Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uMq81kGd8iiplyoSOeGwClEd0Y4.roa
File: uMq81kGd8iiplyoSOeGwClEd0Y4.roa (raw, json)
Hash identifier: l3vEZV1p8xUxA+auKFuqfKPs2+S95yuXtQs6tn1gQEU=
Subject key identifier: B8:CA:BC:D6:41:9D:F2:28:A9:97:2A:12:39:E1:B0:0A:51:1D:D1:8E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0604A5C244C1AA527596A521596F9C652
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uMq81kGd8iiplyoSOeGwClEd0Y4.roa
Signing time: Wed 02 Sep 2026 04:04:40 +0000
ROA not before: Wed 02 Sep 2026 04:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216416
IP address blocks: 85.93.21.0/24 maxlen: 24
89.106.81.0/24 maxlen: 24
89.144.17.0/24 maxlen: 24
94.249.185.0/24 maxlen: 24
94.249.201.0/24 maxlen: 24
185.13.159.0/24 maxlen: 24
185.119.18.0/24 maxlen: 24
185.129.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:4a:5c:24:4c:1a:a5:27:59:6a:52:15:96:f9:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 2 04:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8cabcd6419df228a9972a1239e1b00a511dd18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d9:63:b0:25:a2:f8:b5:9e:ca:9b:82:aa:cb:
1b:77:02:ec:02:95:f9:c8:47:bb:28:51:6c:aa:31:
f6:06:b0:72:c6:d9:8a:24:2a:c7:ed:32:59:f0:ff:
e2:63:4b:d3:e0:04:3a:6a:13:af:34:2c:d4:90:36:
a8:b8:35:a1:36:68:7e:48:25:4a:9e:92:30:9d:0f:
d8:15:d1:a5:9d:83:5b:c8:e6:87:fb:2f:ad:97:68:
f0:d3:79:a4:35:0f:20:fb:64:26:31:49:87:d1:6c:
7b:d4:06:19:f6:4e:b9:4b:53:13:b4:14:7b:b4:48:
96:7e:40:c0:10:8c:aa:94:ec:58:3a:c4:d1:fd:43:
27:c1:15:b8:6c:1f:8a:69:65:b6:88:3b:da:c6:f1:
55:10:bf:db:73:41:fe:39:b3:97:5c:2e:d2:41:93:
56:32:dc:18:58:e0:98:0d:79:e2:4a:2c:be:1e:af:
a4:d0:d3:6d:65:45:35:d7:22:c8:72:f7:b0:b1:6b:
d4:94:2e:bc:9b:08:ee:50:a7:61:fb:6d:61:21:7c:
4f:a5:16:af:1c:c2:64:51:53:03:06:3d:38:1e:51:
62:8f:fb:35:eb:e4:bf:76:19:65:37:b2:72:91:72:
be:89:01:74:34:a4:63:35:cb:77:27:aa:a4:b4:b1:
25:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CA:BC:D6:41:9D:F2:28:A9:97:2A:12:39:E1:B0:0A:51:1D:D1:8E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/uMq81kGd8iiplyoSOeGwClEd0Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.21.0/24
89.106.81.0/24
89.144.17.0/24
94.249.185.0/24
94.249.201.0/24
185.13.159.0/24
185.119.18.0/24
185.129.84.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:82:5c:b4:2a:f8:35:54:02:4e:58:53:e8:d7:9f:46:e5:07:
a9:a2:f3:a6:a7:08:ce:bd:51:4a:53:eb:95:a9:cd:48:2b:c7:
78:fd:c1:f5:ab:dd:18:d0:e9:99:00:24:09:fd:2e:f8:ec:88:
2f:69:b8:84:a2:1c:fa:eb:f0:06:f9:23:fa:ea:ae:8d:ed:37:
2d:43:45:36:67:d9:20:35:41:ad:98:de:49:3d:61:bf:24:26:
84:0b:56:68:df:12:aa:80:14:5d:38:a9:56:0d:a4:f5:0e:d2:
23:fd:36:12:19:af:bd:72:ae:b8:df:8f:e1:76:5e:e4:1c:a5:
da:d9:b1:22:06:17:7a:66:31:d0:cc:11:31:d2:78:9e:eb:21:
cc:14:80:b3:bc:be:fc:62:68:f8:96:50:aa:55:f4:b8:ec:e6:
5b:4f:62:9a:c1:00:ba:ec:42:a9:d2:3e:27:e2:e8:f5:6a:82:
7a:62:b9:90:0c:a2:95:a9:02:90:cf:2f:74:f9:5a:9b:01:39:
8a:bd:ae:e7:4f:0d:d0:0f:0d:f3:1e:8f:ac:c0:78:26:93:a9:
68:5f:c1:aa:e6:ff:06:e9:fa:05:c5:2e:38:63:57:ba:96:c3:
b5:5a:d5:b4:a3:84:8b:99:95:be:a8:b3:b1:40:3b:a0:52:00:
8d:a0:f2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:37 2026 by rpki-client