Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa
File: UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa (raw, json)
Hash identifier: narBwfpb8RAcShxX1DzjbkkEFV1ZbklkMy2WAyEvk6Q=
Subject key identifier: 51:DC:05:A5:BF:6D:E3:0C:FF:80:2A:6F:97:F4:4B:3E:F0:26:48:E3
Certificate issuer: /CN=4268a4cfb6b1b6447da93833321dd315061193d4
Certificate serial: 019E877F58E41687C3463312927891FD4FB0
Authority key identifier: 42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa
Signing time: Tue 02 Jun 2026 08:42:10 +0000
ROA not before: Tue 02 Jun 2026 08:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41981
IP address blocks: 185.105.252.0/24 maxlen: 24
185.105.253.0/24 maxlen: 24
185.105.254.0/24 maxlen: 24
185.105.255.0/24 maxlen: 24
2a06:3a80::/40 maxlen: 40
2a06:3a80:200::/40 maxlen: 40
2a06:3a80:300::/40 maxlen: 40
2a06:3a80:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:7f:58:e4:16:87:c3:46:33:12:92:78:91:fd:4f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4268a4cfb6b1b6447da93833321dd315061193d4
Validity
Not Before: Jun 2 08:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51dc05a5bf6de30cff802a6f97f44b3ef02648e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:1a:0c:71:03:d7:a4:55:9f:db:7f:60:eb:
ae:e9:7d:4c:6f:1a:9a:eb:07:f4:4b:21:a6:5e:76:
2d:e8:ca:ad:5b:36:1f:7f:15:02:59:a3:ab:77:5e:
a6:07:1d:a4:d2:f2:1f:97:b1:a4:2f:f5:cf:23:2f:
14:6e:59:87:21:b0:2f:8e:b6:58:13:ee:54:7b:45:
6b:2b:e9:45:24:4e:84:d4:8e:2d:fc:f8:22:5d:46:
1c:b2:bf:33:d5:33:86:9f:a2:c5:3e:26:84:00:59:
2f:4a:5e:a1:83:fa:36:fa:81:03:5b:32:8a:41:a5:
d8:d0:de:4b:ec:c5:8e:79:45:6e:54:6a:3f:c6:bf:
34:2e:71:60:cd:3f:4b:5b:9c:04:46:68:4a:c4:32:
7e:02:16:78:42:c6:86:68:2f:15:75:d6:b9:f6:58:
41:c7:b7:aa:a9:ac:7a:af:da:50:58:f7:8f:8f:a0:
ca:d4:44:9b:a4:af:89:93:0d:59:b3:45:05:eb:b2:
2d:b2:dc:16:f8:04:20:37:e3:44:e6:e9:a6:31:d2:
12:d2:d4:77:c0:df:67:ee:c7:e5:01:2a:f5:88:58:
52:2d:a5:99:eb:c9:a3:11:e1:d6:51:5a:d8:46:cd:
91:c8:b0:4b:42:2e:0d:df:17:65:21:55:31:fd:73:
1a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DC:05:A5:BF:6D:E3:0C:FF:80:2A:6F:97:F4:4B:3E:F0:26:48:E3
X509v3 Authority Key Identifier:
keyid:42:68:A4:CF:B6:B1:B6:44:7D:A9:38:33:32:1D:D3:15:06:11:93:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qmikz7axtkR9qTgzMh3TFQYRk9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/UdwFpb9t4wz_gCpvl_RLPvAmSOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/7d43bb-a1c6-4055-8c53-2fee8b6309cb/1/Qmikz7axtkR9qTgzMh3TFQYRk9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.252.0/22
IPv6:
2a06:3a80::/40
2a06:3a80:200::-2a06:3a80:4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7d:a8:5c:2e:c6:58:24:99:ee:18:5c:fc:5b:ed:74:87:48:9d:
a4:de:65:7e:fc:ef:bf:f6:cf:92:a5:15:81:5f:e4:85:9b:21:
1f:07:59:82:77:51:45:0a:6b:3d:5f:4f:43:3a:8d:30:35:dd:
03:12:bc:6c:47:14:1c:af:bc:52:a2:ea:14:f6:eb:ff:9e:99:
0c:97:55:18:89:c9:aa:e7:92:14:ac:cb:32:04:39:f1:39:4f:
ce:93:f5:48:9d:d4:27:8e:4b:d0:5b:5e:7f:df:8d:81:d3:68:
73:57:3c:d9:46:a2:7b:01:c1:95:8e:87:5d:6a:02:1c:6d:03:
f2:08:41:1f:b4:e4:04:8d:48:f3:a1:91:8f:97:7b:aa:3f:b1:
83:d7:2d:45:88:6d:0a:24:26:3b:e8:e7:97:7f:fb:36:0f:9b:
43:75:b9:8e:77:da:47:97:76:09:88:ec:70:db:a0:08:2d:c9:
e1:23:02:f9:2b:b4:0c:18:22:c9:24:f6:88:4e:19:85:ea:41:
80:96:6f:c1:7b:25:a3:53:dc:fe:7b:4e:38:21:16:bf:2f:db:
15:5e:b4:ed:8b:f4:ce:3d:73:ac:b9:97:e9:b5:d2:53:35:2d:
47:17:fd:0f:ed:a7:e9:13:78:97:ce:8e:8e:76:68:a6:8a:da:
02:0e:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:38 2026 by rpki-client