Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1UzfLVZ0wTWQvkI6DWc7upKU8M4.roa
File: 1UzfLVZ0wTWQvkI6DWc7upKU8M4.roa (raw, json)
Hash identifier: 8kg3Vzi7QthSDdATrG9L/uAmFy5KeAuX2dMkiIJcM6g=
Subject key identifier: D5:4C:DF:2D:56:74:C1:35:90:BE:42:3A:0D:67:3B:BA:92:94:F0:CE
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A02342B0DBB4BCCE3690F323E88AB3A6D9
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1UzfLVZ0wTWQvkI6DWc7upKU8M4.roa
Signing time: Fri 21 Aug 2026 07:39:28 +0000
ROA not before: Fri 21 Aug 2026 07:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.232.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:42:b0:db:b4:bc:ce:36:90:f3:23:e8:8a:b3:a6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 21 07:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d54cdf2d5674c13590be423a0d673bba9294f0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ae:10:f8:03:34:e7:5f:6f:42:c6:e6:93:6f:
68:53:a4:28:91:98:c4:9d:e0:7c:13:4f:b5:85:e0:
20:fb:1b:0e:96:bd:8b:6a:17:fe:0b:a4:0b:06:7c:
66:77:81:f2:9f:c4:7c:21:47:f2:9d:41:84:9a:b5:
9f:6c:ed:88:83:dd:5a:a5:3c:60:30:40:2f:b9:c8:
a6:c5:a6:c3:06:00:4f:96:90:3b:2b:60:90:fa:25:
93:37:43:98:55:10:e5:4c:f5:67:b0:ce:05:ff:76:
3e:e6:00:82:14:c0:ae:ff:c7:dd:90:06:70:f3:88:
e6:92:54:de:0f:22:4c:47:47:68:95:74:20:5e:0d:
33:a1:f9:7f:7b:ec:92:e7:aa:90:f2:70:94:9d:c7:
3d:c4:ad:29:23:7a:32:2e:5e:c1:9a:b3:1c:66:b8:
53:20:7a:f7:0a:9b:e3:9a:57:75:7f:56:08:1c:02:
1b:51:c3:b4:58:0c:86:6a:28:45:c8:5c:f6:8f:99:
a4:88:13:89:ae:a7:93:a5:d6:f4:44:c5:82:bd:41:
3f:2c:a7:6d:95:61:00:f2:72:fd:1e:a5:b3:6a:ec:
60:51:ad:b6:02:3e:93:2c:08:3c:53:b1:2e:1d:26:
01:e5:68:b4:33:f4:22:d5:e5:04:7a:6c:8e:24:f5:
b5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:DF:2D:56:74:C1:35:90:BE:42:3A:0D:67:3B:BA:92:94:F0:CE
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/1UzfLVZ0wTWQvkI6DWc7upKU8M4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.107.0/24
Signature Algorithm: sha256WithRSAEncryption
74:ea:f8:e0:34:46:92:da:99:99:75:0c:c9:cd:01:26:7d:db:
65:a4:b7:67:d9:33:e5:d6:eb:96:b4:ec:96:bb:1d:e7:35:f7:
70:b4:fd:60:ce:5f:66:45:9b:c0:a2:03:7e:7b:f3:43:b8:37:
36:18:12:1e:ae:82:f0:4a:ff:a2:64:76:ff:9c:2f:99:07:e2:
fe:c3:1d:57:71:9e:41:5f:ed:c9:99:60:06:8c:4a:fe:8c:59:
68:8c:97:0b:2e:be:c5:57:96:0e:85:7d:f8:e9:d0:13:37:90:
3a:8a:bc:0d:71:d2:5b:4a:58:8d:bb:cd:de:81:ec:d8:c5:e3:
fa:78:0c:91:65:1e:c2:d1:e7:e5:f1:e4:df:fa:72:6d:04:c0:
cb:7e:9b:15:08:c9:89:b8:39:66:dc:07:be:ed:55:6b:ae:66:
37:48:a4:02:26:9c:f7:15:1f:c4:22:99:0a:fa:c5:3f:5d:dc:
18:68:d7:d5:b3:ee:3a:0b:1d:d0:a3:77:2a:b1:b5:e6:88:19:
08:48:14:f3:b1:b5:90:6b:cb:85:75:01:2f:73:45:42:2d:cd:
0b:1d:da:bd:9f:39:0b:e8:5d:fb:5b:ed:7b:00:33:ea:1c:2b:
87:47:d1:45:a1:fa:55:7b:61:b2:0e:5f:a3:72:02:51:27:7f:
34:44:89:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:56 2026 by rpki-client