Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uby-gdNMjTMgZ3fcyj9nJsgB8nU.roa
File: uby-gdNMjTMgZ3fcyj9nJsgB8nU.roa (raw, json)
Hash identifier: P701MEx7RwW9j0y6JJfdyGfC1DZQQdfkXjXxF1cqIEA=
Subject key identifier: B9:BC:BE:81:D3:4C:8D:33:20:67:77:DC:CA:3F:67:26:C8:01:F2:75
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019F4050FF47F0AC50BB76740DB09DA63EC7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uby-gdNMjTMgZ3fcyj9nJsgB8nU.roa
Signing time: Wed 08 Jul 2026 06:01:17 +0000
ROA not before: Wed 08 Jul 2026 06:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 163.5.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:40:50:ff:47:f0:ac:50:bb:76:74:0d:b0:9d:a6:3e:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Jul 8 06:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9bcbe81d34c8d33206777dcca3f6726c801f275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:66:73:fd:38:eb:a8:81:60:44:74:f3:5c:9a:
43:85:57:b9:32:e3:73:10:97:2b:42:cf:76:57:97:
c7:39:05:6c:d3:2f:93:e4:6f:3f:9c:e8:72:f4:d7:
05:aa:5b:82:98:c5:28:94:66:f3:cb:c1:38:6f:74:
29:dd:a1:06:68:9a:d8:a3:d4:2c:85:1c:39:ce:1c:
2a:0f:d2:2c:42:fc:5c:a5:85:71:c0:e5:67:97:50:
14:a2:23:47:f6:6f:73:e5:e3:d4:b7:85:b2:8f:3f:
63:e2:f9:8b:87:5c:16:4b:cc:d7:b3:ca:df:8c:f7:
49:a3:87:26:6a:88:78:26:0d:6d:0c:51:95:87:f1:
8f:f9:5a:5d:25:f5:41:4a:20:62:66:80:fc:72:11:
be:77:13:84:f3:ed:65:8b:27:cb:4b:b4:6b:cc:98:
8c:ac:05:24:fc:4f:69:28:9e:85:14:94:8d:9c:32:
38:23:f1:63:b9:5c:a0:31:91:72:37:5a:1f:73:b5:
f8:2c:8c:13:0f:3d:f1:de:b9:00:4d:d1:66:dc:00:
b4:e1:4b:de:26:8e:28:4e:9f:53:ce:d8:74:94:3b:
1a:07:7a:e6:4c:8c:d1:88:0a:20:81:12:d5:af:0d:
03:79:92:3e:6d:7e:18:a1:eb:b3:9e:b7:50:d2:3d:
80:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BC:BE:81:D3:4C:8D:33:20:67:77:DC:CA:3F:67:26:C8:01:F2:75
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/uby-gdNMjTMgZ3fcyj9nJsgB8nU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.243.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:2a:e5:e5:50:41:a3:6e:2f:34:59:9d:b1:ca:02:4e:60:5e:
ce:49:f1:0a:90:de:c4:93:1c:d3:0d:74:f0:1a:79:2e:de:f3:
cd:c9:f0:39:56:20:24:11:43:00:b4:24:b5:a8:4c:e6:01:71:
d4:b9:ef:f1:a7:1b:4d:c7:15:a5:22:d9:48:64:5a:c8:fb:0e:
50:a6:44:ba:5c:fa:12:7d:7c:56:44:9a:a6:0d:67:69:4a:80:
18:a8:7d:91:0d:a5:e3:b3:00:34:47:2c:95:20:37:4f:8d:bd:
da:f7:02:54:0e:39:d8:cd:f1:db:f2:48:22:dd:70:d5:01:5e:
60:53:08:83:f6:8e:b8:56:c8:6f:2b:fb:c3:5d:41:40:33:90:
32:cd:e4:cc:e4:32:77:01:33:bb:de:d0:a5:2f:31:e2:c2:57:
a8:c1:69:4c:74:ee:86:1a:02:3c:ec:d6:b3:84:9e:54:ee:9b:
cf:b5:4c:55:f0:ad:8c:2c:ed:45:4c:1f:c0:fe:19:df:85:b1:
98:0a:fa:a8:83:21:00:58:ec:50:49:34:e1:74:4c:2f:42:17:
90:10:b6:58:04:78:a8:be:04:57:48:8d:57:b2:1b:24:9c:36:
0e:b8:78:b7:a2:31:d9:23:34:0f:aa:ea:1f:33:2c:18:1f:19:
21:ad:14:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:57:49 2026 by rpki-client