Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/UqleOCOfPnolHy26c63w8sv6kxk.roa
File: UqleOCOfPnolHy26c63w8sv6kxk.roa (raw, json)
Hash identifier: TFhiCPhgDCJT/VB/4VLTfoJPPS4mOC/hIwRArT1aGa4=
Subject key identifier: 52:A9:5E:38:23:9F:3E:7A:25:1F:2D:BA:73:AD:F0:F2:CB:FA:93:19
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019FB380E1E41E86CE529EB84738DBD91759
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/UqleOCOfPnolHy26c63w8sv6kxk.roa
Signing time: Thu 30 Jul 2026 14:49:55 +0000
ROA not before: Thu 30 Jul 2026 14:49:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 185.70.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:80:e1:e4:1e:86:ce:52:9e:b8:47:38:db:d9:17:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jul 30 14:49:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52a95e38239f3e7a251f2dba73adf0f2cbfa9319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:6d:44:b4:e4:bd:5e:98:06:91:b6:b9:ac:
c4:4c:10:2a:7e:72:a8:c5:c6:05:c6:1c:a6:73:45:
fe:24:fb:c9:ea:53:d0:22:19:e0:0e:5d:53:da:01:
dc:a6:ca:99:58:d7:7f:24:fc:37:ea:97:14:6a:aa:
3e:df:07:1b:98:f9:69:9b:f0:86:33:7e:f2:0a:c2:
a5:b8:3d:a9:a3:dd:c5:64:2d:1f:75:08:2c:7c:70:
53:10:ea:d8:9b:d3:63:31:10:72:43:e7:6e:81:c0:
45:f9:49:b0:ca:38:ee:c4:c7:b9:c6:73:c7:de:97:
c6:f5:8a:cd:9e:62:8e:74:bf:a8:72:9b:45:3a:34:
50:98:5f:02:bd:9e:9c:57:3c:7b:10:45:b4:c6:52:
c9:0d:59:a3:a7:b0:da:b6:c7:85:99:c2:96:e5:9b:
d5:7d:47:d0:7f:16:d0:ba:52:fa:4f:a8:12:f1:5d:
11:88:e1:a2:a9:82:1b:cb:95:a8:b8:b4:96:03:4c:
15:f2:15:ad:cc:28:97:c7:92:03:1c:b8:dc:ad:54:
59:86:81:2d:bb:06:d6:17:9e:10:8e:b9:fe:21:17:
21:61:dc:82:3e:91:da:36:f3:60:2e:1c:e1:d3:dd:
eb:db:34:bf:5d:d4:45:79:d5:e0:07:9d:ce:2b:08:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:5E:38:23:9F:3E:7A:25:1F:2D:BA:73:AD:F0:F2:CB:FA:93:19
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/UqleOCOfPnolHy26c63w8sv6kxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.220.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e9:78:85:7e:8a:62:df:83:d2:f4:4d:8a:1a:a1:e7:ee:60:
46:53:1e:30:a0:75:aa:f2:22:eb:34:df:88:80:59:a0:2d:be:
4d:aa:87:22:df:c4:c7:c8:2f:66:11:9d:80:dc:79:71:ef:c6:
50:d9:87:5e:10:af:d9:04:76:f4:5e:3d:90:37:3d:74:45:c8:
65:cf:f0:35:56:88:01:b2:23:fb:86:e9:3e:43:9f:79:2e:6a:
3c:87:45:78:3d:fb:49:0f:42:6c:b5:52:37:91:70:c1:bb:a6:
ea:a5:39:d0:cf:08:e3:a1:4d:28:74:b0:53:8f:d9:31:20:c8:
84:c3:01:c3:d3:ab:dd:a8:d5:00:ea:fe:df:5a:2d:ee:2b:e9:
e6:2d:7f:94:c2:77:53:7c:8f:d2:85:e0:f7:18:8c:72:0b:9b:
d6:1e:15:bb:09:f4:e6:7d:ae:38:b0:2f:e4:6a:0b:8f:f5:4c:
8c:c7:6d:40:12:26:ff:7e:1b:3f:88:ad:af:0f:51:31:e7:f0:
9c:b3:11:e4:9b:93:bb:be:f6:9c:ab:6e:81:75:ef:86:90:35:
0a:51:db:c5:ea:7a:86:db:97:60:81:35:bf:3b:6f:11:c6:fd:
fe:b8:7d:71:a4:d7:b0:22:23:1b:d3:c0:62:c7:a3:72:34:99:
f6:5c:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 14:55:04 2026 by rpki-client