Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/uJvNLpD6dtMEqdYrc_px_NEqMQ8.roa
File: uJvNLpD6dtMEqdYrc_px_NEqMQ8.roa (raw, json)
Hash identifier: CBsbLdrVaypZACEbt1T3ZFuVXJD72NZ0sDkOD5W8y6Y=
Subject key identifier: B8:9B:CD:2E:90:FA:76:D3:04:A9:D6:2B:73:FA:71:FC:D1:2A:31:0F
Certificate issuer: /CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Certificate serial: 01A0EB7DA1B2B12274AD668AC28128FFE921
Authority key identifier: BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/uJvNLpD6dtMEqdYrc_px_NEqMQ8.roa
Signing time: Tue 29 Sep 2026 04:47:54 +0000
ROA not before: Tue 29 Sep 2026 04:47:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214790
IP address blocks: 185.223.168.0/24 maxlen: 24
185.223.169.0/24 maxlen: 24
185.223.170.0/24 maxlen: 24
185.223.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.mft
rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:7d:a1:b2:b1:22:74:ad:66:8a:c2:81:28:ff:e9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be4943f5203d43460a13ad4ea9d7d5b950c613cd
Validity
Not Before: Sep 29 04:47:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b89bcd2e90fa76d304a9d62b73fa71fcd12a310f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:49:c8:3d:ef:1b:74:c8:65:b9:f7:bf:37:
d5:e0:97:2b:a5:f3:f2:c7:93:dc:f5:ba:45:64:8e:
be:b8:66:e5:48:87:7e:81:c2:23:ad:07:0a:fd:10:
b0:04:2f:8b:6c:95:57:bc:e6:2c:ee:f1:b9:23:4d:
de:b9:d0:8e:26:8b:e6:a8:94:58:e9:fd:92:dc:2f:
aa:a9:0e:fb:81:6c:f5:8a:df:73:05:de:a6:a0:c5:
e7:b1:da:68:b1:67:ed:de:ba:b6:71:75:21:51:6b:
c8:23:5f:10:84:eb:a9:f6:76:4e:4e:df:7f:1e:2e:
e4:11:69:59:9e:d4:2b:69:6d:d0:a2:62:c0:3a:8a:
1c:cc:88:80:4d:53:f9:05:dc:57:41:d6:d5:ea:7c:
38:b2:6c:aa:61:ed:da:b2:d6:5b:3d:bf:98:ce:81:
d1:16:04:dd:74:f8:bc:ac:7f:e5:75:28:ea:83:d3:
13:5f:f4:af:e6:b5:ec:ce:b0:63:fa:a5:95:ca:df:
46:cd:b3:de:11:9b:e8:a1:5d:aa:28:b7:56:15:3b:
5e:b4:80:75:c1:e1:d2:52:5e:26:38:98:7f:c3:3e:
89:c0:f6:fb:68:6b:10:01:4f:14:c4:e9:b3:a2:5f:
2b:1b:c0:fb:25:a3:ef:02:91:59:b8:7e:6b:a3:df:
9c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:CD:2E:90:FA:76:D3:04:A9:D6:2B:73:FA:71:FC:D1:2A:31:0F
X509v3 Authority Key Identifier:
keyid:BE:49:43:F5:20:3D:43:46:0A:13:AD:4E:A9:D7:D5:B9:50:C6:13:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vklD9SA9Q0YKE61OqdfVuVDGE80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/uJvNLpD6dtMEqdYrc_px_NEqMQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3314ec-8ff0-4950-858f-a051ae63dba1/1/vklD9SA9Q0YKE61OqdfVuVDGE80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.168.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:ba:14:a2:9e:db:35:11:6f:8e:14:01:e9:db:90:27:e2:97:
8e:27:07:d0:40:f9:7d:f9:40:ef:97:14:19:0f:99:fb:67:9a:
61:c9:2c:68:bc:52:83:75:fd:af:39:e9:74:ee:ed:a7:bd:9b:
64:1f:38:0e:b2:cd:41:5a:c7:0b:1d:16:09:d5:50:3b:ed:c3:
e3:d4:79:0f:b9:7d:d1:c9:c4:9f:7e:a1:43:dd:38:c0:30:f3:
e3:74:70:f7:eb:7d:bd:a5:17:b2:50:61:6b:de:2c:84:d4:75:
70:38:a6:f8:4f:eb:b9:0f:20:62:02:93:97:09:80:b3:68:4b:
1e:07:e8:46:4b:67:14:b0:4a:3b:d0:ba:b1:c9:09:0c:b3:22:
68:39:b6:da:d6:57:cc:3e:86:cc:bd:7e:ad:7e:fe:8d:2c:64:
1b:45:0d:83:ce:b5:ba:9d:7b:80:0d:5d:f2:92:af:30:53:2c:
43:82:f7:78:9f:da:7c:07:d0:08:0d:5d:4d:9d:16:1c:32:c3:
66:62:64:3a:c6:77:3c:7a:93:b2:b3:78:9c:99:9a:c5:cc:35:
69:32:62:90:df:39:55:07:14:e3:00:fe:85:ed:ca:ae:79:02:
c3:07:4c:8d:85:bb:f6:e3:5f:7d:7e:9b:d2:6c:3b:b3:ec:a1:
c3:c5:eb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:13:21 2026 by rpki-client