Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/Unh6jdcSJxudNFyv1JxZ0OwDByI.roa
File: Unh6jdcSJxudNFyv1JxZ0OwDByI.roa (raw, json)
Hash identifier: ZP3ianjjsAEeUKwTMzmvqvt0Yzwm5Qrx7Exl6hWMZbI=
Subject key identifier: 52:78:7A:8D:D7:12:27:1B:9D:34:5C:AF:D4:9C:59:D0:EC:03:07:22
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01A023E8651B6B8668D3240840E34BFC43C8
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/Unh6jdcSJxudNFyv1JxZ0OwDByI.roa
Signing time: Fri 21 Aug 2026 10:40:27 +0000
ROA not before: Fri 21 Aug 2026 10:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.18.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:e8:65:1b:6b:86:68:d3:24:08:40:e3:4b:fc:43:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Aug 21 10:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52787a8dd712271b9d345cafd49c59d0ec030722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:4a:8e:7d:e8:ed:ae:ad:bd:6a:2b:28:15:
c5:ab:94:5a:d8:6d:9f:d3:a9:ad:4e:a4:4d:e3:8e:
96:32:f2:07:74:c1:e2:2c:73:11:7b:35:00:b4:2d:
e0:0f:4c:04:75:61:dc:d7:e0:15:75:95:fe:2d:4d:
8b:1f:68:2b:9a:de:e2:be:3e:d2:3d:8d:d0:85:61:
ca:08:34:66:54:ff:07:36:f1:54:66:f5:2a:3a:b6:
5a:ef:98:02:fd:04:38:f5:c2:50:f4:77:e0:73:86:
47:c8:98:d0:14:fb:18:d5:b4:40:c3:12:bb:d0:0b:
20:ca:dc:2b:5e:6a:f5:30:5b:06:ef:51:36:7b:92:
f3:8c:fd:75:6e:58:b7:ba:8c:62:af:db:61:61:bf:
fb:40:59:ef:87:d7:41:47:4d:1b:80:e3:19:93:66:
9e:03:c0:d3:61:6c:ff:83:fc:ef:63:94:02:a8:df:
36:66:a2:91:4e:6f:1e:d3:ca:d1:29:da:ad:cb:14:
4b:3f:0d:fc:cd:c1:38:48:dd:8d:20:bf:82:79:fa:
4c:c7:80:b5:2c:c8:e8:da:09:80:f0:92:32:9f:7a:
47:18:0b:08:27:b2:20:ac:b2:b8:19:53:f4:2c:e0:
c9:ca:ab:1b:57:1d:bb:8e:5d:17:45:61:fe:8c:a7:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:78:7A:8D:D7:12:27:1B:9D:34:5C:AF:D4:9C:59:D0:EC:03:07:22
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/Unh6jdcSJxudNFyv1JxZ0OwDByI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3e:15:fb:58:68:15:f7:29:de:8a:41:18:aa:32:f8:7a:cd:
3b:4f:c2:15:c8:f1:83:93:d6:0c:18:07:37:7c:ee:dd:31:d3:
79:da:ff:1a:4b:57:2a:73:60:fa:b9:16:16:c3:fe:42:76:f5:
3a:31:02:69:76:ab:ac:8e:de:3a:b6:88:aa:dd:6d:04:f7:8f:
f9:d1:24:43:49:41:fd:2f:82:89:97:bc:e8:0c:e6:a3:06:a0:
6c:d1:0e:d4:14:92:a2:a7:37:c8:7e:0c:b6:9d:15:e9:6c:9b:
20:97:55:80:1e:65:cc:7a:83:3a:97:cc:f9:3c:0f:2e:41:12:
d3:22:4f:70:17:22:36:26:24:6a:1e:0a:ef:e6:1a:df:e2:c3:
87:07:e3:13:6a:bb:f0:6b:3a:07:65:7b:8c:a4:a3:1e:10:23:
9b:73:be:0f:a8:ad:86:46:aa:c6:81:dd:f6:6d:ca:b3:cd:d6:
4f:3e:72:44:36:82:e9:bf:61:9a:9f:8e:b8:0f:b1:7b:fd:40:
1c:46:6c:94:fa:9e:18:19:b8:15:fc:36:42:93:3f:a2:91:ff:
42:c6:ed:ca:dc:28:be:23:33:0f:81:49:e4:55:fb:ff:62:f4:
25:78:76:0a:a0:f1:a6:d9:76:5a:e2:ef:24:1a:0c:6d:b3:1b:
50:7c:7d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:52:01 2026 by rpki-client