Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/1-ugnk_ffMVB8wG0rW9yMH-zHHj8.roa
File: 1-ugnk_ffMVB8wG0rW9yMH-zHHj8.roa (raw, json)
Hash identifier: 7Wndaz6zZT3fyizdw/fdXMeU4add/sMlZyEvogSeIM8=
Subject key identifier: FA:E8:27:93:F7:DF:31:50:7C:C0:6D:2B:5B:DC:8C:1F:EC:C7:1E:3F
Certificate issuer: /CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Certificate serial: 01A033810129D55AF42392AEB0262710848C
Authority key identifier: 05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/1-ugnk_ffMVB8wG0rW9yMH-zHHj8.roa
Signing time: Mon 24 Aug 2026 11:21:27 +0000
ROA not before: Mon 24 Aug 2026 11:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197842
IP address blocks: 153.56.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:81:01:29:d5:5a:f4:23:92:ae:b0:26:27:10:84:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05961f094a0e9c8f66828239fcc5281d8d2f8ce3
Validity
Not Before: Aug 24 11:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fae82793f7df31507cc06d2b5bdc8c1fecc71e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:e5:00:3e:c4:8d:18:2d:4d:06:ed:75:cd:
18:fd:e5:31:52:aa:a7:d4:7d:d7:8d:a6:fe:4e:81:
6f:c8:2e:2e:78:47:01:d6:a0:a4:21:52:5b:75:f4:
d2:e3:5f:9e:c9:07:93:ff:e3:50:d4:bc:06:6a:27:
59:cd:09:43:4d:a8:7b:9e:93:4b:02:ee:ea:56:77:
6f:ae:13:4d:bf:91:71:6e:df:93:1c:d7:e5:d8:fc:
f1:00:0d:18:1a:34:26:06:f9:b8:81:c0:14:a9:6d:
b7:97:ac:8a:66:b0:e0:05:fb:50:d3:7b:94:06:94:
c4:42:8e:2a:d7:20:27:fb:9d:3e:22:a9:f5:f7:60:
b8:c5:aa:34:a3:34:0c:4c:37:84:a8:2c:48:ff:e5:
8b:8e:56:6a:c9:57:54:ca:3a:3a:00:21:33:a2:01:
13:6c:61:7a:8b:e5:0f:52:da:0b:68:61:43:af:c9:
89:37:ef:90:02:7a:b6:b8:25:3e:ea:49:30:b4:a8:
77:93:e7:88:fb:e8:1a:7f:8f:13:f8:5a:99:32:5e:
bb:07:60:d7:79:bb:6e:69:da:76:95:f6:d0:23:cb:
d6:b0:07:b7:f8:5f:5d:1a:ce:bb:fe:a5:c4:a0:b1:
7b:bc:1e:95:dd:bf:75:b1:63:53:f0:b3:84:12:89:
24:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E8:27:93:F7:DF:31:50:7C:C0:6D:2B:5B:DC:8C:1F:EC:C7:1E:3F
X509v3 Authority Key Identifier:
keyid:05:96:1F:09:4A:0E:9C:8F:66:82:82:39:FC:C5:28:1D:8D:2F:8C:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZYfCUoOnI9mgoI5_MUoHY0vjOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/1-ugnk_ffMVB8wG0rW9yMH-zHHj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/348355-5c09-494c-b98f-c376d1f95b03/1/BZYfCUoOnI9mgoI5_MUoHY0vjOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a3:f4:93:7e:35:d5:8c:61:e7:1b:ca:8c:ff:33:ff:02:0b:
56:6e:53:82:26:7f:d7:a1:32:30:40:5c:50:d3:eb:dc:03:50:
52:b3:be:ea:6a:79:69:5a:f3:03:88:c6:21:4c:a7:52:30:68:
9b:9b:b1:05:e3:52:2b:5f:11:03:17:d3:c5:9c:40:79:ac:2e:
fb:ee:84:a5:9f:9f:43:a5:1d:f7:b7:bd:0d:ea:7e:6a:69:49:
53:1d:d1:4d:6e:86:8c:b4:71:90:ab:12:13:b5:64:1d:0c:75:
90:98:ff:25:b6:bb:12:62:7e:e3:d0:c4:af:3e:81:82:94:56:
c3:23:1b:68:0a:ca:d4:b5:f8:69:a8:56:11:b9:45:e4:fc:73:
7f:9b:c4:5e:7e:be:ee:5a:cd:da:40:a9:e2:7a:32:9c:67:8f:
0c:72:b0:33:d3:d7:b1:f1:8a:04:47:ad:97:e4:e3:84:13:1b:
70:42:ca:33:d4:b4:26:1f:df:c0:04:a2:0e:98:c9:47:2c:62:
98:b5:bd:0c:1f:8d:fd:e5:97:20:0e:66:62:27:20:fb:ce:ca:
e6:4f:7e:8e:03:5d:28:21:d3:d1:f3:88:68:b5:de:8e:0e:93:
3b:88:c5:3e:44:e0:35:ea:66:fd:01:23:e4:6b:96:de:41:49:
38:51:2e:7a
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaAzgQEp1Vr0I5KusCYnEISMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTYxZjA5NGEwZTljOGY2NjgyODIzOWZjYzUyODFkOGQy
ZjhjZTMwHhcNMjYwODI0MTEyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWU4Mjc5M2Y3ZGYzMTUwN2NjMDZkMmI1YmRjOGMxZmVjYzcxZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8rlAD7EjRgtTQbtdc0Y/eUxUqqn
1H3Xjab+ToFvyC4ueEcB1qCkIVJbdfTS41+eyQeT/+NQ1LwGaidZzQlDTah7npNL
Au7qVndvrhNNv5Fxbt+THNfl2PzxAA0YGjQmBvm4gcAUqW23l6yKZrDgBftQ03uU
BpTEQo4q1yAn+50+Iqn192C4xao0ozQMTDeEqCxI/+WLjlZqyVdUyjo6ACEzogET
bGF6i+UPUtoLaGFDr8mJN++QAnq2uCU+6kkwtKh3k+eI++gaf48T+FqZMl67B2DX
ebtuadp2lfbQI8vWsAe3+F9dGs67/qXEoLF7vB6V3b91sWNT8LOEEokkewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFProJ5P33zFQfMBtK1vcjB/sxx4/MB8GA1UdIwQY
MBaAFAWWHwlKDpyPZoKCOfzFKB2NL4zjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpZZkNVb09uSTltZ29JNV9NVW9IWTB2ak9NLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zNDgzNTUtNWMwOS00OTRjLWI5OGYt
YzM3NmQxZjk1YjAzLzEvMS11Z25rX2ZmTVZCOHdHMHJXOXlNSC16SEhqOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjAvMzQ4MzU1LTVjMDktNDk0Yy1iOThmLWMzNzZkMWY5NWIw
My8xL0JaWWZDVW9Pbkk5bWdvSTVfTVVvSFkwdmpPTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJk4tTAN
BgkqhkiG9w0BAQsFAAOCAQEAX6P0k3411Yxh5xvKjP8z/wILVm5TgiZ/16EyMEBc
UNPr3ANQUrO+6mp5aVrzA4jGIUynUjBom5uxBeNSK18RAxfTxZxAeawu++6EpZ+f
Q6Ud97e9Dep+amlJUx3RTW6GjLRxkKsSE7VkHQx1kJj/Jba7EmJ+49DErz6BgpRW
wyMbaArK1LX4aahWEblF5Pxzf5vEXn6+7lrN2kCp4noynGePDHKwM9PXsfGKBEet
l+TjhBMbcELKM9S0Jh/fwASiDpjJRyximLW9DB+N/eWXIA5mYicg+87K5k9+jgNd
KCHT0fOIaLXejg6TO4jFPkTgNepm/QEj5GuW3kFJOFEueg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:39:52 2026 by rpki-client