Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/UV9wXa_Ts52ebQna2HKqoESfLiY.roa
File: UV9wXa_Ts52ebQna2HKqoESfLiY.roa (raw, json)
Hash identifier: m8FM2M+/fUZidu0/R1GyZ9CibzLd/W6RPmzeHqyKjH4=
Subject key identifier: 51:5F:70:5D:AF:D3:B3:9D:9E:6D:09:DA:D8:72:AA:A0:44:9F:2E:26
Certificate issuer: /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial: 019EC0196B56107F599A29D188BA78BE251D
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/UV9wXa_Ts52ebQna2HKqoESfLiY.roa
Signing time: Sat 13 Jun 2026 08:29:11 +0000
ROA not before: Sat 13 Jun 2026 08:29:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402075
IP address blocks: 189.13.152.0/24 maxlen: 24
189.13.153.0/24 maxlen: 24
189.13.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:19:6b:56:10:7f:59:9a:29:d1:88:ba:78:be:25:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
Validity
Not Before: Jun 13 08:29:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=515f705dafd3b39d9e6d09dad872aaa0449f2e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c0:8d:01:5d:75:75:a0:34:36:9f:f6:81:f3:
bc:f4:8c:d7:f3:07:c2:88:55:a4:0b:cd:5b:56:1a:
18:0f:d7:12:f8:26:9f:3f:a7:c8:5b:6d:78:1f:29:
50:83:f8:63:5c:78:b3:a5:9c:d7:4b:ad:64:c5:1e:
2d:8e:d5:ad:78:97:61:1f:da:a1:12:81:02:18:28:
e5:99:4b:03:3b:90:d6:b5:00:aa:fa:cd:b3:ac:83:
91:1e:5a:40:e0:c1:e2:8b:a8:d1:e4:f0:28:83:5d:
f6:6a:81:7b:76:e3:c7:17:3d:f7:26:ce:20:d9:60:
f3:85:2d:4f:ab:8f:31:0e:8b:f3:ae:a2:cc:6c:0d:
96:51:94:6e:a2:82:0e:8f:f3:5e:dd:9f:29:f1:66:
2e:28:a3:ab:ec:f8:dc:2f:3a:24:f0:d3:ce:0f:ff:
48:18:08:be:f3:3a:a9:2d:4d:a0:ab:e9:45:c2:04:
c4:0a:3b:97:52:87:98:53:23:ca:54:e0:c6:6b:14:
a6:01:e4:e1:dd:11:59:9d:82:b9:09:cc:cc:3f:b9:
12:fc:73:a1:34:69:2a:c4:75:6d:ef:5a:b2:7a:1a:
91:a8:44:08:2c:70:55:25:d2:d9:9d:15:3b:2c:b6:
e7:50:88:92:24:a5:06:cd:68:34:31:89:68:a4:92:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5F:70:5D:AF:D3:B3:9D:9E:6D:09:DA:D8:72:AA:A0:44:9F:2E:26
X509v3 Authority Key Identifier:
keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/UV9wXa_Ts52ebQna2HKqoESfLiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.13.152.0-189.13.154.255
Signature Algorithm: sha256WithRSAEncryption
a8:f9:1a:2d:77:66:3a:f3:da:47:d9:e0:b3:af:95:7b:ce:00:
76:ff:ed:66:8b:b9:02:ae:f6:d7:e7:6f:31:cc:92:3a:c2:23:
35:76:ba:55:39:0f:94:4e:03:27:c1:a7:91:d2:88:cc:3f:ac:
b4:75:74:28:da:21:4c:89:db:92:4d:f6:f5:c3:18:90:0e:39:
97:32:2f:1c:81:20:f7:84:af:5a:a9:69:d9:b6:f8:37:9c:36:
36:42:0b:16:dd:b4:69:ee:58:97:b4:1e:66:20:5f:0c:74:c3:
26:53:62:9d:cf:3b:b0:29:da:34:dd:b3:e2:cd:75:31:2c:20:
f2:a9:02:b5:37:dc:e9:76:68:31:8d:87:82:b7:58:e3:dc:fa:
49:a1:59:4d:83:64:78:00:6e:81:d9:86:d5:04:37:b6:1c:95:
f1:2e:bf:80:f9:d5:20:ab:65:a2:54:12:ce:e1:77:00:a3:84:
d1:63:e6:e0:a1:a0:6c:2c:9f:90:f5:bd:24:c3:7b:13:b1:e1:
9b:3d:26:63:ad:e9:4c:43:9e:49:46:49:96:9f:bc:42:69:33:
d3:b4:ff:11:dc:c7:67:33:66:c5:76:26:81:da:95:12:05:78:
ac:b2:0d:61:aa:07:f3:5b:22:74:0e:15:c4:56:49:75:ec:5d:
59:f2:f3:29
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ7AGWtWEH9ZminRiLp4viUdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMGU0NDUxOTViNjRkNzk5YjgyMmU5OTk0Nzc5MmUwY2Fi
MzJiNmQwHhcNMjYwNjEzMDgyOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTVmNzA1ZGFmZDNiMzlkOWU2ZDA5ZGFkODcyYWFhMDQ0OWYyZTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MCNAV11daA0Np/2gfO89IzX8wfC
iFWkC81bVhoYD9cS+CafP6fIW214HylQg/hjXHizpZzXS61kxR4tjtWteJdhH9qh
EoECGCjlmUsDO5DWtQCq+s2zrIORHlpA4MHii6jR5PAog132aoF7duPHFz33Js4g
2WDzhS1Pq48xDovzrqLMbA2WUZRuooIOj/Ne3Z8p8WYuKKOr7PjcLzok8NPOD/9I
GAi+8zqpLU2gq+lFwgTECjuXUoeYUyPKVODGaxSmAeTh3RFZnYK5CczMP7kS/HOh
NGkqxHVt71qyehqRqEQILHBVJdLZnRU7LLbnUIiSJKUGzWg0MYlopJJTXwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFFFfcF2v07Odnm0J2thyqqBEny4mMB8GA1UdIwQY
MBaAFPMORFGVtk15m4IumZR3kuDKsyttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgt
YjdjYTFmNDcyOGQwLzEvVVY5d1hhX1RzNTJlYlFuYTJIS3FvRVNmTGlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9iNTJjNWQtOTViYS00ZGQzLWJiYTgtYjdjYTFmNDcyOGQw
LzEvOHc1RVVaVzJUWG1iZ2k2WmxIZVM0TXF6SzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAO9DZgD
BAC9DZowDQYJKoZIhvcNAQELBQADggEBAKj5Gi13Zjrz2kfZ4LOvlXvOAHb/7WaL
uQKu9tfnbzHMkjrCIzV2ulU5D5ROAyfBp5HSiMw/rLR1dCjaIUyJ25JN9vXDGJAO
OZcyLxyBIPeEr1qpadm2+DecNjZCCxbdtGnuWJe0HmYgXwx0wyZTYp3PO7Ap2jTd
s+LNdTEsIPKpArU33Ol2aDGNh4K3WOPc+kmhWU2DZHgAboHZhtUEN7YclfEuv4D5
1SCrZaJUEs7hdwCjhNFj5uChoGwsn5D1vSTDexOx4Zs9JmOt6UxDnklGSZafvEJp
M9O0/xHcx2czZsV2JoHalRIFeKyyDWGqB/NbInQOFcRWSXXsXVny8yk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:19 2026 by rpki-client