Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa
File: UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa (raw, json)
Hash identifier: Cw3zsQ2rL48lutA9FZgXYq5rT2dmAUFKZx7J0iHwKB4=
Subject key identifier: 53:24:76:22:FF:D8:91:05:CD:01:FC:4B:C7:B3:27:BE:CD:F6:C2:DE
Certificate issuer: /CN=258f0753c033c1af091866d094264512696ca68b
Certificate serial: 01A08C504A7FEE91CC1E995572ED2A76622D
Authority key identifier: 25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa
Signing time: Thu 10 Sep 2026 17:14:27 +0000
ROA not before: Thu 10 Sep 2026 17:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57608
IP address blocks: 89.234.204.0/24 maxlen: 24
89.234.205.0/24 maxlen: 24
89.234.206.0/24 maxlen: 24
89.234.233.0/24 maxlen: 24
89.234.234.0/24 maxlen: 24
89.234.235.0/24 maxlen: 24
89.234.238.0/24 maxlen: 24
89.234.240.0/24 maxlen: 24
89.234.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:50:4a:7f:ee:91:cc:1e:99:55:72:ed:2a:76:62:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f0753c033c1af091866d094264512696ca68b
Validity
Not Before: Sep 10 17:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53247622ffd89105cd01fc4bc7b327becdf6c2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:fd:2f:a0:b8:e1:02:02:13:ca:ec:76:1f:
c2:01:6f:cb:25:e7:0a:3d:20:4b:49:5b:8f:25:28:
94:df:e0:19:0b:20:66:5d:45:72:84:38:b7:ea:32:
e5:3f:f0:53:64:5d:66:ac:a4:46:88:3b:e5:2a:b7:
f4:e4:57:b7:e2:02:0f:28:1f:b0:40:96:57:21:74:
5e:db:cb:da:84:2b:cb:0f:d5:dd:b2:ef:7a:85:6d:
29:61:b8:0a:c8:b1:b5:a2:91:06:9e:eb:b7:84:8d:
e2:dc:ff:16:d6:60:d2:91:6d:bd:a2:0f:4d:80:9c:
44:9c:b5:82:4d:8a:eb:68:4d:48:2e:2a:c7:59:ae:
47:85:fd:f7:40:80:65:14:15:1c:b9:2b:14:b0:93:
e1:35:a8:a7:06:27:1d:e2:4d:f8:2b:c1:47:b0:ad:
49:fb:e3:16:34:0c:18:2e:98:1e:bc:2c:43:8a:fc:
4b:45:4b:75:b9:40:b4:da:7e:5f:0c:18:a9:6f:7e:
80:f2:9a:cd:34:19:56:c4:bf:5e:10:5e:4b:2d:4f:
90:6a:dd:93:67:52:06:a5:d7:5f:24:a7:28:8f:21:
9a:38:06:ea:42:99:c8:2f:b5:cc:06:bc:d0:6e:ed:
0c:3b:b1:a4:8b:b3:d6:fc:07:08:e5:df:89:7f:ee:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:24:76:22:FF:D8:91:05:CD:01:FC:4B:C7:B3:27:BE:CD:F6:C2:DE
X509v3 Authority Key Identifier:
keyid:25:8F:07:53:C0:33:C1:AF:09:18:66:D0:94:26:45:12:69:6C:A6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY8HU8Azwa8JGGbQlCZFEmlspos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/UyR2Iv_YkQXNAfxLx7Mnvs32wt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3bae87-82eb-451f-8044-2c2f0d24f936/1/JY8HU8Azwa8JGGbQlCZFEmlspos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.204.0-89.234.206.255
89.234.233.0-89.234.235.255
89.234.238.0/24
89.234.240.0/23
Signature Algorithm: sha256WithRSAEncryption
67:97:12:40:22:bd:3a:1a:c9:db:58:76:18:57:fb:f9:a0:fa:
e3:6f:0e:65:60:62:3d:bb:b7:7f:57:45:5e:15:e4:1d:48:c4:
f4:d0:cf:1e:ec:39:0c:9f:9f:77:85:87:97:dc:29:a1:5d:63:
19:df:3e:1f:a1:5c:8f:4d:89:f1:a2:68:7b:3c:85:94:53:7b:
fc:32:9a:01:e2:f4:a0:7e:02:86:b7:d1:64:77:35:a7:c0:25:
5a:00:74:20:30:eb:c6:82:05:de:50:7f:68:ee:13:b3:13:41:
fd:6d:2a:5a:3a:cd:5f:31:cb:e0:6b:d9:e0:c1:2b:e4:0a:5e:
b6:49:aa:17:ef:db:32:36:2c:f3:7d:55:2b:cf:be:f9:3d:93:
d8:e5:ad:41:a0:ac:ac:25:4a:89:c8:76:79:c6:e7:73:df:b0:
8f:4b:ef:45:b3:ca:c0:ee:1d:ef:2f:4a:9f:e9:78:7c:65:ba:
ca:48:6b:b1:8d:f0:09:60:1b:d8:08:ce:4b:61:79:4c:1d:42:
18:e4:e8:0e:3b:43:af:d9:32:22:01:39:1b:b2:d8:4d:2a:82:
86:db:6b:c5:11:bd:5a:59:61:85:69:00:58:ab:52:fc:68:4f:
f5:13:86:59:4c:99:36:19:b1:4e:ad:58:67:47:44:e1:87:f2:
4d:10:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:34 2026 by rpki-client