Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UzM2gwxSrfVOD3Hvo4dml2FJYQA.roa
File: UzM2gwxSrfVOD3Hvo4dml2FJYQA.roa (raw, json)
Hash identifier: WyUp8DycTfhYHy9UHk1wLaMoq3LzBPZapcazzfzjy7M=
Subject key identifier: 53:33:36:83:0C:52:AD:F5:4E:0F:71:EF:A3:87:66:97:61:49:61:00
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A16335B8980C07CC328F3BDBE2D58B86CA
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UzM2gwxSrfVOD3Hvo4dml2FJYQA.roa
Signing time: Thu 22 Oct 2026 10:43:47 +0000
ROA not before: Thu 22 Oct 2026 10:43:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210751
IP address blocks: 46.29.24.0/24 maxlen: 24
185.85.188.0/24 maxlen: 24
185.86.12.0/24 maxlen: 24
185.98.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:35:b8:98:0c:07:cc:32:8f:3b:db:e2:d5:8b:86:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 22 10:43:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=533336830c52adf54e0f71efa387669761496100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:d8:a6:14:85:49:c8:c7:5e:05:2f:3f:c5:
59:80:b9:8b:f7:d5:49:84:fe:fe:d5:3c:7c:c3:ff:
8a:c2:e7:11:4a:ee:e4:f9:e4:67:d5:4b:c7:9a:15:
fc:c0:f5:f9:57:94:33:7e:c2:48:37:3a:ba:d5:2f:
ad:97:82:be:7c:00:54:73:88:d1:64:38:c3:17:66:
9c:89:b9:d3:f1:f9:f4:10:66:1a:8e:3b:bf:df:72:
b7:ba:e7:c5:0c:ac:bc:17:e8:da:60:ac:9e:83:a2:
ee:a1:5d:8f:05:bb:17:3b:10:19:98:93:82:11:1c:
af:5d:d3:d3:be:6b:b5:99:e3:aa:74:92:af:80:20:
2f:8a:b6:aa:b0:a7:2d:e4:f0:b4:3d:79:92:41:79:
5a:fb:59:98:66:b5:05:df:85:af:ad:cb:d4:90:00:
0e:d0:92:33:1d:2c:45:99:01:dc:fa:c3:12:41:64:
4c:55:94:b4:4a:91:48:e6:fd:88:d6:5a:bd:e9:d5:
d0:18:c4:c9:38:98:98:5d:a0:53:c0:34:ba:c8:5a:
1d:39:11:98:90:75:a3:14:a7:27:fa:b0:ec:0a:d7:
7a:2a:ce:af:da:94:59:d5:de:bd:6a:ab:ed:f9:c8:
03:a1:46:dd:81:b3:0b:f3:f1:99:f0:6c:b4:c4:77:
de:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:33:36:83:0C:52:AD:F5:4E:0F:71:EF:A3:87:66:97:61:49:61:00
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/UzM2gwxSrfVOD3Hvo4dml2FJYQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.24.0/24
185.85.188.0/24
185.86.12.0/24
185.98.61.0/24
Signature Algorithm: sha256WithRSAEncryption
31:27:fa:c7:3d:42:76:96:6f:2d:de:00:d8:d3:38:01:c2:23:
75:49:71:a2:16:96:f8:d0:ce:cc:48:69:75:52:2f:4c:38:ca:
0d:e6:aa:e0:a4:cc:3c:7d:7f:b9:59:5b:ba:94:15:ee:cd:62:
82:17:a8:59:29:e2:3b:b6:e8:b2:c4:f2:e4:c5:66:3f:63:0f:
5f:d1:6d:51:ab:4f:a3:1e:cf:3c:79:aa:15:62:4d:ee:74:03:
28:fb:cb:fc:5b:68:ea:32:eb:85:44:d1:27:18:3c:56:1d:c4:
6c:43:ec:75:6f:29:0b:37:52:2a:a0:34:1a:55:bc:cd:b9:1f:
0d:e4:1c:38:bf:16:bc:ab:0f:e5:64:46:72:a2:6d:f9:99:5e:
e8:be:bc:d2:0d:e7:1f:5a:3a:9a:57:01:ca:db:78:6c:d6:48:
0e:dd:b8:53:f1:e3:4a:6b:5c:a7:d8:69:2e:72:fa:4d:64:82:
76:a7:5a:08:82:4b:0f:74:d9:8e:e0:ae:53:41:42:e9:ab:69:
dc:e2:e9:09:2f:81:b4:2b:cd:fe:92:1e:28:5d:6c:04:f6:c9:
0b:ce:6e:37:b9:24:c6:54:1f:27:e3:7e:19:85:86:66:64:9b:
25:a5:b2:66:06:03:e1:4d:88:44:fd:92:4e:a5:1a:db:11:04:
2e:c3:58:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:33 2026 by rpki-client