Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/u6TQQ5GltX3NTTef4h1hDGcD9Tg.roa
File: u6TQQ5GltX3NTTef4h1hDGcD9Tg.roa (raw, json)
Hash identifier: 8SKmSFnflicNOfbdPk29lozC9F7W4E7vColcCn0bbF0=
Subject key identifier: BB:A4:D0:43:91:A5:B5:7D:CD:4D:37:9F:E2:1D:61:0C:67:03:F5:38
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 01A0DB047D15F504182C4DFA7A1633F16DE9
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/u6TQQ5GltX3NTTef4h1hDGcD9Tg.roa
Signing time: Sat 26 Sep 2026 00:01:39 +0000
ROA not before: Sat 26 Sep 2026 00:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394192
IP address blocks: 185.31.19.0/24 maxlen: 24
2a04:4e41:24::/48 maxlen: 48
2a04:4e41:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:7d:15:f5:04:18:2c:4d:fa:7a:16:33:f1:6d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Sep 26 00:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bba4d04391a5b57dcd4d379fe21d610c6703f538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:4c:64:2a:f3:34:2a:42:3d:42:2a:65:f9:d5:
9e:d9:1e:52:65:ba:60:0c:f4:57:50:01:ed:05:c1:
75:d8:7e:ab:f3:07:27:a1:93:23:2c:6a:e3:54:71:
47:78:1e:c0:fb:eb:fd:f5:69:c3:fd:fe:15:17:17:
34:33:c6:5a:86:c8:08:82:b5:24:75:7b:d7:c3:85:
c2:95:02:bd:4d:03:d9:d8:ec:8b:a1:ef:89:db:d6:
fd:2b:95:48:90:86:65:7a:e3:a5:ea:21:ae:a6:48:
78:e6:1c:4f:02:17:dd:e6:8c:37:80:d8:33:e5:6a:
19:a1:ec:9b:a4:c1:24:20:f7:4c:e2:4e:e0:bc:b7:
e8:e5:be:2e:04:8e:f3:2c:97:b6:85:f1:44:2f:23:
7b:35:4d:3f:64:9a:ea:d7:90:ca:e1:80:3c:be:ff:
20:68:f4:4f:ee:5a:58:5c:24:20:c0:bf:31:e3:c9:
e9:73:84:4a:94:f7:b8:7d:be:54:f0:25:33:d6:5a:
96:a9:8b:db:64:93:9a:cc:02:6b:92:bd:fa:b3:f2:
3e:74:7c:b9:1b:ac:54:a0:85:5b:b4:a1:f3:6c:45:
2f:33:df:d1:9e:81:67:d4:41:bd:10:b6:45:20:7c:
52:76:7f:bf:f1:9c:38:e5:1c:ad:98:fb:1a:c2:08:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A4:D0:43:91:A5:B5:7D:CD:4D:37:9F:E2:1D:61:0C:67:03:F5:38
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/u6TQQ5GltX3NTTef4h1hDGcD9Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.31.19.0/24
IPv6:
2a04:4e41:24::/48
2a04:4e41:90::/48
Signature Algorithm: sha256WithRSAEncryption
31:be:6c:a4:4a:1b:33:dc:63:a3:5a:26:04:3e:98:69:dc:ea:
60:52:a8:8a:30:1a:f4:1e:a6:f6:19:f1:24:b8:1c:e9:b0:a5:
03:1e:13:24:cb:da:c2:dc:7f:e5:05:9e:12:0b:75:27:86:6b:
15:19:f0:64:e5:66:77:e4:39:03:1a:f6:dc:3e:af:e6:11:01:
cc:6c:04:1a:e6:35:3c:ca:60:36:73:ad:40:03:05:cd:eb:40:
0d:91:04:f8:44:3d:52:03:bc:cd:13:6e:51:a1:51:54:56:82:
d4:01:6b:9d:f8:54:62:72:c6:7b:5a:43:ad:84:34:41:24:4e:
3b:97:72:90:ad:2e:11:0b:8e:f4:d0:cb:68:45:46:64:0d:e8:
0a:24:a0:f9:b2:5f:4e:09:7b:ef:f1:bc:d4:b2:0d:0b:da:45:
81:f9:00:76:1d:17:48:8f:cf:b3:02:d9:62:11:6a:bf:29:c9:
c4:03:5b:b1:75:61:f9:c3:19:63:c0:5b:76:13:1d:55:e3:10:
8c:75:33:49:59:b8:72:c8:9b:5f:b9:72:2b:47:b0:9c:b2:b6:
bf:d3:4f:54:53:77:dc:f2:b3:73:76:c3:47:1f:53:53:03:29:
10:e3:e7:f9:46:1b:a7:b0:0f:9a:6b:70:73:1b:a5:ac:96:1c:
d9:89:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:42 2026 by rpki-client