Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/uEbtYSs7oUq_8j5NRnUv73UK0pM.roa
File: uEbtYSs7oUq_8j5NRnUv73UK0pM.roa (raw, json)
Hash identifier: Poyt01XokZPztwUN5koWpemxrQ6OZRRxyOTp253pBsA=
Subject key identifier: B8:46:ED:61:2B:3B:A1:4A:BF:F2:3E:4D:46:75:2F:EF:75:0A:D2:93
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 019C76372B5AC724459C9F723FEE6E3C26BD
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/uEbtYSs7oUq_8j5NRnUv73UK0pM.roa
Signing time: Thu 19 Feb 2026 14:04:12 +0000
ROA not before: Thu 19 Feb 2026 14:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64439
IP address blocks: 185.142.129.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:76:37:2b:5a:c7:24:45:9c:9f:72:3f:ee:6e:3c:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Feb 19 14:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b846ed612b3ba14abff23e4d46752fef750ad293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:1b:19:4e:03:13:20:de:07:32:49:3f:69:
89:76:63:12:4f:2a:cb:7a:5a:18:06:0d:ea:70:89:
a5:03:37:ba:f2:d8:39:86:29:a0:9b:52:53:62:0d:
5f:97:09:58:48:1f:aa:db:fe:81:07:2e:62:58:b5:
b5:ca:53:3e:24:27:cc:7b:f3:6b:9f:b8:5d:22:0b:
59:c6:67:fa:10:33:61:21:36:50:97:2b:09:b9:b1:
47:eb:bb:62:ea:03:6d:ba:70:81:fd:fa:41:3b:d0:
dc:31:75:2e:35:b4:80:bb:20:fd:a3:4d:6b:21:24:
8d:b1:42:cb:28:2b:9f:c3:77:b7:08:da:c2:9a:c3:
be:2b:42:79:fb:d5:5f:17:eb:b5:f0:37:0c:ee:a7:
b0:32:d3:2c:35:d9:5f:fd:29:37:69:a2:c5:74:de:
2b:02:9a:d3:7e:57:c3:98:40:f9:04:b6:d9:17:fd:
f5:b1:70:c9:6c:e0:6c:9e:74:03:48:0c:c3:21:14:
bf:8f:8b:24:2a:4f:69:7c:b3:91:f9:85:c2:da:be:
19:a7:55:6a:cf:d1:9d:d3:5f:c7:8a:24:be:2f:1a:
ef:9b:1e:ee:a1:3f:87:68:54:2c:01:ec:c4:06:6e:
1c:72:c2:8d:a7:a5:0d:e0:52:38:47:85:6e:b0:84:
5e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:46:ED:61:2B:3B:A1:4A:BF:F2:3E:4D:46:75:2F:EF:75:0A:D2:93
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/uEbtYSs7oUq_8j5NRnUv73UK0pM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.129.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b8:5e:e4:a1:22:d4:d2:3a:39:b5:84:83:49:12:6e:29:97:
4f:58:78:2c:58:24:e7:6d:4b:ee:0b:eb:ef:5e:ac:ed:c5:5d:
e2:44:be:c7:b5:79:53:bf:2b:9e:29:ad:d3:d9:2d:12:83:d1:
e0:f4:bb:a9:c8:de:03:64:de:74:d4:32:a1:e6:2f:43:0b:37:
e4:22:3d:b3:49:b6:33:a8:6b:ec:57:ac:d4:78:c4:85:d3:19:
ba:5f:90:2d:71:d7:97:6f:16:52:71:53:6e:16:92:a7:ee:9e:
25:e7:f1:89:28:7e:7f:b7:22:58:08:35:76:b9:b1:c9:ee:9f:
87:d1:56:79:bf:0d:6e:c2:8e:78:5f:7b:47:ef:61:1d:33:f4:
3e:fb:e8:1e:35:3b:98:3f:1b:29:f0:f8:64:e0:63:57:6e:21:
06:c9:09:1b:96:43:d8:87:e0:43:89:95:a1:bd:0c:a9:e8:72:
49:84:a8:43:dc:50:e9:7a:65:4b:df:35:5b:af:6b:1f:e0:9d:
9a:64:4f:f3:80:99:00:4d:7d:60:5e:41:1f:d7:58:5c:b1:b7:
16:96:aa:20:2d:a4:10:1c:8d:fe:98:f8:c4:a4:fe:ef:7f:c1:
fb:45:0f:e0:6c:ba:de:22:da:9d:ac:8e:21:2d:94:40:62:10:
ad:cb:79:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:36 2026 by rpki-client