Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa
File: rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa (raw, json)
Hash identifier: z/3YdmL7lhmSOdD9Jb00nUrqP817x/GBxNytvu/Ui24=
Subject key identifier: AD:42:87:F6:4E:0C:1D:D7:78:63:5C:A9:2D:7D:11:31:CA:E5:27:89
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 01A0C0536A57382AB26ED5DA836764FB307B
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa
Signing time: Sun 20 Sep 2026 19:38:07 +0000
ROA not before: Sun 20 Sep 2026 19:38:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208949
IP address blocks: 185.149.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:53:6a:57:38:2a:b2:6e:d5:da:83:67:64:fb:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Sep 20 19:38:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad4287f64e0c1dd778635ca92d7d1131cae52789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:ee:d9:52:99:52:cb:c9:c3:de:a4:cc:cd:
ad:2f:09:5d:1a:3d:68:ca:8b:71:21:ba:a7:49:4a:
0d:bc:6f:22:af:03:b6:47:9e:9b:25:40:6b:e0:1c:
e3:c8:28:19:f5:b6:f9:e6:3b:5f:5c:63:39:3b:42:
57:80:15:81:f5:ac:8c:b1:8d:15:ab:75:90:fa:07:
46:ac:d7:45:34:83:78:9c:f6:07:9f:38:e7:ca:b9:
cd:df:d8:82:29:e6:d1:28:be:79:ec:f0:ae:14:23:
07:b0:af:6e:b3:1d:82:b1:ac:c9:2e:35:d5:16:2a:
ee:f4:8c:b4:52:1e:52:8b:88:de:4b:5b:35:05:ed:
41:bc:3c:52:33:64:5e:94:01:7d:c1:a5:79:35:74:
72:b9:32:e5:e8:1a:6a:cb:e3:08:ec:bc:4b:73:d1:
e9:0d:96:c7:3e:6a:34:4c:c5:6d:48:72:33:c9:7c:
4c:aa:72:24:2e:2e:3f:fd:d7:17:90:77:7c:03:c4:
52:77:2c:38:c0:75:df:b1:c7:e0:30:18:f0:8e:24:
c8:9d:d3:8c:b4:ee:64:b5:2e:77:64:c0:ba:61:08:
c1:44:ea:f7:28:63:04:55:5c:ae:71:01:81:22:fb:
ac:7c:d1:e0:20:a4:53:d0:70:b2:5d:50:77:d8:34:
a2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:42:87:F6:4E:0C:1D:D7:78:63:5C:A9:2D:7D:11:31:CA:E5:27:89
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.233.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f4:8c:a1:a9:7b:86:fd:06:2c:c8:ba:5e:0c:f3:92:16:f4:
ba:5a:2f:27:18:06:0c:96:f6:f0:35:43:52:0d:f4:c3:30:eb:
d8:89:32:13:26:ec:1d:c7:76:2a:44:e5:95:6e:4c:38:a2:fd:
d1:32:f5:4e:41:bd:8b:03:76:1d:82:a5:06:1d:ef:ab:b1:0c:
00:de:e3:0b:f3:b2:c1:ae:1b:b0:ad:7f:68:37:ce:07:e4:a8:
6c:15:b3:62:02:fb:6a:91:de:da:a3:c4:6a:c1:2d:9d:2e:78:
3c:6b:9f:9b:b6:24:0a:a7:79:2e:27:4d:ee:82:80:50:ed:16:
a8:7d:d9:d6:c1:6d:dd:cd:be:83:22:ad:3b:68:38:a9:96:8a:
db:64:53:bb:bc:c2:38:b4:49:6e:82:ef:6d:ec:0f:c0:ce:3a:
fe:92:b3:cd:45:d4:76:ca:fd:e5:91:4f:c5:97:d3:49:98:aa:
67:59:85:c1:e7:f3:05:8b:d4:83:29:19:d8:8d:e6:e8:19:50:
07:4a:be:91:04:ef:dc:fc:9e:6a:e6:b8:60:eb:b5:80:b7:f9:
65:a9:d4:e1:6e:1c:ee:01:e4:b9:9b:bb:e2:3d:22:f0:b0:ed:
7b:ac:d8:a5:f3:ee:7b:56:34:de:8b:2c:9a:88:7a:e0:84:14:
91:93:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:30 2026 by rpki-client