Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/uhIeWw3BbuGplUKs0JQ2ZN8FfS8.roa
File: uhIeWw3BbuGplUKs0JQ2ZN8FfS8.roa (raw, json)
Hash identifier: Dx4E0nAtyuhWCGLVU1NN0JhPf6iLG/i/ORLUavPZfEY=
Subject key identifier: BA:12:1E:5B:0D:C1:6E:E1:A9:95:42:AC:D0:94:36:64:DF:05:7D:2F
Certificate issuer: /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial: 019CCD0E393B77D4882E3BD6240071526DD5
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/uhIeWw3BbuGplUKs0JQ2ZN8FfS8.roa
Signing time: Sun 08 Mar 2026 10:46:27 +0000
ROA not before: Sun 08 Mar 2026 10:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208570
IP address blocks: 195.69.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:cd:0e:39:3b:77:d4:88:2e:3b:d6:24:00:71:52:6d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Validity
Not Before: Mar 8 10:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba121e5b0dc16ee1a99542acd0943664df057d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:50:c3:32:ec:9d:52:6b:eb:0e:79:2d:27:
0a:cf:de:4c:29:79:9c:cc:bb:d7:16:eb:8d:b8:86:
34:e0:73:78:bc:25:1b:32:57:55:4c:48:12:e3:76:
c9:bb:1b:b2:2d:d5:c4:06:2a:cd:db:5d:d4:97:06:
09:fe:de:e7:9a:2f:69:92:95:5b:45:38:3a:11:91:
13:db:ba:85:5d:4a:7e:4a:e4:73:77:62:7d:d9:55:
ab:58:72:93:36:8d:4f:14:03:fe:1e:27:b7:22:73:
42:f3:a7:b8:0a:73:44:cc:e9:cd:ad:27:32:b2:30:
ff:15:b4:85:df:5b:ac:94:3e:4c:7c:4d:7e:48:a4:
2b:35:63:02:3d:ed:8c:46:b5:43:d2:58:61:18:2c:
c3:9e:bb:74:74:2d:3b:76:e1:05:ee:a5:35:3e:90:
7a:e6:f9:53:52:bd:6c:4d:17:be:76:6e:1a:8f:7c:
dc:d5:ec:a3:f8:76:43:b3:6e:e0:2c:ac:3b:fd:8f:
53:8a:02:59:15:ff:cc:d3:03:9b:6e:cb:db:af:31:
4d:f2:7c:ac:d2:29:61:5e:5e:7f:c8:1e:80:ce:04:
b6:59:30:c2:b6:42:50:6a:c3:81:66:d1:46:82:a6:
13:dc:5e:02:ef:16:96:9d:27:af:19:6e:5f:28:39:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:12:1E:5B:0D:C1:6E:E1:A9:95:42:AC:D0:94:36:64:DF:05:7D:2F
X509v3 Authority Key Identifier:
keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/uhIeWw3BbuGplUKs0JQ2ZN8FfS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.229.0/24
Signature Algorithm: sha256WithRSAEncryption
99:2e:61:e0:88:cc:54:28:bf:9d:d7:59:bc:d4:ac:ad:cc:b8:
2a:bf:a8:2d:73:d3:a8:3b:c9:a1:a3:c9:5e:16:42:f3:91:f2:
6d:fb:52:8f:9d:ec:3f:f0:00:11:df:9d:a1:6e:0e:cd:9b:3e:
5f:0e:ab:1c:82:0e:b5:26:4b:b1:71:02:bf:a5:b6:13:43:3d:
c2:de:9d:20:78:41:b6:c4:c3:0c:07:c1:19:75:a0:5a:d2:5f:
21:91:0b:fa:67:8f:35:38:f0:64:7e:67:ce:57:6e:e1:9d:9d:
43:8f:56:a8:cc:14:28:1c:85:12:11:4b:d0:82:9d:e2:6e:1a:
d4:63:a5:36:b4:c7:a5:94:fe:42:fe:f3:b8:3e:1a:52:f5:32:
40:8d:17:30:80:b1:a1:24:69:58:50:14:b1:c3:8f:07:51:54:
aa:3d:ef:5f:84:9c:e0:e1:22:99:14:01:89:09:83:47:3f:57:
78:11:45:6e:52:5d:d7:4a:8d:40:30:05:5e:b2:78:d7:39:bf:
a3:1a:ab:d4:65:d5:32:71:7a:39:c3:5a:04:6e:11:b1:da:fe:
f2:ef:73:5a:b9:ef:0b:8f:de:18:8b:52:94:29:9f:22:fa:7e:
81:af:9e:15:37:0f:f1:51:c8:56:06:bf:20:62:c6:3a:1a:df:
3a:d4:c6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 01:43:13 2026 by rpki-client