Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UDLWftwLMp7xvpK5usZ__dwtv8g.roa
File: UDLWftwLMp7xvpK5usZ__dwtv8g.roa (raw, json)
Hash identifier: 7VwtyZmER5rZHZELGwoyyXB3Muj98Fpi5wDkCyABLN4=
Subject key identifier: 50:32:D6:7E:DC:0B:32:9E:F1:BE:92:B9:BA:C6:7F:FD:DC:2D:BF:C8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A0499E66A318863F564EDE40BCE7B39421
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UDLWftwLMp7xvpK5usZ__dwtv8g.roa
Signing time: Fri 28 Aug 2026 18:25:12 +0000
ROA not before: Fri 28 Aug 2026 18:25:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 89.40.92.0/24 maxlen: 24
178.239.198.0/24 maxlen: 24
178.239.204.0/24 maxlen: 24
185.192.70.0/24 maxlen: 24
185.228.225.0/24 maxlen: 24
194.32.120.0/24 maxlen: 24
217.19.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 09:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:9e:66:a3:18:86:3f:56:4e:de:40:bc:e7:b3:94:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 28 18:25:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5032d67edc0b329ef1be92b9bac67ffddc2dbfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:10:ff:93:90:4c:55:77:fd:d1:bd:06:0c:16:
cd:ea:11:5e:d5:0b:00:e4:3a:ef:ee:c7:31:e4:10:
dc:79:57:83:13:4d:73:1e:fd:5d:36:4c:b4:db:69:
9a:eb:1e:ed:e7:d2:a4:c9:ee:43:bb:7e:0d:db:82:
fc:43:5a:52:33:eb:10:ce:ad:fa:83:23:b9:fb:8c:
85:69:a1:45:8c:04:46:a0:eb:8d:af:87:a5:f8:73:
36:21:88:c9:33:1e:7f:ff:b2:f0:b2:b8:10:82:e5:
d8:80:39:f9:af:42:09:73:3b:24:6d:ca:ab:96:7d:
27:59:8d:49:a3:bc:26:43:35:69:4b:7c:f6:2a:56:
99:5c:5b:19:56:ef:a0:ab:f7:b6:e8:0f:7d:44:20:
67:99:d4:99:76:14:e0:ca:0f:e3:c2:ca:cd:20:cc:
0f:eb:97:d2:34:ed:8c:05:f5:af:97:66:e6:d2:97:
b2:d7:b4:7c:9d:a9:2f:ee:09:dd:04:c8:2b:13:9a:
83:94:5c:50:f7:d5:fc:31:ef:94:10:b5:e6:24:2e:
3f:0c:29:e2:85:ed:43:70:8e:fa:c1:93:29:4b:64:
17:60:58:2f:c1:34:39:1c:d7:dd:a8:cb:a4:29:f9:
7e:7b:8d:20:6f:8f:06:b2:60:49:9c:11:48:50:3b:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:D6:7E:DC:0B:32:9E:F1:BE:92:B9:BA:C6:7F:FD:DC:2D:BF:C8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/UDLWftwLMp7xvpK5usZ__dwtv8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.92.0/24
178.239.198.0/24
178.239.204.0/24
185.192.70.0/24
185.228.225.0/24
194.32.120.0/24
217.19.29.0/24
Signature Algorithm: sha256WithRSAEncryption
61:15:0f:ad:69:ea:18:ec:66:9d:d4:bd:3b:24:e4:5c:1f:0e:
2d:27:82:9d:50:7e:40:5a:dc:3c:08:d1:53:ea:6d:ed:81:3c:
3a:58:60:7e:e0:c9:a4:0f:c3:65:e1:39:35:dd:9d:b1:71:a7:
38:3f:a8:bb:dd:11:7c:75:34:7b:89:c1:f0:47:d3:a8:f4:35:
51:bd:92:6e:d2:d2:e4:52:4f:3e:55:a7:ee:69:3f:06:e5:57:
cc:77:cb:99:09:bc:e6:a5:58:fc:87:3f:7f:16:a8:ab:c4:ef:
c9:82:1e:90:cb:b7:c1:df:1e:a8:ca:38:c6:19:7d:80:c7:2c:
fc:89:52:39:4d:46:93:16:27:f8:17:53:34:c9:7a:07:c7:d8:
44:72:37:0a:41:25:46:a7:d2:ef:50:8b:ab:e6:e7:75:b2:04:
98:e8:15:04:74:d5:7e:51:da:c2:14:ea:f0:cf:af:44:2f:be:
8c:c1:f1:39:f1:30:1e:93:0a:66:c7:f0:66:bb:76:d1:c5:19:
fd:fc:8f:cf:16:b3:80:45:1c:98:cb:57:77:b7:fe:10:b1:94:
c1:74:52:60:5b:63:c6:3f:9a:d7:44:04:60:0a:9d:f8:a0:7f:
9f:3a:64:96:d0:78:82:41:1c:e8:29:0b:d9:82:92:ff:b1:51:
b5:23:2f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:15:44 2026 by rpki-client