Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/U4iY_EBIGO5hlE123ugs35GoDJ4.roa
File: U4iY_EBIGO5hlE123ugs35GoDJ4.roa (raw, json)
Hash identifier: YgfPtvAqfZtlVl/ftPu/W8yJoOqxxIJA1b+xRry2Q9Y=
Subject key identifier: 53:88:98:FC:40:48:18:EE:61:94:4D:76:DE:E8:2C:DF:91:A8:0C:9E
Certificate issuer: /CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Certificate serial: 01A18CC4E19B50873A24B265C7C4FB0A5804
Authority key identifier: 0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/U4iY_EBIGO5hlE123ugs35GoDJ4.roa
Signing time: Fri 30 Oct 2026 12:24:35 +0000
ROA not before: Fri 30 Oct 2026 12:24:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 185.73.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:c4:e1:9b:50:87:3a:24:b2:65:c7:c4:fb:0a:58:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1d5b9d88b579d0ddf7c21cb3d387d61ea516c1
Validity
Not Before: Oct 30 12:24:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=538898fc404818ee61944d76dee82cdf91a80c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:bf:4b:47:78:93:4c:a6:21:8d:7c:3b:75:
e9:a8:3f:79:fb:32:23:3f:77:c1:ec:2b:5c:a4:7c:
a3:5c:30:23:4b:ea:38:4f:41:bb:ca:05:aa:9a:33:
d2:6f:b5:45:49:3f:16:ed:d9:cf:35:3e:51:38:c7:
a8:17:c0:d3:a5:74:85:3f:fb:3d:66:00:29:b2:ae:
d0:ef:18:24:69:c9:8e:f8:51:b2:20:88:c6:98:c6:
d2:0d:e4:ac:3b:b5:ac:09:ae:b8:31:c6:e2:7f:38:
da:6e:fc:ac:d1:2c:43:5d:49:18:30:6c:8b:eb:7a:
07:07:ad:ce:60:96:c1:22:01:96:68:2c:22:92:28:
59:25:6f:fd:78:8d:91:99:07:e5:14:ba:66:e2:d7:
ac:14:5e:c1:2e:eb:bd:fa:c9:fd:62:97:07:06:71:
34:a2:d0:e8:17:70:f2:cd:c4:be:8c:c7:1e:4e:f5:
8e:96:25:b9:d2:96:7e:63:83:8e:6d:9b:88:f7:fd:
ee:2c:4d:4c:16:d7:5a:4f:e4:1b:9a:e1:aa:a6:e1:
84:80:73:90:28:b5:8a:2f:04:5a:58:35:0d:17:9b:
f5:3c:7d:e7:e6:3d:77:c3:f4:0e:72:11:66:b9:96:
ad:72:5d:b2:e3:4f:bc:ea:e2:4a:a7:be:96:64:eb:
ba:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:88:98:FC:40:48:18:EE:61:94:4D:76:DE:E8:2C:DF:91:A8:0C:9E
X509v3 Authority Key Identifier:
keyid:0F:1D:5B:9D:88:B5:79:D0:DD:F7:C2:1C:B3:D3:87:D6:1E:A5:16:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dx1bnYi1edDd98Ics9OH1h6lFsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/U4iY_EBIGO5hlE123ugs35GoDJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/909975-4e86-4478-b81e-72df6fedd748/1/Dx1bnYi1edDd98Ics9OH1h6lFsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.12.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:15:cf:4a:ce:d3:0d:b6:e2:cb:3d:e0:96:fc:4e:bc:dd:73:
b0:99:66:68:8a:c5:0f:6d:0f:76:81:64:3e:8d:8d:60:e6:ab:
73:5f:29:b9:d0:89:7d:96:43:f9:e5:b8:7b:0c:a7:36:40:e5:
33:c7:ab:0b:d4:7b:b5:13:34:a0:5b:64:fe:53:28:04:1d:0b:
5d:cd:03:05:8d:3d:1e:79:43:f1:39:a5:fd:50:3c:59:0d:bc:
df:78:ab:65:fe:44:59:05:08:9a:78:37:9c:c7:8a:0a:73:1d:
c4:be:70:95:10:dc:10:0f:ad:10:fc:7b:45:30:ed:c5:a0:96:
78:39:3c:7a:8d:be:4f:ac:79:c3:c5:cf:20:1e:07:e7:14:e4:
28:66:e5:f8:c6:c8:d4:fd:56:3f:17:95:16:d7:6c:97:c0:8d:
ab:73:db:74:a0:19:f3:67:30:a8:7c:22:7d:83:68:fc:09:54:
30:ef:4a:dc:ff:f5:28:4a:65:18:43:40:bc:ae:8d:79:16:31:
00:5b:5c:4d:ad:be:c7:b5:b7:a3:7c:6c:6f:b4:ff:fd:ae:41:
43:f8:9b:51:7c:36:b0:d6:7e:f1:1d:c2:73:4d:76:02:32:7f:
ac:9e:94:86:bb:30:d0:66:ba:62:4f:a9:3e:c5:7a:a5:65:c7:
f3:01:47:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaGMxOGbUIc6JLJlx8T7ClgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMWQ1YjlkODhiNTc5ZDBkZGY3YzIxY2IzZDM4N2Q2MWVh
NTE2YzEwHhcNMjYxMDMwMTIyNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzg4OThmYzQwNDgxOGVlNjE5NDRkNzZkZWU4MmNkZjkxYTgwYzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqq/S0d4k0ymIY18O3XpqD95+zIj
P3fB7CtcpHyjXDAjS+o4T0G7ygWqmjPSb7VFST8W7dnPNT5ROMeoF8DTpXSFP/s9
ZgApsq7Q7xgkacmO+FGyIIjGmMbSDeSsO7WsCa64Mcbifzjabvys0SxDXUkYMGyL
63oHB63OYJbBIgGWaCwikihZJW/9eI2RmQflFLpm4tesFF7BLuu9+sn9YpcHBnE0
otDoF3DyzcS+jMceTvWOliW50pZ+Y4OObZuI9/3uLE1MFtdaT+QbmuGqpuGEgHOQ
KLWKLwRaWDUNF5v1PH3n5j13w/QOchFmuZatcl2y40+86uJKp76WZOu6dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOImPxASBjuYZRNdt7oLN+RqAyeMB8GA1UdIwQY
MBaAFA8dW52ItXnQ3ffCHLPTh9YepRbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUt
NzJkZjZmZWRkNzQ4LzEvVTRpWV9FQklHTzVobEUxMjN1Z3MzNUdvREo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC85MDk5NzUtNGU4Ni00NDc4LWI4MWUtNzJkZjZmZWRkNzQ4
LzEvRHgxYm5ZaTFlZERkOThJY3M5T0gxaDZsRnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUkMMA0G
CSqGSIb3DQEBCwUAA4IBAQDXFc9KztMNtuLLPeCW/E683XOwmWZoisUPbQ92gWQ+
jY1g5qtzXym50Il9lkP55bh7DKc2QOUzx6sL1Hu1EzSgW2T+UygEHQtdzQMFjT0e
eUPxOaX9UDxZDbzfeKtl/kRZBQiaeDecx4oKcx3EvnCVENwQD60Q/HtFMO3FoJZ4
OTx6jb5PrHnDxc8gHgfnFOQoZuX4xsjU/VY/F5UW12yXwI2rc9t0oBnzZzCofCJ9
g2j8CVQw70rc//UoSmUYQ0C8ro15FjEAW1xNrb7HtbejfGxvtP/9rkFD+JtRfDaw
1n7xHcJzTXYCMn+snpSGuzDQZrpiT6k+xXqlZcfzAUcE
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:31:02 2026 by rpki-client