Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U_tlrTFiwmjUC4KF65QdAxUMa0w.roa
File: U_tlrTFiwmjUC4KF65QdAxUMa0w.roa (raw, json)
Hash identifier: sWGMfP6Bga4t2t8bkzyxAZ3Sd+T3akkkpBxtITHSbMo=
Subject key identifier: 53:FB:65:AD:31:62:C2:68:D4:0B:82:85:EB:94:1D:03:15:0C:6B:4C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A1684C3D56B9DD1A4621020B429155C168
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U_tlrTFiwmjUC4KF65QdAxUMa0w.roa
Signing time: Fri 23 Oct 2026 10:26:29 +0000
ROA not before: Fri 23 Oct 2026 10:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214668
IP address blocks: 81.161.238.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
193.37.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:4c:3d:56:b9:dd:1a:46:21:02:0b:42:91:55:c1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 23 10:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53fb65ad3162c268d40b8285eb941d03150c6b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:53:4c:cf:ba:14:ee:2f:d6:6a:a7:b1:86:ac:
97:bb:d0:7a:1c:c4:74:86:c0:76:4b:10:eb:b8:ce:
e7:8b:9f:01:83:c8:67:2b:19:15:66:ce:af:8f:c7:
95:58:8b:6d:78:2f:fa:bd:5f:a5:f3:b6:41:89:ae:
34:80:16:c0:63:76:86:35:86:70:45:99:04:88:c8:
0c:3a:73:68:33:7b:11:ee:25:a0:a7:67:ff:3a:37:
ed:d3:2d:02:86:2e:0a:12:a3:55:47:3d:22:58:37:
c3:2a:74:dd:9c:a2:5e:3d:77:fa:5a:9d:06:3a:88:
46:a0:c8:08:f8:8d:7a:dd:d1:89:bd:df:06:66:44:
c4:76:36:5b:c7:12:bb:fc:03:b4:46:94:81:d4:7c:
bf:9d:e3:fa:42:88:fc:4e:d2:76:12:a2:4d:4a:85:
7d:3b:bd:9a:20:f1:6d:ef:24:94:bc:86:ad:16:df:
d4:f9:2d:c0:2d:07:70:30:50:56:ea:da:cc:94:0c:
fa:06:6e:a9:c0:b1:ff:32:7d:9b:90:f2:81:b2:86:
97:74:5e:9e:be:a6:e6:dd:f7:c1:99:7c:9c:2c:d8:
8b:56:86:29:0f:e0:36:ee:c9:10:da:4f:36:d4:9d:
74:95:85:cf:84:26:2f:4c:fa:db:4a:e5:08:81:ee:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FB:65:AD:31:62:C2:68:D4:0B:82:85:EB:94:1D:03:15:0C:6B:4C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/U_tlrTFiwmjUC4KF65QdAxUMa0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.238.0/24
185.222.160.0/24
193.37.41.0/24
Signature Algorithm: sha256WithRSAEncryption
08:90:c1:fa:b2:66:34:dc:0c:bd:88:83:ed:f4:e7:b8:54:8f:
76:80:c6:b5:3b:b2:7b:f3:69:fb:d1:81:69:58:73:3e:96:fa:
36:88:b6:2f:34:77:80:82:5f:0d:d0:66:60:28:9f:a7:d6:16:
29:32:09:78:48:b1:d6:eb:c1:57:79:d6:c3:22:29:60:20:27:
61:33:f4:92:ec:b8:bb:3c:bd:5c:8c:6b:7b:65:3d:9b:d0:d8:
87:6b:80:2f:0c:a7:8f:87:d4:1f:8c:36:65:bf:11:8f:9b:6c:
c2:53:70:8d:01:aa:18:f8:76:27:12:6e:ff:29:f6:a7:57:11:
69:b4:ba:d8:d5:b4:da:27:d6:4c:38:85:c7:62:5f:5a:bb:78:
b7:57:fb:a5:99:25:35:0f:84:4f:4c:91:06:cf:a8:99:66:95:
9b:b7:33:86:c6:c7:dd:d0:72:c6:c3:4b:43:57:d7:dd:6e:e8:
95:cc:23:e5:ec:37:3e:b4:07:69:9f:52:a1:77:4a:8f:d2:da:
ad:81:a2:13:31:af:46:3d:bb:bd:72:5c:6c:d8:31:e3:7e:da:
f0:c4:8d:ed:8f:ef:8a:f2:7f:14:74:b3:f7:d9:fe:fa:2c:08:
0e:bd:75:01:77:87:d3:fb:49:2b:79:b8:00:9f:72:55:da:7f:
f5:e9:ff:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:13 2026 by rpki-client