Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/u5YBErGttrr5_GUXpkR3g3VzJy8.roa
File: u5YBErGttrr5_GUXpkR3g3VzJy8.roa (raw, json)
Hash identifier: ZE6OlUZtXwmD/J5v/xklkEnBngZZGtjN+4EVyvFW8hs=
Subject key identifier: BB:96:01:12:B1:AD:B6:BA:F9:FC:65:17:A6:44:77:83:75:73:27:2F
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 01A0ED36147F885B73B46CF1F987A3943953
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/u5YBErGttrr5_GUXpkR3g3VzJy8.roa
Signing time: Tue 29 Sep 2026 12:48:59 +0000
ROA not before: Tue 29 Sep 2026 12:48:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208693
IP address blocks: 91.132.243.0/24 maxlen: 24
185.185.204.0/22 maxlen: 24
195.234.161.0/24 maxlen: 24
2a00:7420:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:36:14:7f:88:5b:73:b4:6c:f1:f9:87:a3:94:39:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Sep 29 12:48:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb960112b1adb6baf9fc6517a64477837573272f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0c:18:b7:1a:6c:e5:94:e3:50:ca:f2:48:b8:
8e:20:d1:c2:24:64:58:60:99:23:a2:5a:a6:c3:6d:
32:99:8b:64:e2:a7:25:d9:20:2d:07:2d:04:39:ba:
46:e2:58:0f:69:8c:49:43:59:9c:38:3f:2b:0e:36:
0d:39:a8:42:1f:fc:c3:9d:00:e4:15:bc:32:4f:0d:
cf:a3:d5:5e:ae:99:5d:6f:44:f2:b2:b0:cc:b0:04:
10:36:92:ba:8d:d1:b8:49:27:3a:4f:da:d2:eb:e3:
82:98:3f:3e:2c:d7:c9:73:5a:0f:8a:25:52:03:97:
b4:70:cf:27:4b:ec:b9:eb:f0:70:9e:ae:0f:82:0b:
95:79:90:62:91:0e:2f:0c:f5:ea:05:46:8e:99:60:
fa:68:99:bc:c4:61:c5:c8:c6:16:15:86:7c:46:11:
8c:bf:65:75:30:c5:36:b2:73:2e:87:38:08:78:07:
2c:d8:36:b7:d9:34:af:c3:9e:55:3b:9a:5d:30:08:
e5:60:ab:c6:f3:1f:e9:99:1b:c1:df:5a:78:6b:52:
df:c8:74:4b:a3:8e:f3:c8:64:58:3c:bd:4b:2c:fb:
04:84:ee:45:bf:78:80:ce:98:09:93:c3:52:50:c9:
ad:0f:50:4c:a8:61:4d:dc:ba:4f:9b:45:6a:ec:b6:
56:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:96:01:12:B1:AD:B6:BA:F9:FC:65:17:A6:44:77:83:75:73:27:2F
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/u5YBErGttrr5_GUXpkR3g3VzJy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.243.0/24
185.185.204.0/22
195.234.161.0/24
IPv6:
2a00:7420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
0d:14:2c:10:6d:c5:e5:61:1b:0e:09:f4:42:6a:c6:25:c0:ac:
81:78:98:ce:6b:90:78:32:6e:4e:d4:d5:44:5a:23:d4:e5:eb:
dc:e7:2e:d9:08:fd:69:ab:b9:8c:d3:cc:e1:e8:c4:de:3e:f3:
5b:80:d3:4e:37:49:6e:9d:0f:04:09:c8:95:7b:d5:d5:f7:b1:
24:9b:ad:fd:f9:91:ba:4c:4e:51:51:73:91:38:a9:e1:1b:24:
84:fa:74:df:0f:57:d2:e6:76:ee:62:32:79:bc:50:6e:21:1d:
0c:62:87:18:c3:fc:62:f8:32:d4:99:38:c1:5c:59:a2:b8:12:
71:15:fb:da:55:c7:e4:ef:cf:bc:4d:2c:72:c9:f2:19:cb:96:
a3:fc:b6:aa:03:9e:61:4e:6f:3d:96:e3:70:cf:fd:d7:c3:53:
1c:90:c4:75:b9:f9:b6:ec:a9:48:65:b6:a3:a5:28:45:5a:3b:
87:d0:55:ac:cb:60:99:61:6c:7b:69:66:66:20:58:97:91:2e:
ed:60:5e:74:99:e4:93:e1:ec:4b:e3:8e:d1:6c:d9:36:93:b1:
9e:72:23:5d:66:b5:56:e7:2f:c1:57:f3:9b:10:b6:5c:27:b6:
46:5a:45:69:ca:5d:e7:c0:56:e9:0d:8c:88:b3:92:f4:37:83:
16:39:b1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:05:07 2026 by rpki-client