Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/UxsjjV_Gt9-OxRcgz90c19qriuk.roa
File: UxsjjV_Gt9-OxRcgz90c19qriuk.roa (raw, json)
Hash identifier: 3EeDtpjQ6swXAQQE3Mf+vnblA6AQ2AaH7/97p2AeAtE=
Subject key identifier: 53:1B:23:8D:5F:C6:B7:DF:8E:C5:17:20:CF:DD:1C:D7:DA:AB:8A:E9
Certificate issuer: /CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Certificate serial: 019B78A2349BF4DE6D43217C0EED2D6792E4
Authority key identifier: 2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/UxsjjV_Gt9-OxRcgz90c19qriuk.roa
Signing time: Thu 01 Jan 2026 08:17:34 +0000
ROA not before: Thu 01 Jan 2026 08:17:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201598
IP address blocks: 185.69.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a2:34:9b:f4:de:6d:43:21:7c:0e:ed:2d:67:92:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2edffb521ec739ef18265c8cfe7fdf295d87dcf2
Validity
Not Before: Jan 1 08:17:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=531b238d5fc6b7df8ec51720cfdd1cd7daab8ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f1:57:90:15:56:02:94:45:01:31:09:cb:a0:
48:29:11:3a:8d:47:95:22:a1:fc:a7:4b:4b:72:68:
77:ff:6f:cb:33:d4:a7:dd:29:52:98:10:88:6a:fb:
63:fe:a9:36:a7:7f:2a:d0:99:eb:0d:eb:64:ba:72:
c5:60:6f:00:44:c9:1c:d7:11:3a:82:5f:f1:2c:de:
79:bc:bc:e8:cc:1c:e8:f2:5d:be:e4:9e:43:ad:3a:
0b:75:97:8b:81:f2:fc:5d:db:93:3b:6c:9f:6c:af:
95:11:ee:56:d0:da:37:39:ec:27:95:8b:af:6f:4c:
05:f4:3f:e7:90:c3:77:74:b1:37:42:7e:f4:79:e9:
ea:22:c0:9b:60:ea:15:35:44:75:87:1a:c8:c5:59:
84:f1:e4:51:be:13:2b:b8:20:f3:59:d9:84:f3:e1:
93:72:4d:c3:c9:b1:e7:ae:9f:dd:4f:09:95:23:7b:
bf:3c:bb:66:a8:ee:50:5e:0a:8a:aa:8b:6d:2f:0e:
1e:cb:cf:77:59:d5:ed:3c:af:e3:b6:4c:8d:d3:a4:
24:e9:64:55:01:60:4d:76:3c:ca:a7:99:c6:07:86:
e2:9a:d2:1a:2e:f4:69:2e:d8:bd:b5:34:04:66:85:
a8:6f:a3:e1:36:22:9e:2e:fd:d0:16:34:65:b7:be:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:23:8D:5F:C6:B7:DF:8E:C5:17:20:CF:DD:1C:D7:DA:AB:8A:E9
X509v3 Authority Key Identifier:
keyid:2E:DF:FB:52:1E:C7:39:EF:18:26:5C:8C:FE:7F:DF:29:5D:87:DC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/UxsjjV_Gt9-OxRcgz90c19qriuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bb10ef-d240-4d68-80c1-41893c4da061/1/Lt_7Uh7HOe8YJlyM_n_fKV2H3PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.172.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:88:f9:84:97:a4:7c:a6:d3:0a:30:d2:eb:61:45:0f:1b:6c:
6a:08:0d:d0:9e:20:ec:0e:c0:c9:e5:78:fc:bd:2f:91:c8:9f:
5b:a7:16:87:52:a8:6a:31:e0:34:8b:c2:c1:7f:1d:8f:4a:18:
17:8c:7d:0b:9c:bb:a5:33:22:75:ad:0d:64:31:92:5a:9d:f7:
61:22:e9:fd:fa:df:71:3e:17:1e:90:d1:30:ef:73:60:4b:1d:
ef:22:4a:36:05:ee:fa:d9:67:2e:4a:95:91:6a:47:e7:c8:9f:
d8:ec:8a:34:09:01:86:f2:95:e5:f5:02:21:4e:5d:00:62:92:
75:ed:39:05:08:db:fb:d2:7a:80:01:48:03:01:a9:9f:72:36:
75:92:83:91:1b:57:f7:cd:d3:d1:5a:3d:3c:f5:1e:47:03:b5:
44:c7:9b:9c:68:47:03:16:8b:e0:13:b7:94:5c:60:d2:a4:c8:
e0:f3:5a:cd:1d:54:de:51:d9:13:e0:27:28:89:63:9d:34:4b:
c9:bc:de:4f:60:a0:c7:75:eb:91:4f:05:e2:89:e5:9a:15:bf:
04:a0:cf:42:a9:ef:4c:58:4b:ee:b9:bf:c5:9b:bf:c4:83:a7:
ea:e5:4d:bf:35:f0:19:64:20:c9:e1:a9:23:36:67:6f:29:c2:
f3:93:d5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:46:16 2026 by rpki-client