Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/UaR_UHkFAgSDKg8qfJLdQhv2nP4.roa
File: UaR_UHkFAgSDKg8qfJLdQhv2nP4.roa (raw, json)
Hash identifier: FM6iqS7zaO3jyi72jPcoOz+XPbW692I1Gmdi8KqQbdQ=
Subject key identifier: 51:A4:7F:50:79:05:02:04:83:2A:0F:2A:7C:92:DD:42:1B:F6:9C:FE
Certificate issuer: /CN=ed800950a31dcdacaac56adb936a42beb845e24b
Certificate serial: 01A0D877F11678BA6929F08BBE97858641D1
Authority key identifier: ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/UaR_UHkFAgSDKg8qfJLdQhv2nP4.roa
Signing time: Fri 25 Sep 2026 12:08:54 +0000
ROA not before: Fri 25 Sep 2026 12:08:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 185.221.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:77:f1:16:78:ba:69:29:f0:8b:be:97:85:86:41:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed800950a31dcdacaac56adb936a42beb845e24b
Validity
Not Before: Sep 25 12:08:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51a47f5079050204832a0f2a7c92dd421bf69cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:e0:8a:43:bd:60:e2:d0:ff:fb:25:56:1e:
5b:fc:80:30:73:c3:99:15:c6:64:71:63:66:0a:91:
3d:f7:f9:51:52:b7:34:30:f5:ad:8d:e1:33:70:86:
25:2e:0f:18:a2:b9:71:17:fb:e5:51:0d:09:f6:e7:
45:04:6d:88:e7:b8:57:10:d0:e4:bd:53:90:22:54:
10:05:2e:f7:c0:d3:93:f2:1b:b3:9d:74:43:56:96:
8a:24:ec:0a:6d:ab:1b:70:16:75:ae:b0:92:5c:ef:
91:2b:3c:b5:ac:26:27:9e:fd:91:93:34:92:15:cc:
11:a1:fe:d5:1e:74:80:c6:b6:01:57:32:7f:93:19:
51:1d:a3:66:dd:2d:c6:fc:43:53:f0:f3:08:6b:11:
d3:83:0b:37:24:12:eb:74:a6:ce:f4:80:c1:59:32:
e9:bd:84:01:6b:a1:48:56:64:2d:6f:96:8c:64:22:
74:bd:bd:3f:b9:50:4b:61:ad:87:45:ec:e3:82:f0:
97:c9:14:6b:17:45:41:4f:0c:d0:39:89:04:f5:ba:
03:f2:f6:e1:63:26:0c:c0:4c:4e:0c:42:98:ef:79:
68:3f:4e:23:e9:94:f6:27:30:8a:f1:f6:1a:52:34:
fe:3f:94:4d:a4:72:64:a1:3a:04:0a:76:e0:f8:a4:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A4:7F:50:79:05:02:04:83:2A:0F:2A:7C:92:DD:42:1B:F6:9C:FE
X509v3 Authority Key Identifier:
keyid:ED:80:09:50:A3:1D:CD:AC:AA:C5:6A:DB:93:6A:42:BE:B8:45:E2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YAJUKMdzayqxWrbk2pCvrhF4ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/UaR_UHkFAgSDKg8qfJLdQhv2nP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8a6f72-c822-451f-a5c5-a7fd6c8e70fd/1/7YAJUKMdzayqxWrbk2pCvrhF4ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.221.218.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:81:e3:93:64:b5:4b:41:da:df:1f:9d:6a:db:f7:b4:aa:1c:
a9:ba:7f:0e:19:7d:6c:26:0a:6c:0c:b3:46:67:37:77:7c:55:
c3:fc:e7:46:36:74:93:f4:ab:ad:bb:9a:46:34:14:fe:c9:89:
8d:88:7a:25:4c:db:c4:eb:4a:b6:47:8b:c2:1c:d2:06:fc:f4:
53:2a:cb:a7:35:05:fa:20:d4:bd:6d:fb:23:68:9b:3f:36:94:
23:a9:28:84:44:d6:80:fe:b1:df:d5:21:e1:5f:72:dd:f4:d9:
24:8b:ae:3f:22:a0:53:7e:db:b7:ef:09:08:36:83:9a:57:f8:
28:8c:28:61:35:a5:d2:49:01:f0:41:53:3c:00:da:8d:b0:fc:
e4:d5:e3:27:2c:29:c6:80:77:d8:b2:89:56:36:38:06:e7:be:
41:9a:59:53:ad:77:78:95:e7:4d:0f:80:16:6b:4f:84:1f:ea:
79:75:8e:50:df:22:f8:c5:61:42:bb:f6:a4:03:b0:cb:67:c2:
12:1a:7f:31:13:9f:9c:32:b7:8b:17:f1:4c:67:97:68:e4:dd:
cf:22:c8:d7:bb:62:9a:ce:68:e9:15:7b:50:e5:60:24:26:bc:
a9:eb:27:e2:f6:4a:2e:f6:68:e0:34:70:b2:ce:e3:ac:08:16:
f9:9a:d0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:33 2026 by rpki-client