Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/u3esaBXBz_RESktIeiAEj3TrmBk.roa
File: u3esaBXBz_RESktIeiAEj3TrmBk.roa (raw, json)
Hash identifier: DuycQcWpRKbKJrZyI5uvefnqxfPTZjiagmu1zINJPpw=
Subject key identifier: BB:77:AC:68:15:C1:CF:F4:44:4A:4B:48:7A:20:04:8F:74:EB:98:19
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A067669FDAC4F3C625DBA32EBEC1BFFBAD
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/u3esaBXBz_RESktIeiAEj3TrmBk.roa
Signing time: Thu 03 Sep 2026 13:12:53 +0000
ROA not before: Thu 03 Sep 2026 13:12:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 194.233.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:66:9f:da:c4:f3:c6:25:db:a3:2e:be:c1:bf:fb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 3 13:12:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb77ac6815c1cff4444a4b487a20048f74eb9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:61:21:ff:ed:1c:39:3b:f7:77:8e:96:ff:d6:
49:1e:30:84:08:48:53:73:55:40:18:ee:c3:66:e6:
5c:4c:75:51:88:e4:49:96:c9:16:13:2a:ca:49:29:
61:a2:71:19:65:4e:e1:c7:f3:24:4a:f6:05:b0:35:
5e:c0:ec:76:e1:ca:57:11:ff:eb:91:49:e2:6c:d4:
b7:ed:8d:f0:a2:c9:0a:35:5f:88:de:0e:09:78:74:
5f:b6:91:4a:48:2a:a4:a6:54:bb:d9:d9:c5:fb:b9:
04:b1:59:db:a7:34:48:d5:d6:52:76:6b:c9:c4:0c:
48:22:97:51:23:24:46:a6:9d:e1:45:28:b5:0f:c5:
43:88:a4:48:70:60:ee:27:eb:0c:a9:ae:7e:27:da:
de:c3:22:d5:8b:08:f5:45:2e:d8:36:78:23:95:7f:
d3:f2:7a:d8:93:de:ac:be:e0:04:fb:3b:1a:c8:d2:
10:60:d8:91:d7:4f:d7:f3:f2:13:e1:94:d1:53:c2:
04:fe:07:95:c5:a0:8c:b4:82:a8:b8:5a:38:07:48:
9f:95:69:3e:d6:32:3f:ad:01:ca:d9:9d:c7:e7:e2:
7a:38:88:17:69:1b:d5:7b:a2:98:b2:2e:98:eb:9f:
18:b7:48:81:a2:0a:b5:fe:61:cf:50:41:b2:89:3c:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:AC:68:15:C1:CF:F4:44:4A:4B:48:7A:20:04:8F:74:EB:98:19
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/u3esaBXBz_RESktIeiAEj3TrmBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.149.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d6:65:a2:45:fc:be:5a:5d:cb:75:41:d9:59:99:9c:89:ed:
50:37:73:2d:59:33:85:5f:fb:8f:dd:1c:6a:b0:eb:32:b8:e2:
1c:5f:d3:a5:ee:0e:90:06:96:6e:ed:b5:78:77:64:8a:e7:fb:
0a:8c:65:37:10:48:8d:f2:36:43:dd:59:fb:ba:9f:07:95:60:
3a:56:95:c0:a7:55:e1:89:31:77:b8:92:7a:fc:a4:43:28:94:
6b:8c:f8:95:13:a2:b4:fc:33:7a:2f:7d:52:45:03:c1:fa:07:
c2:8d:f0:66:3a:fc:8c:9c:c6:a9:0a:fd:a4:9e:93:7c:36:ff:
7b:81:e2:00:45:93:b9:a5:e3:5b:00:41:a3:16:a8:fe:74:fb:
42:4d:1c:6a:dd:13:e9:ba:b6:05:c2:fa:37:b9:b1:78:8b:39:
dd:65:09:cd:9e:1d:f6:2b:cf:1e:6b:e4:77:43:5f:90:94:9c:
19:30:09:49:88:4e:60:f6:3b:bd:6d:e4:89:8f:7c:59:a0:ea:
ec:10:5d:9d:ae:0c:f7:01:84:5d:03:e3:b0:2a:ee:a8:d5:a1:
24:1f:e2:cf:8f:6a:b8:eb:54:3c:b3:23:a6:6c:b4:ad:d1:c3:
54:7c:4e:f7:39:a0:63:bd:54:25:0e:ee:95:09:ac:98:5b:71:
bb:08:4c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:28:21 2026 by rpki-client