Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/Uh0oiZQjo0UO3e-Mr2WGB4KtjRE.roa
File: Uh0oiZQjo0UO3e-Mr2WGB4KtjRE.roa (raw, json)
Hash identifier: Ccy14JDno4QBzwJOw14mjU6aiecksR7Ru2Vj02I4wis=
Subject key identifier: 52:1D:28:89:94:23:A3:45:0E:DD:EF:8C:AF:65:86:07:82:AD:8D:11
Certificate issuer: /CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Certificate serial: 01A1013CE649FD9D0146A8023B57CB4B9516
Authority key identifier: 4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/Uh0oiZQjo0UO3e-Mr2WGB4KtjRE.roa
Signing time: Sat 03 Oct 2026 10:08:50 +0000
ROA not before: Sat 03 Oct 2026 10:08:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56504
IP address blocks: 178.237.56.0/24 maxlen: 24
178.237.57.0/24 maxlen: 24
178.237.58.0/24 maxlen: 24
178.237.59.0/24 maxlen: 24
2a0d:5540::/48 maxlen: 48
2a0d:5540:1::/48 maxlen: 48
2a0d:5540:2::/48 maxlen: 48
2a0d:5540:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 19:43:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:3c:e6:49:fd:9d:01:46:a8:02:3b:57:cb:4b:95:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba9afd21cb8fbe6b850800cd4b49f2562c92ba0
Validity
Not Before: Oct 3 10:08:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=521d28899423a3450eddef8caf65860782ad8d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:6b:01:d8:52:28:d6:fc:5e:0a:74:14:40:
2f:dc:b4:36:6b:e3:ce:ca:30:2a:24:d8:d4:9b:0b:
df:d1:75:ed:1f:82:3b:ff:32:f5:c3:ed:90:74:20:
95:2f:88:e2:0a:61:71:90:2a:87:45:05:93:24:09:
91:0f:ef:0b:39:1f:3e:f5:5a:31:1b:0a:d8:db:3b:
fb:06:4b:fc:2c:89:5b:fb:5d:f6:79:62:91:a4:97:
21:4d:99:52:81:f2:0c:c2:c7:73:d2:d2:97:80:29:
89:59:d4:e2:45:3b:9f:53:40:11:a8:ca:7a:b6:17:
a5:d5:f3:e2:f8:5a:23:1d:aa:c4:62:5a:c3:61:a7:
aa:19:f4:3a:ec:bc:37:89:90:d7:dc:ce:0f:02:ec:
a2:d5:2a:55:79:ba:83:fb:cb:4f:51:b1:47:d8:be:
2f:1b:b1:fc:32:b9:49:bd:51:c6:fa:f9:e1:5b:64:
86:c8:84:a8:13:9e:9d:3d:c3:a5:2f:a2:cd:86:b3:
f0:43:5c:23:f1:16:dd:ec:46:8b:7d:01:f6:0f:ed:
ad:da:c4:1d:4b:f3:d0:95:82:92:60:93:29:3a:a7:
49:44:47:37:c3:1d:4a:81:5c:1a:7f:c1:bf:1d:bc:
59:50:83:13:40:a2:2d:72:f2:e6:08:4c:47:3b:88:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:28:89:94:23:A3:45:0E:DD:EF:8C:AF:65:86:07:82:AD:8D:11
X509v3 Authority Key Identifier:
keyid:4B:A9:AF:D2:1C:B8:FB:E6:B8:50:80:0C:D4:B4:9F:25:62:C9:2B:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6mv0hy4--a4UIAM1LSfJWLJK6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/Uh0oiZQjo0UO3e-Mr2WGB4KtjRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/d5bd39-bea6-447b-83bb-f69622425651/1/S6mv0hy4--a4UIAM1LSfJWLJK6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.56.0/22
IPv6:
2a0d:5540::-2a0d:5540:2:ffff:ffff:ffff:ffff:ffff
2a0d:5540:a::/48
Signature Algorithm: sha256WithRSAEncryption
9c:35:66:54:d2:ba:e0:f1:93:7e:21:75:88:c9:b1:26:0c:e3:
86:54:da:e0:1b:c5:fc:2b:e4:47:6a:a7:39:ef:e7:71:d9:a6:
15:df:5d:98:f7:a1:8a:ec:6b:9c:d1:ed:04:bc:a9:c3:03:95:
b6:b0:35:48:19:6d:87:a7:bc:b4:e5:ec:2c:dd:b0:8c:5b:d2:
84:7d:ee:62:89:64:68:28:14:68:e7:94:9c:10:01:5d:26:99:
6a:42:c6:30:bb:61:0c:16:7a:46:d6:bf:ca:10:d0:19:f3:a7:
c3:13:e7:5d:6f:56:44:df:a2:7a:e5:34:e2:b4:74:27:66:d9:
3c:da:52:98:82:f3:40:d8:1c:c2:5f:1a:4b:e5:0a:57:ee:ec:
a3:39:32:68:46:c1:d7:55:e0:9c:dc:b4:d2:fc:91:91:00:80:
96:07:a1:bb:c3:d3:65:64:29:1d:91:e4:2f:f2:0d:6f:3c:56:
79:11:ad:56:cd:23:1d:16:0c:4e:3d:81:49:34:c7:77:33:3d:
84:57:20:b1:4d:a5:53:46:30:e1:a0:32:e4:ae:f7:39:c9:4a:
f5:d8:db:52:6e:c1:24:1b:8d:6f:6a:17:ef:ab:71:70:b1:73:
e6:c5:c1:4d:1b:7c:e1:83:fd:3c:4f:e4:c6:77:ed:cb:c9:1b:
b3:e7:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 04:43:34 2026 by rpki-client