Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ungMj-eLEdzQUUwi8WHlvLGjda0.roa
File: ungMj-eLEdzQUUwi8WHlvLGjda0.roa (raw, json)
Hash identifier: hH/ZD2A/Esj6V7V+kujN4+cb3EEnSPBxEy61AO4Sjmo=
Subject key identifier: BA:78:0C:8F:E7:8B:11:DC:D0:51:4C:22:F1:61:E5:BC:B1:A3:75:AD
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FD1D72AD488412D754FC7144BE7FD8FF1
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ungMj-eLEdzQUUwi8WHlvLGjda0.roa
Signing time: Wed 05 Aug 2026 12:12:47 +0000
ROA not before: Wed 05 Aug 2026 12:12:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197324
IP address blocks: 2a0d:d940:5e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:d7:2a:d4:88:41:2d:75:4f:c7:14:4b:e7:fd:8f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 5 12:12:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba780c8fe78b11dcd0514c22f161e5bcb1a375ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:88:99:e2:0f:47:52:46:34:6a:7e:de:9a:13:
f6:7a:99:d2:7a:5c:c2:bb:00:3f:f8:96:e5:a5:62:
3e:e9:f0:e9:06:db:5f:ab:3c:50:cf:07:54:99:e2:
0c:f4:27:64:a4:7b:c7:9c:26:86:7d:ce:6b:51:72:
45:9e:f4:21:e3:07:ed:8c:31:cc:42:e2:41:89:f4:
18:7d:fb:c0:ae:be:ad:03:66:0e:2b:c4:df:93:cc:
a1:e6:23:54:4c:38:d4:9b:f9:1d:b2:ab:ff:50:70:
8f:f2:3b:c6:cc:31:ed:7b:d4:33:31:65:97:b6:04:
91:3c:ce:2a:36:34:14:d0:73:b9:29:26:d4:4d:49:
64:26:80:12:8d:47:d7:78:f8:c5:65:90:d0:8c:c5:
97:16:ae:a9:76:29:aa:59:df:45:a4:a0:5b:14:54:
58:a3:3b:7e:95:d3:90:eb:7d:0f:1e:ab:8b:cd:09:
95:33:7d:ee:ed:50:b5:a5:bb:5e:24:6e:af:52:75:
07:88:bc:07:00:a1:34:d2:f6:9b:4b:80:a1:5e:b2:
a4:5c:3b:c3:b3:8f:78:50:02:bd:55:ca:da:b2:b8:
05:40:44:56:96:b5:b8:76:30:b6:26:cc:73:b3:04:
a5:f5:4d:d5:15:aa:9c:c8:c0:ce:7a:b1:e3:ce:90:
bf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:0C:8F:E7:8B:11:DC:D0:51:4C:22:F1:61:E5:BC:B1:A3:75:AD
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/ungMj-eLEdzQUUwi8WHlvLGjda0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:5e0::/44
Signature Algorithm: sha256WithRSAEncryption
2c:ac:fc:6d:0f:35:8c:61:e1:02:24:48:ca:19:07:eb:b6:5b:
82:f9:f4:01:23:93:8b:dc:a9:36:a4:f6:57:06:d3:af:74:f0:
fe:ff:53:99:1c:75:83:e8:d6:2c:f3:85:17:df:65:13:45:2a:
64:6c:ab:49:b6:e3:dd:a6:98:ea:e8:bb:3e:d6:51:b5:5f:82:
8c:46:1b:8d:2e:d0:2f:69:92:2a:26:90:41:ac:1a:63:c2:22:
e7:f2:28:a5:c0:13:5c:38:d9:2d:ea:a1:eb:62:4e:25:73:8d:
d7:ef:44:8b:46:b2:ce:16:32:b9:7c:26:95:e8:e9:fc:03:c8:
60:6e:3e:69:b9:8f:43:2c:c4:70:f9:29:fa:82:ed:0b:98:2a:
96:5b:f1:48:f2:93:65:95:32:a3:af:81:23:29:6f:56:a2:7c:
49:3f:d2:6f:04:8f:bf:f2:7d:13:77:aa:59:1d:f9:13:50:09:
41:9a:f6:ed:79:7f:3a:d6:0e:11:78:7d:b8:d7:f3:9c:09:05:
31:d1:50:6d:73:eb:52:f8:45:25:0b:95:ed:09:3a:a3:79:bb:
ae:26:80:21:38:44:bf:9c:54:42:dc:86:92:06:6f:a0:0b:99:
bf:8d:6c:d9:5f:e3:da:df:fb:10:3b:dd:02:4e:5b:a3:79:97:
cc:46:19:9f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/R1yrUiEEtdU/HFEvn/Y/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwODA1MTIxMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYTc4MGM4ZmU3OGIxMWRjZDA1MTRjMjJmMTYxZTViY2IxYTM3NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YiZ4g9HUkY0an7emhP2epnSelzC
uwA/+JblpWI+6fDpBttfqzxQzwdUmeIM9CdkpHvHnCaGfc5rUXJFnvQh4wftjDHM
QuJBifQYffvArr6tA2YOK8Tfk8yh5iNUTDjUm/kdsqv/UHCP8jvGzDHte9QzMWWX
tgSRPM4qNjQU0HO5KSbUTUlkJoASjUfXePjFZZDQjMWXFq6pdimqWd9FpKBbFFRY
ozt+ldOQ630PHquLzQmVM33u7VC1pbteJG6vUnUHiLwHAKE00vabS4ChXrKkXDvD
s494UAK9VcrasrgFQERWlrW4djC2JsxzswSl9U3VFaqcyMDOerHjzpC/rQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLp4DI/nixHc0FFMIvFh5byxo3WtMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvdW5nTWotZUxFZHpRVVV3aThXSGx2TEdqZGEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg3ZQAXg
MA0GCSqGSIb3DQEBCwUAA4IBAQAsrPxtDzWMYeECJEjKGQfrtluC+fQBI5OL3Kk2
pPZXBtOvdPD+/1OZHHWD6NYs84UX32UTRSpkbKtJtuPdppjq6Ls+1lG1X4KMRhuN
LtAvaZIqJpBBrBpjwiLn8iilwBNcONkt6qHrYk4lc43X70SLRrLOFjK5fCaV6On8
A8hgbj5puY9DLMRw+Sn6gu0LmCqWW/FI8pNllTKjr4EjKW9WonxJP9JvBI+/8n0T
d6pZHfkTUAlBmvbteX861g4ReH241/OcCQUx0VBtc+tS+EUlC5XtCTqjebuuJoAh
OES/nFRC3IaSBm+gC5m/jWzZX+Pa3/sQO90CTlujeZfMRhmf
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:36 2026 by rpki-client