Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/0UFg7qRP5mWf7I0y6J_kmTM1z0E.roa
File: 0UFg7qRP5mWf7I0y6J_kmTM1z0E.roa (raw, json)
Hash identifier: j9HoNAxV4aH3JoGQ7tNW4ZE0wYtJyk0kbnkPH/q4rOY=
Subject key identifier: D1:41:60:EE:A4:4F:E6:65:9F:EC:8D:32:E8:9F:E4:99:33:35:CF:41
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F69D9B95841BEC3820CC7E1326B975DE
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/0UFg7qRP5mWf7I0y6J_kmTM1z0E.roa
Signing time: Thu 01 Oct 2026 08:38:39 +0000
ROA not before: Thu 01 Oct 2026 08:38:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203583
IP address blocks: 213.253.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9d:9b:95:84:1b:ec:38:20:cc:7e:13:26:b9:75:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:38:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d14160eea44fe6659fec8d32e89fe4993335cf41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:c8:09:18:8d:eb:77:dd:28:d0:91:e9:2c:
c2:00:9d:14:01:28:07:76:0e:bf:76:84:98:49:11:
e5:82:87:74:73:e0:10:e0:c5:b6:3a:75:24:02:f1:
24:53:97:15:53:0d:47:ba:d6:73:2b:57:cc:5e:ca:
90:b0:74:66:17:77:53:ce:4e:e7:3c:09:e6:48:d5:
3b:4a:d2:ce:d1:76:4c:1b:46:84:17:78:75:a0:ed:
a9:60:dd:a0:dd:00:82:2d:c0:a0:e7:47:5d:05:e6:
72:47:42:f6:2a:da:4b:4b:72:5f:b6:47:42:03:9b:
ab:67:f6:94:51:5a:02:1e:72:84:88:e5:05:8f:3a:
b6:62:bc:d4:da:f8:ae:3a:6c:d9:62:ea:aa:6d:61:
d9:ea:02:db:d1:5f:24:4c:39:c8:45:44:55:e4:c8:
aa:d4:20:e9:22:6a:1d:5f:a6:22:34:fa:d9:4f:ed:
37:c9:e4:f6:07:47:f1:9c:51:56:a0:78:5c:3b:40:
b7:69:99:1e:e6:83:82:a9:7c:d4:a2:5a:6e:8c:58:
f3:30:cf:00:fd:24:62:04:6a:82:86:5a:6a:43:84:
10:71:ca:87:7d:c6:51:f8:d5:63:18:c3:41:c3:8f:
a8:04:98:ef:31:47:9e:22:d1:d1:1b:9c:73:4d:0b:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:41:60:EE:A4:4F:E6:65:9F:EC:8D:32:E8:9F:E4:99:33:35:CF:41
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/0UFg7qRP5mWf7I0y6J_kmTM1z0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5d:81:ca:44:73:2a:87:e6:99:7e:53:e3:c2:52:f9:20:0b:
cd:db:7d:e5:fd:fd:38:6a:d6:64:d3:7f:89:cd:63:57:9d:59:
e1:9e:4e:fc:83:4b:c9:c9:75:0f:cc:a3:a3:94:0f:5b:4a:f1:
8b:2f:c6:eb:8d:95:35:91:11:ae:30:c1:fa:52:f6:6a:d6:e5:
aa:a9:88:a9:27:54:94:ac:8b:33:43:43:4e:2b:5c:86:3f:3c:
86:1f:f9:e7:30:e2:2b:e5:3c:c8:89:18:6e:75:d7:31:52:05:
a2:d7:2e:51:f8:4c:c6:c7:76:7f:e5:56:82:a8:69:2e:a4:17:
86:43:78:0d:62:76:94:a6:0d:df:7b:03:0a:29:ab:4f:ef:bb:
64:35:58:8a:e3:fd:1a:ff:fb:17:50:e9:77:65:35:75:34:bf:
77:f5:af:5f:e0:5b:82:4f:53:7c:6f:d4:c9:ba:16:76:57:a2:
02:03:1a:d5:e9:9a:35:89:23:87:7f:51:5e:d0:0d:19:37:fb:
92:d3:69:e4:23:ff:cc:a6:da:78:b3:7c:c7:ad:b0:62:33:b0:
ed:c1:30:11:e6:61:2d:ab:59:73:17:0c:a2:4f:fc:96:b9:8d:
56:b1:74:ac:1e:e7:e5:18:16:0c:9b:3e:0f:4b:74:b0:0d:8a:
8b:59:95:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:54:51 2026 by rpki-client