Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/0uKp1-06eDgDsHj7rV4YkgjeLC8.roa
File: 0uKp1-06eDgDsHj7rV4YkgjeLC8.roa (raw, json)
Hash identifier: yWRLX1f4zIOqfJpNjFulQNPHUDNHVdS+Zh4JYZ3W4hQ=
Subject key identifier: D2:E2:A9:D7:ED:3A:78:38:03:B0:78:FB:AD:5E:18:92:08:DE:2C:2F
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01A13E9E3A57FA67E2B571DB08DFEBF25C9A
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/0uKp1-06eDgDsHj7rV4YkgjeLC8.roa
Signing time: Thu 15 Oct 2026 08:11:59 +0000
ROA not before: Thu 15 Oct 2026 08:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206787
IP address blocks: 85.28.57.0/24 maxlen: 24
85.28.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:9e:3a:57:fa:67:e2:b5:71:db:08:df:eb:f2:5c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Oct 15 08:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2e2a9d7ed3a783803b078fbad5e189208de2c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:2d:4d:22:ef:04:c9:31:76:09:b8:50:0b:
e2:a9:aa:f1:7d:a5:55:8a:6f:b6:91:d4:7c:ed:85:
11:e2:9f:00:94:cd:b9:3b:a9:10:69:63:46:f8:2f:
a2:57:a0:2d:cf:48:5f:7e:fe:0c:38:1e:d0:12:a0:
c6:12:28:68:d4:5c:98:9f:1c:b0:03:21:dc:0e:44:
9e:4d:48:07:2f:02:83:45:be:e8:58:9c:cf:e7:a4:
29:81:97:76:bd:4f:54:26:bd:24:1f:22:85:ae:aa:
61:f4:49:38:06:54:d9:3a:83:c5:14:37:6b:89:89:
2a:53:10:3f:bf:8b:00:5b:60:d3:71:da:7c:08:07:
fd:7f:6b:06:34:36:cc:8e:a1:0d:06:57:a4:f3:58:
c7:16:84:b3:1a:ef:61:88:78:c6:ad:8d:f3:c6:de:
d0:30:a3:79:15:64:55:3b:45:1e:cb:45:b8:10:01:
c5:c7:26:a5:53:1f:8b:06:2f:8e:27:19:ba:9e:69:
36:7d:e5:7c:c3:21:e5:d6:78:59:49:29:e6:69:c6:
bf:98:df:a9:e1:9f:5a:05:ab:b7:13:67:d2:c0:7d:
52:d2:49:b1:2e:fd:9e:c1:89:e6:72:e5:1e:06:ce:
e3:9b:c3:3b:f5:a0:3f:c3:cd:02:fd:02:d7:be:da:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E2:A9:D7:ED:3A:78:38:03:B0:78:FB:AD:5E:18:92:08:DE:2C:2F
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/0uKp1-06eDgDsHj7rV4YkgjeLC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.57.0/24
85.28.63.0/24
Signature Algorithm: sha256WithRSAEncryption
74:12:1c:1d:16:b9:93:22:a4:83:a8:ac:86:8f:1e:35:b8:d5:
06:6c:81:77:e8:a8:fe:4d:6e:c3:11:38:a7:f9:6b:8b:99:92:
18:f5:b4:7f:23:35:8d:e4:bf:b5:42:f1:49:31:50:d5:14:19:
e1:ed:24:3f:19:44:0b:f5:5b:77:85:5e:f0:35:de:ab:5e:e8:
8d:ea:b7:0b:60:30:1e:20:b5:e4:40:f6:12:67:5d:c3:7f:ce:
5a:77:c5:2d:37:e7:2d:cc:52:d8:6e:ca:6a:44:a4:45:5b:88:
60:3e:8a:db:f7:a7:9d:39:34:67:a8:1f:b8:bb:6c:5b:e4:25:
0b:90:9f:ae:4a:8f:7c:90:a4:ea:d1:c8:17:e1:b3:9e:1b:ec:
d4:88:76:66:93:68:8e:92:51:17:1f:93:97:89:70:10:2c:2c:
4e:bb:c0:5f:b0:1b:87:cf:8e:43:5e:60:0b:86:0a:58:97:2f:
e4:5c:00:0c:1c:70:6f:c5:8d:36:28:91:fa:67:b7:a2:21:dd:
ab:7d:91:b4:6c:17:b5:08:c3:a3:91:8f:8a:f1:55:93:ef:7a:
ce:7d:57:14:bf:b2:87:c4:e8:50:ca:94:02:26:0c:50:1f:aa:
1f:86:42:aa:35:58:cb:58:80:26:38:60:f2:7e:be:ec:a5:b7:
af:10:2c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:21 2026 by rpki-client