Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/uY-98AfhcqBFImjqqm1qmr1pWus.roa
File: uY-98AfhcqBFImjqqm1qmr1pWus.roa (raw, json)
Hash identifier: FHlrmScVVNKTLuB/mV9S62/IqQKWmxNjARahgHvZ+Ew=
Subject key identifier: B9:8F:BD:F0:07:E1:72:A0:45:22:68:EA:AA:6D:6A:9A:BD:69:5A:EB
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01A04853E353D7871B9BE76221CE719B1599
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/uY-98AfhcqBFImjqqm1qmr1pWus.roa
Signing time: Fri 28 Aug 2026 12:24:12 +0000
ROA not before: Fri 28 Aug 2026 12:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 185.89.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:53:e3:53:d7:87:1b:9b:e7:62:21:ce:71:9b:15:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Aug 28 12:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b98fbdf007e172a0452268eaaa6d6a9abd695aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:4c:71:0e:bd:04:cf:69:f9:a2:0c:2c:ab:
a4:f3:77:f2:86:e3:39:ba:8c:22:8c:cf:19:98:3c:
7a:63:59:a8:0d:8f:70:25:c2:d5:ad:98:e8:55:b7:
c2:29:ab:69:81:76:d2:a8:75:67:84:01:2f:28:8c:
84:9b:92:7f:39:af:e2:d9:a2:59:6a:a7:c7:ca:c4:
fb:61:95:5b:3c:3f:61:ca:60:90:06:ef:1b:bf:19:
a1:bf:13:57:67:2d:bc:27:eb:f9:8a:55:15:65:a8:
de:da:ac:8c:93:11:24:45:0b:ba:eb:e4:68:0a:16:
e8:49:61:47:65:73:04:0b:a1:16:63:08:81:81:eb:
74:2e:05:fd:88:d4:52:eb:3d:13:c0:92:c3:fb:0b:
f2:12:2f:9d:f6:23:27:ed:f5:75:d6:7e:8d:49:65:
83:ec:b1:65:2f:47:4d:49:f5:97:34:cf:eb:9b:ca:
ea:84:84:48:45:59:7a:ca:45:3c:2b:0d:a2:24:b9:
56:b5:d0:f4:d5:0a:bc:6d:e7:a6:c6:79:a4:14:5a:
78:22:cd:81:9e:df:e9:bb:76:46:62:d8:4a:a9:4b:
d4:45:0b:5a:7d:d3:0f:5f:8b:7a:a4:4c:d3:bd:b6:
28:30:22:7a:d7:47:b9:de:46:88:4e:e7:c7:cf:40:
be:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8F:BD:F0:07:E1:72:A0:45:22:68:EA:AA:6D:6A:9A:BD:69:5A:EB
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/uY-98AfhcqBFImjqqm1qmr1pWus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.248.0/24
Signature Algorithm: sha256WithRSAEncryption
62:df:b6:31:6a:f0:f9:15:4b:47:9c:2b:6e:fe:f9:72:7c:aa:
36:5a:d4:25:db:87:2a:92:ee:01:0a:c1:d0:4b:ce:b3:3d:3e:
be:8a:43:39:ba:2c:10:b4:e4:93:1c:e7:5e:e1:63:36:1a:52:
4d:81:a7:27:e2:bd:72:a2:73:d7:7f:f3:28:21:bd:43:e3:29:
1c:ae:ac:14:dd:a9:5b:1f:af:5a:ca:3c:2f:91:38:94:48:e0:
ed:ad:5c:69:b2:e3:26:12:ce:87:1d:74:13:50:38:61:a9:5e:
31:6e:3a:70:63:07:3e:6c:42:e2:5b:c9:20:b5:66:dd:1e:90:
bb:fb:65:99:e2:ae:7d:c8:f7:80:76:12:2a:c6:cf:3a:a1:6b:
39:5a:91:fa:f2:7e:76:13:3c:5e:f3:d4:48:c9:93:d3:f2:24:
3a:5e:fa:31:10:6b:5a:40:c6:71:5a:26:ba:72:ca:fd:05:57:
30:c5:77:3d:4f:12:b7:4d:61:30:34:fc:46:73:d9:e3:c7:79:
a5:84:75:fe:b3:f7:c1:60:4c:65:cf:f8:16:34:ed:73:ff:10:
4d:d6:6b:32:6c:6d:f0:92:06:d7:7d:53:e4:f1:07:8c:2f:d2:
05:a2:47:03:aa:94:64:00:4a:7c:84:a4:d6:74:f9:e0:ef:71:
d1:15:ab:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:22:57 2026 by rpki-client