Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa
File: Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa (raw, json)
Hash identifier: IInUKYbmU30Zg9l2Ho6956f4Sd0UxMOn19Kx6W9PbjY=
Subject key identifier: 52:4F:83:65:B3:0C:CD:06:28:0B:CB:86:D5:8B:38:67:90:57:E6:EC
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A079E0090068834967698CF4CEA466B314
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa
Signing time: Mon 07 Sep 2026 03:18:40 +0000
ROA not before: Mon 07 Sep 2026 03:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216458
IP address blocks: 216.236.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:79:e0:09:00:68:83:49:67:69:8c:f4:ce:a4:66:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 7 03:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=524f8365b30ccd06280bcb86d58b38679057e6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:68:b8:c1:92:d6:bb:af:9c:a4:9c:18:68:
16:c3:64:92:15:69:6c:98:c4:50:7a:7f:86:fa:c3:
00:b9:5d:44:cd:d8:9d:6b:aa:d7:8d:2b:4a:5f:37:
9f:70:6c:c5:95:8c:6e:ac:a9:a1:15:68:7a:07:96:
ba:6a:64:ca:6e:27:7b:8c:a9:1c:37:24:4b:d6:33:
73:bf:cb:18:0b:5d:f3:d7:aa:b7:c5:5a:94:cb:d6:
a2:24:01:39:fc:d0:2d:41:ef:38:70:8d:a1:99:92:
d3:8b:17:d7:56:fd:dc:12:1b:86:9d:68:d9:5f:f7:
b7:b2:fc:d5:f0:07:d3:c9:7a:25:21:ef:fe:30:cb:
66:1d:ff:4d:ba:76:e5:e1:be:bb:1c:8c:0e:cb:86:
d2:fa:eb:3a:1d:09:cd:7c:82:95:96:d6:96:ba:97:
e4:6b:05:71:16:da:27:7d:71:60:e6:23:c7:54:db:
d4:70:f9:4c:f6:30:32:bb:1a:e8:85:89:b7:eb:36:
bd:32:64:99:f0:1d:18:a2:02:32:d7:ab:d8:11:de:
56:e8:0f:92:9d:01:17:09:9a:e5:29:b7:95:45:1e:
06:f0:c0:e5:f9:f3:8c:27:bc:be:ce:df:34:e9:95:
c2:b8:cd:7f:06:a9:77:74:dd:a8:6c:91:41:0b:72:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:83:65:B3:0C:CD:06:28:0B:CB:86:D5:8B:38:67:90:57:E6:EC
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Uk-DZbMMzQYoC8uG1Ys4Z5BX5uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.8.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:54:4c:9b:0a:86:33:ed:33:7f:81:10:84:63:93:37:02:8c:
5c:36:fa:7e:ea:43:76:42:2f:01:d9:25:71:58:4b:36:6c:b0:
cc:3b:3c:37:aa:1f:43:5d:26:f1:f7:6a:de:9b:81:59:d7:90:
7d:b3:4a:bb:11:96:72:4b:ba:8d:b9:29:7f:50:62:46:ba:c4:
b1:76:fe:bf:62:6d:1e:f9:8d:f4:43:96:b9:92:68:d1:b1:b7:
1a:f2:22:ba:a8:ae:b3:40:54:62:1c:73:92:fd:cc:4b:87:9c:
2e:36:a7:1e:d6:6b:b7:9d:f4:cd:7f:d3:16:2d:8a:f0:2f:1d:
ba:c2:44:9b:b8:02:bb:09:5a:7d:1b:79:3d:34:fb:8e:46:97:
9f:4d:73:8f:d2:01:eb:76:d5:ee:ac:90:65:70:4d:39:9e:72:
ef:71:86:88:66:45:d6:ac:59:cc:91:60:a5:d2:41:86:66:1e:
03:34:ab:94:5b:2b:38:6d:34:f2:dc:3e:96:8b:23:d9:12:36:
e5:15:23:d4:47:8f:aa:4e:b6:5e:ad:79:17:59:54:a7:a0:f5:
f1:b0:1e:93:33:c4:ba:cd:64:c7:65:9b:2d:4e:88:d2:6c:8c:
a6:9f:a9:35:49:d7:f5:d6:1a:59:5f:0c:d4:2b:2b:ed:5e:59:
82:ff:e9:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB54AkAaINJZ2mM9M6kZrMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwOTA3MDMxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjRmODM2NWIzMGNjZDA2MjgwYmNiODZkNThiMzg2NzkwNTdlNmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArExouMGS1ruvnKScGGgWw2SSFWls
mMRQen+G+sMAuV1Ezdida6rXjStKXzefcGzFlYxurKmhFWh6B5a6amTKbid7jKkc
NyRL1jNzv8sYC13z16q3xVqUy9aiJAE5/NAtQe84cI2hmZLTixfXVv3cEhuGnWjZ
X/e3svzV8AfTyXolIe/+MMtmHf9Nunbl4b67HIwOy4bS+us6HQnNfIKVltaWupfk
awVxFtonfXFg5iPHVNvUcPlM9jAyuxrohYm36za9MmSZ8B0YogIy16vYEd5W6A+S
nQEXCZrlKbeVRR4G8MDl+fOMJ7y+zt806ZXCuM1/Bql3dN2obJFBC3KCSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFJPg2WzDM0GKAvLhtWLOGeQV+bsMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvVWstRFpiTU16UVlvQzh1RzFZczRaNUJYNXV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2OwIMA0G
CSqGSIb3DQEBCwUAA4IBAQCNVEybCoYz7TN/gRCEY5M3AoxcNvp+6kN2Qi8B2SVx
WEs2bLDMOzw3qh9DXSbx92rem4FZ15B9s0q7EZZyS7qNuSl/UGJGusSxdv6/Ym0e
+Y30Q5a5kmjRsbca8iK6qK6zQFRiHHOS/cxLh5wuNqce1mu3nfTNf9MWLYrwLx26
wkSbuAK7CVp9G3k9NPuORpefTXOP0gHrdtXurJBlcE05nnLvcYaIZkXWrFnMkWCl
0kGGZh4DNKuUWys4bTTy3D6WiyPZEjblFSPUR4+qTrZerXkXWVSnoPXxsB6TM8S6
zWTHZZstTojSbIymn6k1Sdf11hpZXwzUKyvtXlmC/+lu
-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:34 2026 by rpki-client