Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/uZ0PVC06FINqtRa5nt2ryS6nPH0.roa
File: uZ0PVC06FINqtRa5nt2ryS6nPH0.roa (raw, json)
Hash identifier: SNktfAXN8Qyia9oJwePUAQv9IDByN22Az+WO4bLJx04=
Subject key identifier: B9:9D:0F:54:2D:3A:14:83:6A:B5:16:B9:9E:DD:AB:C9:2E:A7:3C:7D
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039823671AE1C5C56D4AA96BB49F2B6AC
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/uZ0PVC06FINqtRa5nt2ryS6nPH0.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 83.171.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:36:71:ae:1c:5c:56:d4:aa:96:bb:49:f2:b6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b99d0f542d3a14836ab516b99eddabc92ea73c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:e8:e1:50:02:75:0d:fe:ac:2f:6c:df:e3:
4e:26:57:a1:e1:93:27:c8:65:2e:2b:79:3d:d6:47:
fb:69:ef:2c:0e:fd:f4:02:ef:b5:b7:e3:29:66:76:
83:32:61:7b:3e:f9:a1:66:ed:17:41:1c:79:ad:67:
75:85:fd:20:18:d0:e0:29:6b:c7:97:39:b2:06:04:
e5:31:ed:e1:d2:36:b3:4f:1f:90:b3:70:60:f5:28:
cf:f9:53:19:47:97:d3:84:71:1e:15:81:d7:cf:1b:
a6:d5:98:27:de:79:60:4b:10:a5:e0:74:fb:c5:8f:
74:85:06:fc:b4:39:af:10:b9:05:13:89:07:7b:64:
46:d4:bf:4f:64:4c:4f:07:ab:81:cf:2f:41:0c:98:
fd:65:99:8e:f8:12:ed:22:a2:34:e4:17:6f:b8:3a:
09:bd:9b:6b:7e:26:f7:03:4d:96:d5:c1:b5:10:af:
ee:9f:2f:53:06:d3:6c:15:2b:88:60:50:d5:fe:d1:
c3:23:d9:d3:43:e2:3e:cc:e1:eb:81:4d:6d:55:2a:
f0:04:8e:d3:58:7e:42:da:11:26:d3:04:ab:ac:1e:
7b:5f:0c:06:b3:d7:2d:83:fb:ad:e1:ef:4a:19:ff:
72:26:e6:eb:1d:9a:88:e7:fb:33:db:13:95:bf:6c:
fd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9D:0F:54:2D:3A:14:83:6A:B5:16:B9:9E:DD:AB:C9:2E:A7:3C:7D
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/uZ0PVC06FINqtRa5nt2ryS6nPH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:00:51:7c:b1:fb:fc:64:fe:1e:83:33:39:d2:86:0d:83:ce:
d5:a2:48:6e:43:df:67:38:ed:34:05:e7:20:d3:48:54:7c:ba:
57:32:82:3a:dd:bf:1f:bc:74:9e:25:eb:1a:51:93:14:06:87:
7e:c9:88:39:11:e1:79:44:c1:16:ac:19:4d:48:53:2e:90:c2:
83:6e:0f:8f:4a:e2:b5:34:68:e4:f1:1a:db:fe:8e:a5:f0:30:
22:59:15:d4:2b:d0:03:30:d7:39:80:9f:d7:32:a8:d4:70:c9:
04:c3:5b:95:fb:55:c1:df:e7:40:3a:a4:2c:25:5d:19:ec:73:
e5:17:61:52:be:93:22:ee:1d:21:6a:5c:fd:85:b5:f5:1b:f9:
ea:92:af:b3:8e:28:ad:5a:6e:d8:1f:6b:f8:ee:d1:47:68:b4:
20:46:a1:3d:12:b2:25:72:a0:e0:b2:10:1b:91:d5:ec:8e:d5:
f4:fd:07:e2:04:5c:75:e0:25:15:15:f1:44:15:fa:39:ba:e5:
f0:6d:08:e5:0b:f4:2b:23:48:20:ac:2d:a2:fe:dd:65:aa:25:
fe:89:bf:dd:95:56:07:ab:aa:2f:b0:54:c3:89:94:e6:57:fb:
69:30:52:3a:d7:63:d7:90:a4:46:2e:65:23:b6:b3:53:cf:bc:
a1:d3:aa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:27:10 2026 by rpki-client