Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/uNi1GWE-vm98aOz8PbUTScKWUd0.roa
File: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (raw, json)
Hash identifier: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=
Subject key identifier: B8:D8:B5:19:61:3E:BE:6F:7C:68:EC:FC:3D:B5:13:49:C2:96:51:DD
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019EE8AE76F071FC43943B0E83DA4F43AD5C
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/uNi1GWE-vm98aOz8PbUTScKWUd0.roa
Signing time: Sun 21 Jun 2026 05:36:48 +0000
ROA not before: Sun 21 Jun 2026 05:36:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1405
IP address blocks: 152.175.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:ae:76:f0:71:fc:43:94:3b:0e:83:da:4f:43:ad:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 21 05:36:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8d8b519613ebe6f7c68ecfc3db51349c29651dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:82:d4:d5:61:c5:9e:ea:d8:0a:44:f8:88:2b:
6e:f4:2b:02:45:79:a9:ad:35:72:f3:93:15:be:ef:
9b:05:2a:a4:b9:4b:3e:c0:90:fa:d5:42:45:8c:19:
33:8f:96:d7:7c:a5:ff:c8:e3:2e:c3:15:ff:85:37:
a9:f7:fb:d9:cd:74:b4:34:d2:4d:82:66:1d:86:40:
31:2c:af:7d:0c:cb:4f:f5:ce:0d:52:71:11:8e:86:
b7:56:cc:f9:4c:a3:4b:4c:ed:36:cc:5f:0f:a6:75:
dd:e5:a8:b9:c6:4f:c3:ef:66:7b:5a:be:dc:64:0e:
78:1a:6a:d9:2c:81:03:56:9c:a1:3f:1a:f9:23:9e:
6f:4e:38:5f:2b:29:de:88:87:50:92:64:b4:00:fc:
31:29:d3:02:b8:1d:7c:3e:79:c4:32:06:85:22:93:
29:75:6d:8c:8d:c6:36:74:ac:6b:ee:f3:8f:82:5c:
9c:c5:a4:ab:db:36:d5:aa:fe:86:82:5f:7a:e9:79:
3e:18:84:b4:db:ec:84:19:d3:6e:b1:82:51:ad:b2:
16:1f:dc:dd:9f:95:32:76:bc:9f:cd:aa:b8:24:cc:
36:be:fe:43:0b:d3:9c:95:8f:5f:8d:d8:9c:c0:f3:
1e:a9:28:f2:a4:d5:3a:69:75:72:92:26:75:59:ce:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D8:B5:19:61:3E:BE:6F:7C:68:EC:FC:3D:B5:13:49:C2:96:51:DD
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/uNi1GWE-vm98aOz8PbUTScKWUd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.175.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e8:73:bb:f3:fd:62:07:a2:a5:59:e6:01:cc:c5:b1:07:5e:
e5:5b:cc:55:26:aa:8b:48:e0:b5:b6:8b:00:a2:bc:fd:cf:e5:
82:92:f0:2e:c4:64:f2:4b:4e:7b:09:a7:3c:ca:ea:4a:ef:6d:
3f:99:2f:b4:14:5d:f7:e9:30:b6:92:5c:5a:2f:fe:bf:c8:d2:
13:4d:96:3f:df:e9:57:32:37:f9:bc:3d:1d:63:45:cc:4c:e1:
a5:ce:2a:5f:26:d5:c3:64:25:d2:a0:d6:85:d4:e9:cf:3b:37:
11:53:bc:e1:d7:4f:c1:d4:ff:44:3b:f6:f8:63:28:53:76:9e:
fd:79:3e:14:44:e1:40:7d:44:3a:59:48:cc:89:8b:85:b1:e8:
7e:64:92:a4:7f:c1:cd:69:e3:40:7b:8b:c8:3d:ce:11:88:e8:
5f:3d:25:66:b0:83:24:4f:6f:e3:c4:62:db:6e:46:22:a4:fe:
ff:5f:66:5c:f1:d2:82:71:ad:87:a2:49:2f:f6:51:d8:c2:63:
67:3d:1a:07:34:58:d0:9c:83:74:7b:f2:2f:50:8a:f7:cc:fe:
67:34:4b:f1:70:3a:1c:a0:8d:85:e5:48:17:e4:9e:73:86:84:
1e:5e:8b:be:24:b4:de:08:6f:98:a9:60:d4:9b:a3:9b:58:91:
f2:d8:31:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:33:38 2026 by rpki-client