Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UAD6s69zbOrYKv70oECeP0rIhHo.roa
File: UAD6s69zbOrYKv70oECeP0rIhHo.roa (raw, json)
Hash identifier: ZZMA1yQ32yBZqkBvvlbHSCaadmiv9kugpjm36KE3Uoc=
Subject key identifier: 50:00:FA:B3:AF:73:6C:EA:D8:2A:FE:F4:A0:40:9E:3F:4A:C8:84:7A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019D06095CF4EDF94777F6557AD23A34558D
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UAD6s69zbOrYKv70oECeP0rIhHo.roa
Signing time: Thu 19 Mar 2026 12:19:29 +0000
ROA not before: Thu 19 Mar 2026 12:19:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.139.6.0/23 maxlen: 24
46.249.110.0/24 maxlen: 24
82.115.9.0/24 maxlen: 24
89.251.10.0/24 maxlen: 24
159.255.32.0/22 maxlen: 22
159.255.36.0/22 maxlen: 22
185.215.247.0/24 maxlen: 24
185.231.172.0/24 maxlen: 24
185.231.173.0/24 maxlen: 24
188.209.156.0/22 maxlen: 24
195.96.135.0/24 maxlen: 24
202.133.90.0/23 maxlen: 24
212.90.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:09:5c:f4:ed:f9:47:77:f6:55:7a:d2:3a:34:55:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Mar 19 12:19:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5000fab3af736cead82afef4a0409e3f4ac8847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cc:b4:46:a5:2b:20:63:1e:1d:a3:da:2d:68:
94:d8:5a:b0:7e:18:e7:ea:ce:71:ee:78:38:c7:6e:
ad:73:df:90:73:cb:66:8a:fb:c4:99:d1:c0:7b:29:
c7:7e:24:9e:46:2e:73:1b:ae:75:09:6e:5e:25:25:
5e:85:d5:b6:45:96:d3:c7:cd:a4:23:97:98:76:5d:
71:0f:1b:32:31:72:74:eb:4e:16:13:7c:a9:14:cc:
e0:17:bb:ff:1c:c6:e2:87:71:c8:77:f2:04:fe:d9:
fc:c3:4a:35:22:d0:3a:6f:f4:7b:f9:a5:d9:23:7c:
a5:0a:7d:38:a0:64:4c:a0:10:89:42:2c:23:37:43:
c5:fa:a4:c1:a3:5d:8f:17:00:cf:8b:2d:fb:3f:a6:
82:e5:7a:c9:ec:2c:10:9b:80:2c:32:a6:23:f5:f9:
d3:7f:d2:b0:09:13:ab:d2:0f:7a:41:55:8d:5f:14:
57:02:d5:78:a4:1c:57:de:12:9f:ff:6f:d5:a8:22:
dd:d0:d9:0e:b1:04:85:0b:83:ca:53:2b:b1:da:56:
d6:12:8d:eb:b3:fe:81:0e:21:b2:48:b4:1d:f0:06:
66:cb:20:af:7c:81:07:c6:d0:6c:b2:f0:bc:ae:57:
eb:35:86:c7:52:1f:04:0a:ad:0d:95:4b:be:58:0c:
a6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:00:FA:B3:AF:73:6C:EA:D8:2A:FE:F4:A0:40:9E:3F:4A:C8:84:7A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/UAD6s69zbOrYKv70oECeP0rIhHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.6.0/23
46.249.110.0/24
82.115.9.0/24
89.251.10.0/24
159.255.32.0/21
185.215.247.0/24
185.231.172.0/23
188.209.156.0/22
195.96.135.0/24
202.133.90.0/23
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:98:d7:79:2d:eb:b7:1c:13:9c:ba:2e:07:09:22:10:c0:3a:
09:47:95:fb:fd:64:77:94:f1:e4:2a:cb:02:ee:14:1d:8c:ab:
be:71:77:8f:aa:f3:1e:b3:d2:1d:f2:93:4b:3b:5c:e0:5f:f0:
cd:ad:51:f3:fc:bd:af:b0:ad:d4:61:2d:6f:17:6b:cb:ad:21:
73:a9:12:b2:f3:e5:80:f3:f2:51:24:ea:27:97:c8:66:0b:47:
25:94:a3:69:f3:3b:f2:1d:73:ab:0d:0e:50:a0:f0:23:5a:82:
68:fd:8c:88:7e:39:3c:cb:ba:e6:4a:16:19:18:16:c9:19:86:
e0:bc:c5:8a:61:81:c6:5a:01:52:59:5d:3a:16:76:58:4d:f8:
43:42:c5:78:0d:b6:ca:20:21:73:3b:4c:ac:65:07:9c:75:01:
10:9c:60:e1:aa:2c:5a:67:e7:66:af:71:41:a5:38:51:45:84:
58:1a:e7:37:74:ef:fe:44:92:12:bc:de:6d:4a:3c:bf:8b:90:
01:c6:ef:93:e6:54:e5:29:01:74:8f:12:7b:cf:fb:f6:a2:54:
40:09:7d:ea:f7:e1:6f:54:47:b3:b0:a1:69:9c:af:59:53:48:
51:91:ad:ca:d4:1a:04:38:01:f0:3e:f3:36:f0:44:df:fe:fa:
48:b3:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:00:25 2026 by rpki-client