Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/upgJf2GWuY-tBaXXz-EbWegIfXw.roa
File: upgJf2GWuY-tBaXXz-EbWegIfXw.roa (raw, json)
Hash identifier: WSFcnYhOO+7s2dKUiwj0OyNxd0ziOfeGAvF8AAMHs9g=
Subject key identifier: BA:98:09:7F:61:96:B9:8F:AD:05:A5:D7:CF:E1:1B:59:E8:08:7D:7C
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 01A019BDB81A654196CDC318367705D5704C
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/upgJf2GWuY-tBaXXz-EbWegIfXw.roa
Signing time: Wed 19 Aug 2026 11:17:38 +0000
ROA not before: Wed 19 Aug 2026 11:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50132
IP address blocks: 185.192.22.0/24 maxlen: 24
185.200.198.0/24 maxlen: 24
185.200.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:bd:b8:1a:65:41:96:cd:c3:18:36:77:05:d5:70:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Aug 19 11:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba98097f6196b98fad05a5d7cfe11b59e8087d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:90:05:08:94:1b:2e:78:c3:e3:e9:07:e0:
bf:0c:d5:bb:a6:d3:bb:94:e6:ec:d1:ee:8a:b2:5d:
ba:88:92:dd:0c:19:4c:fd:43:5f:30:98:79:c9:0c:
b0:66:c1:8d:73:86:75:b4:48:6e:b4:c2:45:14:2f:
c7:6b:ad:08:7a:3b:90:8d:fc:c3:d8:83:eb:82:d2:
09:28:53:02:2c:2d:fe:ee:91:38:cc:1d:c5:63:b7:
05:e0:7e:69:80:01:ca:df:c8:86:71:7c:17:7e:bc:
b8:5c:63:7e:61:78:ee:f1:c0:be:8a:59:a2:99:27:
f8:a6:b6:c8:76:df:00:c5:b6:06:ee:99:2b:e5:64:
29:61:29:11:0a:ad:e8:a4:33:dd:80:bb:ef:04:98:
66:e5:a7:7c:24:e4:b1:0a:37:fb:f9:0b:3d:08:f7:
56:38:cc:3a:4e:cc:0e:cb:94:fe:16:98:11:94:c3:
bf:89:f1:bc:e2:bf:5b:24:bd:09:19:74:13:b5:39:
20:fd:2f:30:87:8a:c4:df:ed:19:9c:37:c7:e0:a6:
08:04:51:40:1b:a2:69:f0:75:49:71:13:2b:22:87:
de:eb:d2:36:b2:ad:ba:06:d0:b3:54:1e:36:a3:08:
f2:37:53:5f:ad:5c:e8:ba:bf:ac:5c:57:36:81:0d:
e4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:98:09:7F:61:96:B9:8F:AD:05:A5:D7:CF:E1:1B:59:E8:08:7D:7C
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/upgJf2GWuY-tBaXXz-EbWegIfXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.22.0/24
185.200.198.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:d5:90:a4:25:fa:10:c9:6d:77:48:6a:04:9a:a3:2c:1b:14:
31:5c:fd:d0:ff:dc:91:29:d1:18:c0:dd:6a:ff:4b:3b:c6:a6:
16:97:e7:cb:a3:1c:fa:46:21:dc:a0:1e:f1:76:fe:eb:e4:83:
77:c3:b4:8c:e5:72:77:f9:e8:cd:b2:7d:bf:b5:45:b1:f0:aa:
c2:ae:9e:7c:0d:ec:ad:da:ec:57:44:1c:9c:ec:f1:13:1f:27:
33:74:b8:e2:cd:87:2b:ef:9b:34:d3:22:f1:3b:3f:f3:6e:e8:
3f:e6:d9:80:3d:1a:df:1b:d6:a6:45:1c:03:03:6a:65:78:e7:
e4:13:0a:57:31:b7:bb:91:ae:41:33:42:11:39:19:78:ff:e5:
b0:99:2f:c3:2c:31:48:80:04:a2:fd:70:bf:ad:0b:72:4d:7b:
b0:ec:80:6f:72:76:e8:15:2c:05:8a:e1:06:9a:28:2b:c5:bb:
d1:fc:77:c3:29:a4:4c:d9:1c:d2:38:5b:14:a6:0d:e8:fb:07:
27:0e:fa:b1:6e:c7:c5:17:e5:b0:1b:f9:6e:86:2d:1b:d8:b6:
e4:fa:bb:04:d4:9d:67:5c:59:2f:c4:32:05:2f:7e:51:53:95:
13:07:01:b3:2e:a8:27:47:c0:15:3d:66:01:33:c9:ab:90:67:
4b:fb:8d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:43 2026 by rpki-client