Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/uBliW8lm_-Es_oU23ZIgU9wo5GE.roa
File: uBliW8lm_-Es_oU23ZIgU9wo5GE.roa (raw, json)
Hash identifier: zArbV+ovixZNJT5zlNVtmsFx8eat6ALekSg9jiC4bKY=
Subject key identifier: B8:19:62:5B:C9:66:FF:E1:2C:FE:85:36:DD:92:20:53:DC:28:E4:61
Certificate issuer: /CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Certificate serial: 019F23683436CC91E107668BCD4E291D2EC9
Authority key identifier: 37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/uBliW8lm_-Es_oU23ZIgU9wo5GE.roa
Signing time: Thu 02 Jul 2026 15:17:39 +0000
ROA not before: Thu 02 Jul 2026 15:17:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3561
IP address blocks: 178.159.64.0/22 maxlen: 22
178.159.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 03:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:34:36:cc:91:e1:07:66:8b:cd:4e:29:1d:2e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370f4f5d84c2b5cee3c6e903cb530d6a91f404ba
Validity
Not Before: Jul 2 15:17:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b819625bc966ffe12cfe8536dd922053dc28e461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:34:bd:29:e0:a4:16:0e:95:01:2b:00:8c:
69:8b:c4:63:f8:fe:5c:38:5f:98:7c:6f:bc:ae:98:
06:0d:e7:03:49:54:d5:e4:c4:de:4c:33:3f:e0:be:
ad:7a:28:57:4b:c7:7d:79:c7:b3:02:63:40:75:d0:
9a:b8:5e:87:a9:d1:4d:6b:9c:64:36:88:5c:e7:e8:
39:df:f2:e9:a4:93:70:11:24:c5:4b:1a:bc:62:01:
1a:de:a6:2a:0b:55:41:41:e8:c5:67:c6:97:89:8d:
c6:c0:d8:7e:78:58:e3:46:66:7e:d0:95:94:df:fb:
08:c2:62:5e:40:3f:cf:fd:10:20:68:21:8d:20:eb:
2d:96:57:d4:93:62:79:1f:1e:36:ae:99:cf:7c:a7:
38:3f:ac:3c:60:e0:c9:f1:49:dc:f2:fa:aa:44:7a:
97:22:66:7f:2d:63:78:a1:43:31:82:d1:59:83:a3:
07:fe:ae:db:02:f5:aa:b8:e7:c1:8b:90:83:f5:7f:
d1:09:e1:fa:71:3a:06:59:10:c9:4e:9a:e5:9e:6a:
31:c7:c7:78:a6:54:ef:0c:39:fc:53:44:2e:ff:78:
19:45:9a:2c:1e:0f:2e:c5:ef:e9:f3:d0:d1:97:28:
9a:c3:99:5b:73:81:04:d5:f7:13:ae:39:b7:b8:38:
5b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:19:62:5B:C9:66:FF:E1:2C:FE:85:36:DD:92:20:53:DC:28:E4:61
X509v3 Authority Key Identifier:
keyid:37:0F:4F:5D:84:C2:B5:CE:E3:C6:E9:03:CB:53:0D:6A:91:F4:04:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw9PXYTCtc7jxukDy1MNapH0BLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/uBliW8lm_-Es_oU23ZIgU9wo5GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/Nw9PXYTCtc7jxukDy1MNapH0BLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.159.64.0/22
178.159.72.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:a8:28:9f:be:f4:f8:2e:91:67:d9:3e:0b:50:f4:6d:e7:c8:
6b:72:a5:15:00:65:45:41:c3:f7:77:77:df:5a:ce:ed:a7:e3:
87:36:d3:3d:3f:02:bb:4e:53:06:fc:84:dc:ab:f1:59:5a:b9:
c4:49:51:ec:08:2c:93:7f:5e:ea:3e:f2:32:8a:2d:7c:81:cc:
a6:cb:a9:c7:3c:aa:9e:7e:08:06:2c:fa:c3:d1:1f:07:ec:89:
95:a5:9f:33:4d:f4:23:a9:96:5c:18:42:c8:57:90:de:2c:40:
26:c0:32:68:4e:1e:34:4c:95:f5:8d:b2:45:8c:11:55:13:db:
9a:b2:4a:1c:92:a0:d8:0b:84:18:f3:86:de:3f:4d:e5:3c:34:
54:32:96:10:e1:b6:70:48:b3:2c:6d:40:9a:16:7c:fa:88:d1:
04:fc:84:fd:8e:cd:f3:1b:9f:f1:13:39:27:4d:06:24:1e:6c:
e0:24:19:1a:20:f8:ce:84:70:d2:de:c4:9f:d6:28:38:c0:8f:
f5:3e:de:cc:b8:34:eb:d0:09:3b:97:49:05:d0:aa:bf:e8:cc:
f8:8a:53:bc:10:87:69:3f:a0:d0:fc:5c:68:02:64:b8:0c:d4:
2e:ec:ca:52:df:c2:e1:fb:f8:3a:c3:26:b8:27:53:0d:ee:7b:
24:7d:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:29:11 2026 by rpki-client