Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/UjuNFxeX8fazTAfeX2snVIKavtY.roa
File: UjuNFxeX8fazTAfeX2snVIKavtY.roa (raw, json)
Hash identifier: k2bGDOF8FeZvoCzGHZtaXm0p6TSR5w0hxHzqhmBjQ+A=
Subject key identifier: 52:3B:8D:17:17:97:F1:F6:B3:4C:07:DE:5F:6B:27:54:82:9A:BE:D6
Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Certificate serial: 01A03D5FDC842F0D054DC4061C97EE4201A9
Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/UjuNFxeX8fazTAfeX2snVIKavtY.roa
Signing time: Wed 26 Aug 2026 09:21:27 +0000
ROA not before: Wed 26 Aug 2026 09:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216018
IP address blocks: 185.23.72.0/24 maxlen: 24
185.23.73.0/24 maxlen: 24
185.23.74.0/24 maxlen: 24
185.23.75.0/24 maxlen: 24
2a14:1b00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:5f:dc:84:2f:0d:05:4d:c4:06:1c:97:ee:42:01:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e
Validity
Not Before: Aug 26 09:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=523b8d171797f1f6b34c07de5f6b2754829abed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:16:cc:40:b6:ec:62:bf:7a:a1:5f:8e:d2:
e3:31:fe:cf:c1:9b:7d:8e:4b:af:0d:f9:ab:5e:a9:
40:52:0c:db:a7:c2:5e:37:d3:5a:a6:5a:a0:31:7f:
56:ad:fd:9d:a0:5c:3f:e0:c8:9d:fd:c6:5e:c2:fa:
c4:5e:be:30:77:47:d2:03:c1:c2:2f:d5:7e:5b:c4:
b8:4d:10:c0:dc:5b:b8:d7:f9:71:2f:89:26:59:41:
32:18:a0:37:6b:a4:bf:66:f9:68:cb:8e:2f:8c:7f:
c8:bb:c5:87:c2:d4:72:e2:4d:ae:22:38:e5:18:c3:
ca:28:76:76:55:45:4f:77:00:2b:66:c1:47:6e:e5:
70:2d:25:ab:a5:af:5e:e6:00:01:1d:7d:4d:02:f4:
01:5a:8a:3b:24:f3:f8:25:12:db:69:84:63:b9:69:
cc:d0:39:ad:71:76:79:99:73:4f:70:17:1f:17:1a:
2d:74:b6:ee:7c:43:f6:9b:c0:7f:c0:3f:67:86:93:
02:93:88:dd:bc:9e:15:00:88:20:9c:dc:2f:f6:ea:
38:d8:a5:04:8b:4e:74:36:dc:00:b5:1e:e9:b0:d8:
27:5c:b1:06:2d:c5:9d:fe:ba:86:4c:95:92:d0:0d:
b8:c5:2b:8e:49:56:b0:ad:14:bf:35:c4:1e:29:e0:
e7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3B:8D:17:17:97:F1:F6:B3:4C:07:DE:5F:6B:27:54:82:9A:BE:D6
X509v3 Authority Key Identifier:
keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/UjuNFxeX8fazTAfeX2snVIKavtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.72.0/22
IPv6:
2a14:1b00:3::/48
Signature Algorithm: sha256WithRSAEncryption
17:eb:ff:0b:52:cf:ce:28:0d:ab:8d:0b:dc:3b:79:e4:44:a0:
67:4b:0b:b9:59:2e:1c:d1:4f:0d:68:95:68:b5:35:39:2b:7b:
61:3a:3e:6e:18:22:25:1d:1e:36:b9:be:97:77:35:7e:b8:e4:
97:6b:02:7d:be:14:db:59:83:90:ab:f5:89:71:d4:dc:14:44:
48:ed:26:e3:23:95:8f:7d:cb:3f:1b:0a:9f:86:2d:2c:c6:7d:
bd:d0:96:e2:42:50:6f:70:ac:ea:ad:75:1b:5e:b2:e6:3d:3e:
b2:74:1c:9e:2b:01:13:03:95:fb:c1:e0:63:6d:e7:a7:1d:1d:
1a:78:c7:a7:e8:f4:77:db:14:d3:fc:8c:20:10:1b:e6:df:e8:
89:47:39:8b:f6:5a:a5:41:00:a7:b3:b3:d6:57:fa:55:ce:42:
eb:42:c3:4e:6f:98:55:b7:c9:be:f6:d3:af:8a:e1:2e:2b:7c:
9c:a0:2c:65:28:5c:22:4a:62:b0:cc:59:a5:a4:3a:1c:17:d9:
12:e2:09:bd:9e:cd:6d:a5:43:2d:64:51:1d:b8:73:9f:86:ea:
2c:40:81:d6:b8:36:f9:98:90:25:0d:b4:f2:42:b5:29:3c:b5:
ce:5e:90:35:64:f0:7a:bc:30:71:82:db:c6:4e:18:c2:de:f6:
3c:06:43:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:28:55 2026 by rpki-client