Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/uLo6x7SJk9wOtQLSFAY4f7hFxBQ.roa
File: uLo6x7SJk9wOtQLSFAY4f7hFxBQ.roa (raw, json)
Hash identifier: EVjVOvMI09rz5m5Xlhgeyz/FkYIqawCnTEaNdy+7Z4Q=
Subject key identifier: B8:BA:3A:C7:B4:89:93:DC:0E:B5:02:D2:14:06:38:7F:B8:45:C4:14
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A0A552932277F5B5FC2975CDE5EDD7A23A
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/uLo6x7SJk9wOtQLSFAY4f7hFxBQ.roa
Signing time: Tue 15 Sep 2026 13:47:27 +0000
ROA not before: Tue 15 Sep 2026 13:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 80.86.218.0/24 maxlen: 24
80.86.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:52:93:22:77:f5:b5:fc:29:75:cd:e5:ed:d7:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 15 13:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8ba3ac7b48993dc0eb502d21406387fb845c414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e1:94:78:83:c9:c2:b3:a1:ed:df:b2:0c:86:
8c:90:2d:bc:65:00:de:2a:25:86:4b:ed:a2:75:1e:
46:a7:0b:11:1e:d4:28:8c:b9:08:d7:f2:c3:b6:17:
58:e9:a5:ea:ec:72:a3:98:05:22:14:cc:9a:ef:07:
7b:24:a1:16:63:8b:6c:32:9e:77:d3:0d:f2:63:98:
22:22:a6:36:82:3a:1b:5c:d8:05:e7:51:82:4f:7b:
01:11:5c:a4:23:77:65:ce:b4:a4:cd:a9:a8:4b:9e:
50:2e:0c:8f:8b:42:38:2f:90:c8:33:14:f3:f5:5d:
cd:fc:58:b7:6e:63:06:0a:7a:49:2c:78:f9:48:1a:
cb:0e:30:72:20:97:59:7c:69:18:84:b1:83:8e:54:
b1:f9:8e:83:2a:d0:21:b3:75:66:b1:69:4a:63:37:
d8:42:67:5f:af:de:95:f2:8b:94:eb:b0:9a:b1:84:
62:bc:79:c0:c1:46:69:6f:c6:6a:af:20:4a:e5:22:
1f:92:00:d4:49:59:83:41:82:dc:96:d4:9c:ef:34:
38:e2:4b:c4:61:c5:6f:4f:3f:93:05:27:9b:5a:f9:
7b:69:62:69:e8:53:d6:34:15:fe:bd:f8:39:f5:91:
6f:73:5a:cd:50:51:32:71:3a:0c:2d:31:b4:8a:0b:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BA:3A:C7:B4:89:93:DC:0E:B5:02:D2:14:06:38:7F:B8:45:C4:14
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/uLo6x7SJk9wOtQLSFAY4f7hFxBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.218.0/23
Signature Algorithm: sha256WithRSAEncryption
72:1f:5f:1a:96:48:df:71:c7:6a:da:ff:70:01:4f:69:cf:76:
ca:a1:fa:29:60:e7:13:6d:71:b4:71:4f:c4:50:c5:89:cf:d2:
60:ce:13:2d:20:e8:e5:a0:aa:78:60:dd:ba:b7:b0:83:84:d5:
8f:a6:64:6d:bb:0b:16:22:15:8a:92:2b:ee:ff:4a:7e:b4:2a:
2d:e0:03:5d:ca:56:b8:a2:2e:a4:29:6a:43:bd:50:da:1c:50:
c2:e8:eb:f7:90:db:9f:e2:f5:da:b3:85:44:c2:de:59:ed:86:
6b:31:3f:01:55:5b:b8:3d:3b:4e:58:d2:29:74:f6:c1:80:4f:
32:4f:66:75:6f:c2:e0:0e:53:7d:7d:4b:70:1d:7c:00:7f:60:
ad:77:eb:b1:19:c5:db:06:3d:15:0c:f0:f3:7a:39:c2:35:6b:
bc:e4:50:74:0b:e2:e7:bd:cb:ce:40:bf:87:dc:be:7d:e5:f9:
30:de:b0:46:f5:2b:96:db:4c:a8:cf:55:d1:65:b0:f3:a9:f4:
18:02:88:50:a3:3f:73:29:f5:2c:33:9d:06:df:d3:7d:77:de:
e7:ec:07:47:74:25:ad:af:58:56:62:9c:af:ad:21:30:91:68:
67:5f:37:84:e8:1e:fe:e7:6d:51:c1:0a:8f:74:0d:91:e6:71:
37:b3:58:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:07 2026 by rpki-client