Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/k_UjJu0zPxxVBVSRafB0tn_AUug.roa
File: k_UjJu0zPxxVBVSRafB0tn_AUug.roa (raw, json)
Hash identifier: i5fVyXA5ImxlGxbra7z7WYSTFUVyoyv3vcSUHkC1X84=
Subject key identifier: 93:F5:23:26:ED:33:3F:1C:55:05:54:91:69:F0:74:B6:7F:C0:52:E8
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 019E40BA6098B20797A134FE5B8B8E341389
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/k_UjJu0zPxxVBVSRafB0tn_AUug.roa
Signing time: Tue 19 May 2026 14:53:36 +0000
ROA not before: Tue 19 May 2026 14:53:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 213.238.160.0/24 maxlen: 24
213.238.168.0/24 maxlen: 24
213.238.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:ba:60:98:b2:07:97:a1:34:fe:5b:8b:8e:34:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: May 19 14:53:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93f52326ed333f1c5505549169f074b67fc052e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c9:68:df:7b:97:60:31:cf:88:c0:bd:e5:e1:
b9:66:24:0b:24:a4:2a:43:07:1e:98:ac:07:41:7c:
fd:22:99:be:45:04:82:f8:b4:74:01:aa:fe:cf:12:
bd:38:f3:af:4d:be:09:36:cb:83:3c:9c:7f:5f:f7:
3b:89:39:c3:f4:29:3c:1e:1b:f4:af:70:0d:21:e6:
f7:78:ce:9f:b8:bf:d2:1b:08:7f:04:b0:05:af:d1:
ac:8e:77:ee:d2:ff:fe:8c:81:56:eb:92:42:05:77:
ea:3a:d9:75:66:ce:97:78:8f:f5:15:19:0b:04:00:
82:ee:16:db:ab:37:25:8c:16:6a:f5:e9:9b:2c:6b:
18:09:f0:21:91:f3:96:d5:12:3d:00:ad:e0:12:c0:
b2:c0:5c:b9:1b:c9:f0:8a:fb:ec:30:e4:09:05:98:
57:b1:6c:94:5e:67:38:98:f0:18:ff:16:c8:02:35:
9d:5b:1c:4b:42:86:11:9b:16:2a:3d:93:9b:64:16:
8a:1a:62:11:69:0a:84:86:3c:5e:ad:77:2b:44:58:
e2:57:3e:3f:f2:e8:13:78:58:09:23:7b:d2:3a:85:
86:e1:81:f4:8c:21:8c:05:a2:94:ae:4f:c3:60:80:
30:c1:36:53:71:ef:0f:52:2f:ef:40:4c:b0:a6:d7:
8e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F5:23:26:ED:33:3F:1C:55:05:54:91:69:F0:74:B6:7F:C0:52:E8
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/k_UjJu0zPxxVBVSRafB0tn_AUug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.160.0/24
213.238.168.0/24
213.238.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e2:f1:77:80:f9:65:d7:b5:3b:8a:08:ec:63:df:2e:dc:b0:
2e:d6:29:e9:cf:46:60:39:e0:62:10:15:52:c6:7d:9b:79:74:
1a:97:28:b2:86:72:10:26:e1:35:1c:86:5c:b6:8c:3c:ad:65:
b4:81:5d:e3:b2:a0:ae:e0:c2:0f:ed:1a:57:bf:ec:4b:88:73:
d6:c9:81:11:91:2b:15:e8:75:f1:90:ca:3a:c6:7b:80:f0:1b:
e8:bf:4f:b5:e9:cb:f6:1d:62:a5:44:e0:f8:3b:cf:ca:93:c5:
04:77:9e:1b:73:e2:71:07:5c:6f:a8:57:c6:0f:21:8d:68:c6:
1f:1e:6c:34:3e:36:7f:74:89:86:12:6f:37:50:ee:ed:7b:72:
a4:3b:a4:ac:5a:e0:19:10:f6:52:1c:15:71:fd:f9:00:32:66:
7f:91:ef:15:62:5d:9e:97:88:b8:77:83:01:96:33:af:7e:87:
e9:78:09:2b:5e:da:ca:10:ac:97:e2:b7:8e:71:6b:69:00:23:
5a:b2:0b:78:c9:5d:48:cc:d6:6c:90:2e:2f:e6:98:75:49:80:
1a:ef:35:fd:1b:ac:6d:a4:93:dc:9a:ac:a4:ee:58:c1:69:cd:
54:56:a9:68:3f:07:dc:37:83:c8:e5:8c:11:8f:82:2c:61:57:
de:bb:0f:da
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5AumCYsgeXoTT+W4uONBOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjYwNTE5MTQ1MzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2Y1MjMyNmVkMzMzZjFjNTUwNTU0OTE2OWYwNzRiNjdmYzA1MmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMlo33uXYDHPiMC95eG5ZiQLJKQq
QwcemKwHQXz9Ipm+RQSC+LR0Aar+zxK9OPOvTb4JNsuDPJx/X/c7iTnD9Ck8Hhv0
r3ANIeb3eM6fuL/SGwh/BLAFr9Gsjnfu0v/+jIFW65JCBXfqOtl1Zs6XeI/1FRkL
BACC7hbbqzcljBZq9embLGsYCfAhkfOW1RI9AK3gEsCywFy5G8nwivvsMOQJBZhX
sWyUXmc4mPAY/xbIAjWdWxxLQoYRmxYqPZObZBaKGmIRaQqEhjxerXcrRFjiVz4/
8ugTeFgJI3vSOoWG4YH0jCGMBaKUrk/DYIAwwTZTce8PUi/vQEywpteOmwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJP1IybtMz8cVQVUkWnwdLZ/wFLoMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEva19Vakp1MHpQeHhWQlZTUmFmQjB0bl9BVXVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1e6gAwQA
1e6oAwQA1e67MA0GCSqGSIb3DQEBCwUAA4IBAQC34vF3gPll17U7igjsY98u3LAu
1inpz0ZgOeBiEBVSxn2beXQalyiyhnIQJuE1HIZctow8rWW0gV3jsqCu4MIP7RpX
v+xLiHPWyYERkSsV6HXxkMo6xnuA8Bvov0+16cv2HWKlROD4O8/Kk8UEd54bc+Jx
B1xvqFfGDyGNaMYfHmw0PjZ/dImGEm83UO7te3KkO6SsWuAZEPZSHBVx/fkAMmZ/
ke8VYl2el4i4d4MBljOvfofpeAkrXtrKEKyX4reOcWtpACNasgt4yV1IzNZskC4v
5ph1SYAa7zX9G6xtpJPcmqyk7ljBac1UVqloPwfcN4PI5YwRj4IsYVfeuw/a
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:08 2026 by rpki-client