Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/uxNKUsKo5h_enRs10EuzKslK69I.roa
File: uxNKUsKo5h_enRs10EuzKslK69I.roa (raw, json)
Hash identifier: jcHFt6VeAP3mOXkkdbklkER39daE34srYcy8I5Dybxc=
Subject key identifier: BB:13:4A:52:C2:A8:E6:1F:DE:9D:1B:35:D0:4B:B3:2A:C9:4A:EB:D2
Certificate issuer: /CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Certificate serial: 01A0664F2EDC1100A1F5D5E02615C5861528
Authority key identifier: AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/uxNKUsKo5h_enRs10EuzKslK69I.roa
Signing time: Thu 03 Sep 2026 08:07:40 +0000
ROA not before: Thu 03 Sep 2026 08:07:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199708
IP address blocks: 185.48.200.0/23 maxlen: 23
185.48.201.0/24 maxlen: 24
185.48.202.0/23 maxlen: 23
185.48.203.0/24 maxlen: 24
195.130.201.0/24 maxlen: 24
2a04:b280::/29 maxlen: 29
2a04:b280::/42 maxlen: 48
2a04:b280:40::/42 maxlen: 48
2a04:b280:100::/42 maxlen: 48
2a04:b280:140::/42 maxlen: 48
2a04:b280:1c0::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 20:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:4f:2e:dc:11:00:a1:f5:d5:e0:26:15:c5:86:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4bdd9e97f210370cc301257ac15faeb8fa524e
Validity
Not Before: Sep 3 08:07:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb134a52c2a8e61fde9d1b35d04bb32ac94aebd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a0:ea:de:0b:4a:54:85:31:94:1d:19:89:f8:
36:dd:e5:5c:d4:0b:49:34:d0:f7:80:32:9f:7a:bb:
fd:5a:dc:a1:c0:cf:70:6d:3e:fa:36:0c:7f:13:57:
70:3d:e7:c0:07:50:9a:64:34:35:3a:4f:10:eb:11:
09:2a:05:50:50:f1:ba:fb:95:56:9b:61:ef:12:e3:
44:82:7a:48:a1:2d:91:14:54:61:1d:7c:23:52:06:
83:ad:27:a1:54:a1:d3:48:7a:c4:f0:9a:23:08:27:
98:d5:c9:85:88:36:af:4d:a5:c3:4f:32:81:1e:be:
2e:da:35:19:9c:53:85:76:bd:c8:41:76:bf:53:4e:
d1:39:e6:4c:7d:83:1a:32:76:83:2b:f7:5e:7b:c2:
8a:3e:1c:25:77:40:c2:dc:25:51:7e:d0:63:95:c7:
cd:fb:ab:f6:9c:d7:d1:25:19:4f:20:15:2e:25:ec:
6a:cb:07:81:06:52:2d:56:83:e5:11:29:21:46:5a:
99:d9:9a:e7:fc:10:5b:c1:48:52:70:f6:72:af:1c:
3a:ff:98:3a:8b:57:9a:2d:02:f3:ea:01:a6:af:3f:
67:58:10:8f:f2:a8:43:72:c0:b3:db:ff:3e:c5:26:
7d:fd:6b:8f:fc:3a:e6:23:f7:75:08:b0:0e:f7:62:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:13:4A:52:C2:A8:E6:1F:DE:9D:1B:35:D0:4B:B3:2A:C9:4A:EB:D2
X509v3 Authority Key Identifier:
keyid:AC:4B:DD:9E:97:F2:10:37:0C:C3:01:25:7A:C1:5F:AE:B8:FA:52:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEvdnpfyEDcMwwElesFfrrj6Uk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/uxNKUsKo5h_enRs10EuzKslK69I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/17490b-09a6-4e38-b084-14b0e8c4e8e7/1/rEvdnpfyEDcMwwElesFfrrj6Uk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.200.0/22
195.130.201.0/24
IPv6:
2a04:b280::/29
Signature Algorithm: sha256WithRSAEncryption
62:aa:23:ef:fe:92:e2:47:45:94:7e:f2:c1:82:97:d4:82:58:
8f:55:f1:cd:13:be:f9:c8:37:7b:d4:6d:35:d1:c7:d8:d7:df:
51:ae:9b:cd:b3:61:fc:d3:6a:5a:65:3e:dd:b0:6e:25:55:09:
6e:f1:b8:2f:57:fd:70:7c:84:8a:52:92:34:5e:48:3e:1b:7f:
20:ce:88:1a:a8:95:4e:c9:58:42:3e:b6:7f:bc:02:83:b5:99:
a5:96:8e:01:db:0c:e0:bd:7f:bb:95:e7:9e:8f:a7:7b:19:2c:
ce:af:55:e9:d8:52:6d:32:84:1b:b6:15:fb:2f:a5:95:21:11:
f5:47:05:b1:92:04:67:4b:e2:43:d4:a4:29:82:8a:1d:b7:a5:
bd:78:9d:a0:02:d5:d6:6a:b6:ca:19:ad:46:3a:c9:93:fe:33:
aa:93:fa:85:57:3f:d7:6f:47:4c:46:58:b9:3f:e8:7e:67:f3:
c9:0e:54:cd:b6:61:87:28:01:07:ef:41:90:7c:dd:f9:42:06:
a4:71:a8:39:0d:9d:bc:e8:66:9f:50:b1:20:86:d0:21:64:63:
f5:f6:a6:af:b7:de:d9:c5:31:03:76:59:f4:f0:4a:6d:2c:09:
c5:3a:ad:22:ad:31:6b:32:f7:49:69:40:3e:eb:0d:c8:9f:2f:
c5:9a:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 05:28:51 2026 by rpki-client