Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/U8zMUiMk1Ot906wBPhNnh9qIyVs.roa
File: U8zMUiMk1Ot906wBPhNnh9qIyVs.roa (raw, json)
Hash identifier: 9tU/X0pyerM1WjggaqK28em0X/I42isjLNz8F4mP3TU=
Subject key identifier: 53:CC:CC:52:23:24:D4:EB:7D:D3:AC:01:3E:13:67:87:DA:88:C9:5B
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A02418EAB07939E8F96E62965F1D5B47C4
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/U8zMUiMk1Ot906wBPhNnh9qIyVs.roa
Signing time: Fri 21 Aug 2026 11:33:27 +0000
ROA not before: Fri 21 Aug 2026 11:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48266
IP address blocks: 216.235.250.0/24 maxlen: 24
216.235.251.0/24 maxlen: 24
216.236.6.0/23 maxlen: 24
216.236.6.0/24 maxlen: 24
216.236.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:18:ea:b0:79:39:e8:f9:6e:62:96:5f:1d:5b:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Aug 21 11:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53cccc522324d4eb7dd3ac013e136787da88c95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:82:f9:82:1d:81:41:2b:b0:b8:8e:dc:03:
c2:de:48:71:0d:7b:fe:55:20:eb:d9:11:b1:3f:b3:
8f:a4:84:55:e8:05:0d:83:e9:77:a1:1a:33:1a:51:
64:6f:be:e9:0e:47:78:82:5d:97:0b:2f:83:cc:aa:
32:ca:2d:99:38:03:b0:86:dd:9c:d0:30:0d:e3:75:
54:16:f9:79:75:53:42:1d:6a:44:9b:70:c6:77:a2:
fc:65:de:51:e3:6b:0e:81:d4:2c:87:e8:b4:0b:f4:
72:e5:36:0f:09:e6:e0:9d:f8:3f:b7:b8:1a:04:57:
4e:d5:f3:68:9c:15:9c:68:56:d9:b9:ea:7f:8f:ef:
42:17:a4:64:4c:2a:b4:59:6d:be:51:d1:9b:1a:09:
13:01:4b:22:e4:b0:7b:92:26:94:fd:cf:f0:b4:c5:
13:f6:bb:fb:d3:83:e0:0c:b6:2b:e5:81:c8:fd:85:
1e:98:0e:42:20:04:29:47:43:5e:ec:c9:f9:61:c2:
a8:bb:03:2d:8f:22:04:0b:37:38:12:61:be:9d:76:
e7:04:01:f9:32:57:a7:bd:ce:e7:a0:2a:77:b0:22:
a8:91:74:4e:0a:df:37:06:83:15:d2:71:7a:14:5d:
86:12:f4:21:a3:72:e8:d4:c9:f9:d6:8f:fb:34:6b:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CC:CC:52:23:24:D4:EB:7D:D3:AC:01:3E:13:67:87:DA:88:C9:5B
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/U8zMUiMk1Ot906wBPhNnh9qIyVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.235.250.0/23
216.236.6.0/23
Signature Algorithm: sha256WithRSAEncryption
62:d1:4d:20:18:6d:fb:c8:68:75:d0:e1:51:20:b3:09:d6:7a:
00:c2:48:1a:cd:cd:44:23:1b:6d:c7:75:c8:b6:c3:6e:a3:15:
52:16:f2:05:67:cb:69:74:2b:0a:ae:1e:57:2b:1b:cf:f1:e6:
ab:b5:09:e0:48:49:21:cb:8a:9e:e3:06:b9:2e:8f:a7:48:bb:
57:79:4e:1a:e6:9a:a6:49:c3:dc:8c:24:29:de:de:86:9f:d7:
97:ae:58:ce:6d:c2:80:f8:f0:1a:9a:13:07:5e:9e:e3:81:1a:
94:90:49:b9:77:c2:a6:7e:78:64:a8:4c:99:63:1e:bf:96:13:
fa:22:81:e6:33:03:cf:a5:22:f2:09:98:af:d4:24:2f:e2:cc:
b3:d2:36:e1:6f:a7:0d:24:86:c2:54:5a:77:12:93:71:89:0e:
42:06:1c:f3:2f:0e:ee:f5:a6:ca:3b:bc:2c:12:41:f3:c3:4b:
01:a7:7c:b4:01:ba:3f:0c:e0:64:31:fc:fc:7f:90:f6:93:2b:
2f:43:16:91:84:ba:a9:17:6f:dd:5f:57:62:77:11:8a:5f:32:
a3:39:98:57:1d:02:c0:19:61:58:38:65:f4:19:f6:84:4e:4f:
6d:56:cb:57:1f:24:73:43:6c:aa:e3:29:e8:ba:c7:4c:35:99:
20:6c:13:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:21 2026 by rpki-client