Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uaeq_asajEK6Mqjhb901kuz_jbc.roa
File: uaeq_asajEK6Mqjhb901kuz_jbc.roa (raw, json)
Hash identifier: C94r/sJ5OoRNBNcm72aO0DKna/KGnR/+OBurcAQ5U9o=
Subject key identifier: B9:A7:AA:FD:AB:1A:8C:42:BA:32:A8:E1:6F:DD:35:92:EC:FF:8D:B7
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019E06BC353CA94A273AE469421959A774EC
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uaeq_asajEK6Mqjhb901kuz_jbc.roa
Signing time: Fri 08 May 2026 08:37:38 +0000
ROA not before: Fri 08 May 2026 08:37:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212862
IP address blocks: 185.129.104.0/22 maxlen: 24
185.196.40.0/24 maxlen: 24
185.220.240.0/22 maxlen: 24
194.38.56.0/22 maxlen: 24
212.115.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 May 2026 20:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:bc:35:3c:a9:4a:27:3a:e4:69:42:19:59:a7:74:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 8 08:37:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9a7aafdab1a8c42ba32a8e16fdd3592ecff8db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:06:7a:62:f4:e4:27:66:c4:f7:91:d2:33:36:
67:34:ea:57:16:b9:d7:b8:68:c2:b5:d6:90:cb:e7:
1c:14:73:44:d2:a4:c4:44:3b:11:5e:0d:d5:4d:5e:
05:09:21:e5:2e:2c:2c:a2:63:5b:25:3e:3b:65:a7:
08:83:61:3a:89:d0:85:39:89:da:5f:52:1f:f4:c7:
5d:23:21:d8:23:fe:df:f8:ba:0b:b2:6c:eb:e7:70:
b6:4d:1a:05:34:fe:d0:84:ac:60:e5:80:9e:74:70:
b8:8a:c8:3b:63:b0:a8:4f:f7:86:66:52:4c:57:16:
a8:51:da:f5:c0:58:64:56:0c:95:03:f4:ae:69:b0:
d5:5e:17:c9:87:07:cc:13:2b:b6:53:63:b2:6c:7c:
45:77:9b:3a:5d:81:40:40:48:7e:e1:84:79:af:18:
11:22:07:ed:70:b7:d3:31:3b:e6:26:69:b3:dc:fb:
c9:65:a3:64:ea:67:2b:eb:d1:bc:87:90:4b:23:90:
d0:21:36:ca:bf:74:69:d9:7e:40:02:a0:8f:1c:21:
ad:ec:84:d4:81:df:86:9e:d7:8e:71:a1:51:8d:8e:
dd:bf:c5:bd:8c:79:be:e0:2a:64:c6:f4:51:19:ee:
3d:80:4d:cc:20:5d:ff:19:c6:f6:8b:fb:3e:b6:f6:
df:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:A7:AA:FD:AB:1A:8C:42:BA:32:A8:E1:6F:DD:35:92:EC:FF:8D:B7
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uaeq_asajEK6Mqjhb901kuz_jbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.104.0/22
185.196.40.0/24
185.220.240.0/22
194.38.56.0/22
212.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:cd:f3:40:0d:16:b5:18:17:51:29:8d:df:3b:9e:64:d7:61:
c2:31:98:01:2d:a2:e7:3e:a8:48:b5:3d:68:93:0d:bb:74:a8:
10:18:0c:cc:42:58:bd:91:66:57:d9:41:4b:47:9c:6e:3a:26:
5a:d5:88:9c:20:bc:b9:23:c4:c0:3c:42:3c:ee:e5:d0:f4:2b:
8c:e6:a8:7a:3e:16:72:0d:0c:13:9a:cd:ac:05:6a:29:06:74:
80:39:f2:fc:fc:7d:85:a6:ae:c0:31:89:d2:6d:69:57:2c:ce:
cc:43:c9:7f:f3:b7:6f:b7:06:82:f7:96:c0:f5:ca:b7:01:c7:
5d:4e:84:6d:8a:6b:3c:53:60:67:ae:0d:48:64:c9:db:23:7a:
09:49:49:00:b9:12:b4:9a:f3:f4:fd:fc:ff:e9:50:4f:d3:03:
97:c3:a9:0e:89:15:bf:39:65:10:89:bd:c6:e5:4b:fb:fe:8d:
42:80:83:43:88:06:1c:f6:47:80:f8:15:cd:95:da:82:dd:90:
58:5e:71:5c:7e:99:be:3a:23:1a:04:ac:3e:7f:68:11:d7:cb:
10:fc:39:6f:9c:7d:81:c8:ce:78:a7:af:79:73:c9:08:0c:a1:
0e:43:6f:ba:d9:4d:da:53:0b:d5:21:a1:c8:bf:e5:f0:1b:e3:
3b:54:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 11 01:27:18 2026 by rpki-client