Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/Us-vXa-60ckWPiugXWQ_x4JuseE.roa
File: Us-vXa-60ckWPiugXWQ_x4JuseE.roa (raw, json)
Hash identifier: enmgWwaQKeKIKYlxJaQsj5pZN2wULNXLovWU/A2zDQ4=
Subject key identifier: 52:CF:AF:5D:AF:BA:D1:C9:16:3E:2B:A0:5D:64:3F:C7:82:6E:B1:E1
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019FA78911BDA8144462840F3F62CAE800F7
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/Us-vXa-60ckWPiugXWQ_x4JuseE.roa
Signing time: Tue 28 Jul 2026 07:03:25 +0000
ROA not before: Tue 28 Jul 2026 07:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2043
IP address blocks: 185.2.172.0/22 maxlen: 22
185.2.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:89:11:bd:a8:14:44:62:84:0f:3f:62:ca:e8:00:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jul 28 07:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52cfaf5dafbad1c9163e2ba05d643fc7826eb1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:c1:22:0b:94:58:14:85:04:45:78:03:46:
9d:aa:13:91:85:5c:24:ad:aa:18:71:77:9d:19:18:
ad:5e:de:c8:b1:fd:b0:2c:5f:6a:56:b9:7a:b9:db:
9b:53:d2:1e:98:d2:df:3b:cb:69:f6:96:f0:f3:ab:
1a:00:b6:5a:20:3c:e0:3b:b1:b0:7b:5c:1b:82:29:
10:b6:df:d5:78:d4:7c:8e:d8:82:ff:fe:42:ef:8f:
d0:d8:f9:12:3c:51:c1:02:55:78:b6:3b:2a:d5:3f:
1d:2a:89:76:8e:c4:72:b5:cb:e6:f9:04:8d:19:4b:
04:93:f2:59:ac:96:de:b0:b8:c5:13:1d:95:67:b5:
e8:19:b3:2b:b4:b2:f3:16:8b:d2:0c:7d:3a:1d:d7:
f8:bd:9a:cf:ac:3a:1f:b8:8e:6b:68:39:c2:e4:88:
c7:68:52:25:3f:03:c9:0a:cc:0a:05:5f:77:ea:37:
b4:10:a6:af:65:34:8b:7c:98:0e:5c:4d:22:80:33:
44:1d:7d:5a:5d:58:bb:47:a5:fc:7e:71:e0:4a:52:
4b:d9:db:a7:e5:38:31:7d:ec:4d:3b:75:e7:1b:b3:
74:1c:a5:cb:6b:f4:e4:54:5e:8d:ac:46:87:f4:47:
c6:73:c8:39:3f:2d:5b:dc:93:59:89:94:ba:79:5c:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CF:AF:5D:AF:BA:D1:C9:16:3E:2B:A0:5D:64:3F:C7:82:6E:B1:E1
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/Us-vXa-60ckWPiugXWQ_x4JuseE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.2.172.0/22
Signature Algorithm: sha256WithRSAEncryption
67:3b:5b:9f:02:d1:02:d9:d3:51:d2:94:f8:fa:56:e8:32:3a:
41:43:3c:b0:f3:ee:5f:a0:ec:83:16:e8:cb:9a:27:d2:c6:d6:
e0:b5:ca:8a:19:cc:21:37:01:41:de:23:9e:6e:2b:25:6d:cc:
9f:c1:c2:e2:2c:0e:2b:2a:79:da:55:be:67:5b:e5:6c:74:f4:
bd:b9:72:88:0d:35:7c:db:be:23:85:6a:d0:24:98:62:6f:9e:
a2:3b:b0:45:e9:eb:e3:1e:95:cc:39:f1:d3:07:17:ee:af:cb:
03:60:aa:40:a3:62:bb:c9:a1:e5:3d:07:90:e2:40:a6:1e:9a:
bf:7e:34:ec:6e:59:21:55:34:4d:aa:13:80:82:0e:b4:45:5f:
b4:e1:5a:94:eb:91:1b:5a:84:2b:99:51:a4:8f:de:d9:0c:60:
fe:b5:24:e0:32:5c:61:8d:bf:b8:29:f0:99:ea:af:b8:99:49:
02:6f:34:d2:19:3e:c4:7b:36:60:d5:86:4f:ac:88:22:45:a9:
23:1f:87:0f:15:ba:2a:8f:5c:d8:34:84:15:d6:0f:8c:bc:4c:
72:bd:ad:ac:78:0d:05:07:a7:b5:41:c1:ca:ee:8d:7e:3e:33:
a9:c9:60:a2:32:c0:39:f8:eb:ff:73:11:3b:b8:2b:e6:a2:2e:
39:70:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:15:11 2026 by rpki-client