d:37:0f:5a:db:85:3b:f2:68:
6e:74:c4:d5:3a:55:6b:53:86:6c:a5:89:4a:b7:c2:6a:b6:d9:
99:c0:f9:00:1d:a9:d3:4b:16:f5:f6:15:cb:7d:9e:85:bd:e2:
df:63:54:10:4f:ca:41:87:78:57:58:ce:14:c2:77:5a:69:20:
54:f7:25:9d:7b:60:a9:85:5e:90:fc:87:66:d2:d3:d4:9b:51:
47:a7:65:ad:f9:8b:96:cf:ec:5b:58:4d:65:12:a6:cc:f9:e6:
24:7f:15:00:e0:8f:8e:7b:bf:41:ca:4c:b0:5a:90:c1:6b:45:
41:64:a4:62:5a:a1:b3:22:3a:26:0c:25:69:26:c3:dd:09:93:
5b:30:c3:57:bd:f7:f2:51:bc:75:02:11:09:5d:c7:b1:eb:4c:
ac:f5:37:b1:e6:95:5f:b4:85:a3:0f:18:09:f1:ae:1e:73:e1:
e3:02:63:8e:cc:50:ba:5d:82:84:15:28:f4:18:c8:15:2c:3b:
0a:8b:52:0a:a2:23:98:f9:02:5c:16:03:ff:86:3b:44:d9:bf:
77:0e:71:a9:25:86:99:59:99:c9:e4:64:4e:12:df:1a:95:87:
9b:c1:bc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 18:13:59 2026 by rpki-client