Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/U9vArcy0YpOB_iqMTyKbcwrLvRA.roa
File: U9vArcy0YpOB_iqMTyKbcwrLvRA.roa (raw, json)
Hash identifier: +u8ovOiThImcmMsR0qMCOkY1PV8NHXu8hOW71e14rb8=
Subject key identifier: 53:DB:C0:AD:CC:B4:62:93:81:FE:2A:8C:4F:22:9B:73:0A:CB:BD:10
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019BF99379F1008A87E1BDF7DB7D00ACCD7C
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/U9vArcy0YpOB_iqMTyKbcwrLvRA.roa
Signing time: Mon 26 Jan 2026 09:12:30 +0000
ROA not before: Mon 26 Jan 2026 09:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40980
IP address blocks: 144.208.192.0/21 maxlen: 22
144.208.200.0/22 maxlen: 22
185.50.234.0/24 maxlen: 24
188.172.199.0/24 maxlen: 24
2a01:aea0:100::/48 maxlen: 48
2a01:aea0:101::/48 maxlen: 48
2a01:aea0:102::/48 maxlen: 48
2a01:aea0:200::/40 maxlen: 40
2a01:aea0:300::/40 maxlen: 40
2a01:aea0:dd3::/48 maxlen: 48
2a01:aea0:dd4::/48 maxlen: 48
2a01:aea0:dd5::/48 maxlen: 48
2a01:aea0:dd6::/48 maxlen: 48
2a01:aea0:df3::/48 maxlen: 48
2a01:aea0:df4::/48 maxlen: 48
2a01:aea0:df5::/48 maxlen: 48
2a01:aea0:df6::/48 maxlen: 48
2a01:aea0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:93:79:f1:00:8a:87:e1:bd:f7:db:7d:00:ac:cd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 26 09:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53dbc0adccb4629381fe2a8c4f229b730acbbd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:9e:88:82:d1:46:d7:27:e9:00:4c:31:21:54:
72:9b:fd:b9:14:07:e1:2e:14:e8:7a:e8:34:c2:07:
f9:43:2f:ac:ab:3e:53:04:f8:e0:e3:8d:bd:e6:c4:
4c:56:ba:c6:34:da:60:20:92:8a:90:7d:3f:ff:75:
39:4a:5c:a7:73:63:cb:df:f4:a6:bb:29:85:bb:7c:
b7:a8:8b:a2:ba:5a:c1:a7:bf:45:a3:da:3a:e4:f1:
01:78:5d:55:e0:7c:5d:15:79:67:28:af:1f:fa:63:
f1:12:df:c4:bd:e1:54:0a:5e:aa:b7:95:48:12:0f:
8e:b3:18:81:3a:dd:cc:83:1e:f8:61:06:d0:d1:69:
7d:0e:c4:18:de:b0:a2:59:ab:96:23:46:74:3a:23:
87:65:d5:eb:3a:48:6e:f4:08:84:a3:2a:1c:b4:60:
f6:fc:a2:9a:88:61:01:96:1d:b2:2c:63:d6:d3:a2:
15:4a:11:d2:c9:20:98:ce:36:22:c9:e1:d6:9f:49:
24:20:ad:98:04:e2:61:40:81:c2:1b:e7:30:48:3c:
e4:c9:be:05:12:78:36:ab:91:1e:dd:5f:e6:dc:84:
ab:e2:0e:18:c1:89:9e:03:67:12:ee:9a:d1:e7:78:
27:96:8a:8a:e0:ed:f7:bb:5a:45:ce:14:c8:43:3b:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DB:C0:AD:CC:B4:62:93:81:FE:2A:8C:4F:22:9B:73:0A:CB:BD:10
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/U9vArcy0YpOB_iqMTyKbcwrLvRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.192.0-144.208.203.255
185.50.234.0/24
188.172.199.0/24
IPv6:
2a01:aea0:100::-2a01:aea0:102:ffff:ffff:ffff:ffff:ffff
2a01:aea0:200::/39
2a01:aea0:dd3::-2a01:aea0:dd6:ffff:ffff:ffff:ffff:ffff
2a01:aea0:df3::-2a01:aea0:df6:ffff:ffff:ffff:ffff:ffff
2a01:aea0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
95:9f:36:d1:72:82:31:b0:5f:04:6f:08:26:f0:dc:9e:38:8a:
84:5d:9b:f4:8b:78:cc:69:ae:1a:fc:65:a4:fa:57:b4:bd:35:
73:d3:7f:0c:a1:57:ef:52:21:cf:53:81:f7:27:7d:de:8c:d8:
da:9a:22:af:1e:06:f6:20:dc:ea:be:13:9f:29:04:81:d3:6f:
24:5b:e1:8f:3c:97:6d:a2:90:ae:0c:48:3d:69:f4:4b:87:1f:
4c:52:ce:78:fe:3c:64:06:fd:2b:9e:2b:bc:d5:cb:e6:38:dc:
6b:23:f3:af:c5:fb:ce:b4:45:a6:5d:62:2d:7a:a1:60:59:1d:
06:33:91:5d:c1:b3:75:00:99:25:c8:93:89:02:78:e1:d1:2d:
2c:39:80:b1:8d:5c:f2:a8:fd:5e:4a:01:95:6f:60:6c:62:fb:
cb:2b:f8:e8:0d:6b:e7:fe:19:9c:5f:77:09:2b:9e:20:52:96:
9e:0b:48:da:3a:3b:3b:9e:73:52:34:60:73:19:60:b5:84:32:
90:66:2c:02:85:92:1d:06:1b:19:73:47:31:49:3b:13:fa:72:
bb:ae:32:bd:9b:4a:9f:fe:4b:dc:74:64:98:85:2b:6f:1a:68:
df:48:99:30:5e:9d:41:7d:18:99:36:52:b7:8c:3d:c3:c1:65:
ac:69:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:20:08 2026 by rpki-client