Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/lUTVi-_PDzyWzw8K-fsuosZWRiI.roa
File: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (raw, json)
Hash identifier: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=
Subject key identifier: 95:44:D5:8B:EF:CF:0F:3C:96:CF:0F:0A:F9:FB:2E:A2:C6:56:46:22
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019ED620B46EE622C93868BAA97D412C935C
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/lUTVi-_PDzyWzw8K-fsuosZWRiI.roa
Signing time: Wed 17 Jun 2026 15:08:48 +0000
ROA not before: Wed 17 Jun 2026 15:08:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201808
IP address blocks: 185.50.128.0/22 maxlen: 22
185.240.156.0/24 maxlen: 24
185.240.158.0/24 maxlen: 24
185.240.159.0/24 maxlen: 24
2a01:a5e0::/32 maxlen: 32
2a0a:da80::/29 maxlen: 29
2a0c:8c80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:20:b4:6e:e6:22:c9:38:68:ba:a9:7d:41:2c:93:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jun 17 15:08:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9544d58befcf0f3c96cf0f0af9fb2ea2c6564622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:02:16:44:c7:29:df:26:f9:ce:6d:ec:a0:4c:
29:fe:47:96:fa:14:3e:5c:f8:38:43:37:d4:b3:83:
3d:ee:92:e8:90:90:e0:95:09:25:89:58:04:21:93:
16:af:65:b5:66:98:57:0e:a3:df:a4:9c:38:47:aa:
b2:e7:55:59:9b:df:9f:5c:54:75:4f:87:43:c7:18:
b9:58:19:98:3e:e4:c2:9b:91:ec:c9:d7:fa:dd:d0:
75:cb:cc:ad:38:45:f3:8f:b2:39:e6:a2:78:69:5c:
ab:48:27:c2:5e:9c:3d:bb:e3:72:99:7c:65:78:c6:
58:c0:6b:1c:58:58:34:81:dd:1e:05:4f:6d:ca:3c:
66:c0:7f:37:06:9e:1c:a3:f6:d1:47:23:b3:f2:c6:
7d:14:41:b1:4f:84:9d:4c:e8:31:b0:17:59:64:82:
8a:27:e3:bd:cd:c0:6f:02:4c:50:d0:3a:d4:c4:8c:
b1:e8:af:ca:cc:48:0f:07:04:a7:e8:b1:51:bf:12:
05:96:2a:5a:7d:35:2b:b7:2c:53:bc:42:7d:d7:23:
cd:b8:e4:86:36:74:28:dc:d1:33:cc:b9:8d:a0:71:
95:c5:cf:74:dc:78:7a:bc:27:d7:51:c3:91:14:11:
92:05:84:e1:ce:49:e3:7a:b5:b0:6c:bc:55:6c:bb:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:D5:8B:EF:CF:0F:3C:96:CF:0F:0A:F9:FB:2E:A2:C6:56:46:22
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/lUTVi-_PDzyWzw8K-fsuosZWRiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.128.0/22
185.240.156.0/24
185.240.158.0/23
IPv6:
2a01:a5e0::/32
2a0a:da80::/29
2a0c:8c80::/32
Signature Algorithm: sha256WithRSAEncryption
2b:47:5f:07:2e:97:25:ca:4f:c7:f3:e2:e4:c9:27:1c:0c:55:
55:4f:09:d6:86:c2:55:15:54:9f:bc:5b:10:00:87:07:ab:01:
cb:8e:b3:15:75:88:0e:73:bf:a3:4d:47:37:a2:a3:e7:ec:3a:
da:9f:42:10:10:ca:bc:9a:75:79:37:a8:e0:37:9a:a0:3a:08:
1e:9c:58:a6:6a:3d:71:ef:6c:fc:b5:a8:2f:22:e3:9b:4e:44:
b3:cf:39:84:e8:9e:2e:e1:8d:45:b0:3b:17:7b:64:6d:c8:ac:
bc:1f:9a:05:2d:cd:f2:3b:3f:3d:75:99:38:ee:f7:3a:7e:0b:
8e:5a:a8:0e:af:db:b6:72:a2:b1:71:e1:90:f2:b1:5b:69:30:
22:89:8f:b7:b1:b0:58:64:72:ba:bb:8a:95:74:f2:e2:85:1e:
e8:5c:30:20:a3:5b:f6:a5:88:58:ba:79:93:cd:1b:0b:67:08:
c2:c4:2e:48:02:18:c6:66:08:f4:b4:56:df:7f:21:42:17:4c:
62:1c:bf:2f:c3:91:d5:88:1e:3d:cc:8c:1b:ca:31:41:93:f9:
1e:93:5d:01:57:79:34:30:23:05:51:ac:65:ca:ed:56:e7:b6:
7e:6e:2c:13:23:31:a6:d5:06:41:a5:26:60:29:5a:a6:eb:49:
da:e8:17:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 21:53:16 2026 by rpki-client