Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/I29tnh5zFuEBGOl7uALiyjAvvnU.roa
File: I29tnh5zFuEBGOl7uALiyjAvvnU.roa (raw, json)
Hash identifier: wczJss7Ctnal49eXtKYXNAoNN3MoeRhE2AwTAK7AghA=
Subject key identifier: 23:6F:6D:9E:1E:73:16:E1:01:18:E9:7B:B8:02:E2:CA:30:2F:BE:75
Certificate issuer: /CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Certificate serial: 01A05D418E5C2C25CBF16456F110C0EC7DE2
Authority key identifier: 50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/I29tnh5zFuEBGOl7uALiyjAvvnU.roa
Signing time: Tue 01 Sep 2026 13:56:12 +0000
ROA not before: Tue 01 Sep 2026 13:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218842
IP address blocks: 185.122.182.0/24 maxlen: 24
2a03:9160:80::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:41:8e:5c:2c:25:cb:f1:64:56:f1:10:c0:ec:7d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c63c6d756bb2acd3f1ad92ac415da857e6c98
Validity
Not Before: Sep 1 13:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=236f6d9e1e7316e10118e97bb802e2ca302fbe75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:1d:3b:46:24:63:ae:32:ea:34:f1:c4:58:
aa:cd:21:b5:5e:a8:2f:5e:0c:af:f6:78:27:c2:55:
e5:2a:53:b4:59:3d:68:23:d1:51:e9:80:77:b7:38:
d7:96:69:21:e9:41:d5:39:e3:4a:89:fe:e1:7b:ba:
ec:4c:7a:05:15:63:86:1d:1f:1e:23:84:81:ec:23:
e3:ca:a0:2f:9f:d8:4a:ab:f2:98:8f:a5:07:33:1b:
92:81:79:ce:08:1f:d2:95:5b:c9:4d:65:90:b6:b4:
f1:7f:d2:31:dd:28:17:0b:a1:bb:61:60:8d:e8:0a:
53:50:e4:c4:73:b0:ec:73:03:97:f9:22:a1:e3:e3:
46:35:e7:8b:cd:7f:20:2a:4f:82:f7:a5:a0:49:7f:
2d:10:e9:1e:16:67:3f:03:2c:48:a0:8c:88:e4:fa:
19:d1:bd:ae:fa:54:2f:6e:69:55:9d:9e:6c:47:1e:
47:10:c7:8e:ab:4a:e4:3d:5f:d0:ac:b1:61:8f:b3:
29:64:49:c0:61:18:33:06:0e:e2:8f:4d:e1:34:ac:
1d:b6:b7:3d:2d:9b:07:fe:b7:48:23:a1:a9:fe:e7:
c3:37:96:39:76:db:e6:49:18:fd:ab:12:60:37:29:
ea:c8:49:15:b4:70:1f:e8:97:34:6e:04:59:d9:fa:
6f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6F:6D:9E:1E:73:16:E1:01:18:E9:7B:B8:02:E2:CA:30:2F:BE:75
X509v3 Authority Key Identifier:
keyid:50:9C:63:C6:D7:56:BB:2A:CD:3F:1A:D9:2A:C4:15:DA:85:7E:6C:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJxjxtdWuyrNPxrZKsQV2oV-bJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/I29tnh5zFuEBGOl7uALiyjAvvnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84548d-3f3b-46b9-836c-38a3924776e9/1/UJxjxtdWuyrNPxrZKsQV2oV-bJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.182.0/24
IPv6:
2a03:9160:80::/42
Signature Algorithm: sha256WithRSAEncryption
17:6c:b8:de:0a:56:c3:60:b2:29:ed:3a:dd:30:93:3c:ab:3c:
fa:ec:e0:7e:16:c6:c5:7c:cb:ff:e5:81:da:4e:64:f0:86:a6:
3e:f7:bb:6d:75:5f:32:c6:ec:1d:a0:b6:97:fa:01:ec:13:87:
be:81:28:a0:ed:cb:bd:ea:a2:60:67:d5:76:c9:48:9e:cb:bd:
4d:56:7c:6c:7d:8f:70:53:54:4f:8f:5a:3b:c7:49:da:99:da:
40:70:b8:cc:2f:6c:fc:7f:f6:6f:fd:99:a0:3c:53:6f:e4:b5:
cc:49:09:50:52:94:90:0f:85:44:62:de:96:72:ac:15:c8:3e:
43:1e:44:b5:50:41:e5:c3:2a:b1:34:6f:1d:0a:08:46:b8:b7:
61:2c:1a:c1:c2:03:3f:b1:0c:ed:d5:2b:b6:5a:f2:08:6c:34:
5a:ab:23:ad:ef:cd:6e:b9:af:af:51:d6:31:1c:ec:ea:b0:f0:
06:ed:2d:45:18:e1:d1:5a:d3:b0:38:4b:77:0c:a1:37:33:ed:
c0:40:ad:3e:ac:a3:9c:78:c9:a2:9f:ee:31:9f:41:00:40:52:
d1:00:69:e4:2d:28:87:0f:60:3b:45:7c:ce:24:a7:97:82:9a:
5c:14:32:3d:0b:3c:e1:39:2a:ca:21:81:f6:a5:43:c9:75:44:
52:62:f5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:23 2026 by rpki-client