Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/UyENkh2buny8g0oFxQCN-PLzrjU.roa
File: UyENkh2buny8g0oFxQCN-PLzrjU.roa (raw, json)
Hash identifier: NwOU5HK3c+6q7RC6VWrFLDsHuVOA6qPUgGLzcSAlQNU=
Subject key identifier: 53:21:0D:92:1D:9B:BA:7C:BC:83:4A:05:C5:00:8D:F8:F2:F3:AE:35
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019FE102E572E8FF74F562812D913D90E478
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/UyENkh2buny8g0oFxQCN-PLzrjU.roa
Signing time: Sat 08 Aug 2026 10:54:51 +0000
ROA not before: Sat 08 Aug 2026 10:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 187.5.0.0/23 maxlen: 24
200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:02:e5:72:e8:ff:74:f5:62:81:2d:91:3d:90:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 8 10:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53210d921d9bba7cbc834a05c5008df8f2f3ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:01:b3:4d:f9:ed:08:dd:a2:cb:39:b1:95:8e:
fa:76:b5:82:ed:42:92:5b:db:33:30:de:2a:fc:d8:
db:a4:9e:89:b3:4c:95:e3:34:25:8d:14:f9:04:fa:
6d:d1:6c:f2:43:fa:cc:ad:42:4c:f9:9b:94:03:b1:
83:f6:61:11:0f:90:82:8c:99:be:7c:de:24:1d:d4:
04:70:e5:35:b0:b4:a4:2d:b2:8e:14:89:db:e0:64:
f8:3b:f4:9f:36:3d:45:9a:0b:31:9b:5b:e3:53:04:
fa:cb:c8:45:49:a1:49:f3:cd:10:89:89:e2:da:8c:
dd:b9:4a:f6:1b:21:de:ca:27:6f:49:ca:85:bf:29:
3a:7d:e7:2b:ea:0e:59:40:48:e1:51:cd:15:31:d2:
45:ad:ee:9b:9e:92:4d:05:ac:04:54:5b:c1:ea:e2:
33:d4:f2:77:6c:be:18:4a:54:e4:3d:1b:3e:90:c0:
f8:8a:94:1a:00:6b:98:2d:71:e0:37:b0:8b:43:2e:
42:44:1e:de:f2:cc:3a:43:96:92:52:da:3a:56:92:
0f:e4:77:6b:53:37:96:14:d2:5a:df:b0:15:37:88:
d8:43:3b:d2:48:71:7d:e5:7d:c5:34:e1:a7:12:bf:
63:08:bf:f1:1f:ec:19:e9:5a:90:27:7a:4b:e7:ef:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:21:0D:92:1D:9B:BA:7C:BC:83:4A:05:C5:00:8D:F8:F2:F3:AE:35
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/UyENkh2buny8g0oFxQCN-PLzrjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0/23
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:cc:87:7e:82:fd:5d:b3:03:07:d0:61:25:df:a9:aa:dc:2a:
42:a3:71:fd:12:c9:51:57:84:1c:ef:11:13:19:76:be:45:a3:
f6:c9:4e:9e:5d:97:00:69:3e:64:a4:f0:90:d8:0e:9e:b1:2f:
9f:69:9d:ee:83:56:06:28:47:a9:ab:16:0e:64:05:8f:97:1c:
2a:23:c6:8d:d9:b0:e3:6c:ee:2c:0a:fd:48:59:7a:cc:03:f4:
2b:fd:49:9b:85:b2:d9:16:c5:61:51:d3:6c:da:6f:b9:6a:8a:
97:7e:64:fa:dd:0e:84:1e:e8:05:86:ad:a6:d4:03:e8:da:9b:
ce:0f:0f:ce:20:43:fd:9f:03:60:e3:eb:7c:39:46:e9:88:a3:
c7:92:26:66:1c:8f:18:81:44:95:fe:23:24:53:6f:ae:b7:96:
ae:0a:bb:40:6d:d7:66:b2:bd:0c:92:d5:e5:d0:00:b2:6a:e2:
c0:09:61:99:01:1e:24:4e:82:7f:00:e1:8d:2c:78:e8:61:d9:
86:ad:1c:bc:6f:22:dd:c0:89:f1:06:d5:22:ce:b9:e7:20:aa:
19:38:99:56:4d:0f:68:52:c1:bf:4b:94:c1:ea:2d:65:f4:06:
2e:fe:c3:6c:c9:8c:89:2d:f2:16:1d:80:2e:fd:00:c3:07:16:
d2:f2:7b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:26:56 2026 by rpki-client