Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uSOK0eX4TYuumH5Ic2rfeIeTvuk.roa
File: uSOK0eX4TYuumH5Ic2rfeIeTvuk.roa (raw, json)
Hash identifier: 1WexEmtWrn8mQtb7UJqhpFZgWTvHiJV0taQVnveBTR0=
Subject key identifier: B9:23:8A:D1:E5:F8:4D:8B:AE:98:7E:48:73:6A:DF:78:87:93:BE:E9
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F6023C34ADB465021A047843D014602BA
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uSOK0eX4TYuumH5Ic2rfeIeTvuk.roa
Signing time: Tue 14 Jul 2026 10:19:44 +0000
ROA not before: Tue 14 Jul 2026 10:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 109.66.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:23:c3:4a:db:46:50:21:a0:47:84:3d:01:46:02:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 14 10:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9238ad1e5f84d8bae987e48736adf788793bee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:e1:d5:e8:af:20:a6:b4:d9:e2:bd:cf:c1:
e3:db:b5:c9:2e:a2:44:70:8d:c4:14:a2:17:7b:ab:
b9:8a:c4:ff:19:86:52:d8:94:20:dc:a6:72:24:ca:
18:64:98:fa:49:ef:c4:f0:a4:d4:35:94:75:11:22:
bb:40:48:83:8b:16:ab:ca:ff:ac:65:11:08:e1:82:
6b:96:bc:81:68:ef:90:c8:0c:aa:1b:1c:b7:a3:87:
d5:c7:2a:64:31:a4:e4:7c:34:9b:a2:81:5d:27:73:
9f:e0:3c:3b:91:27:95:54:f0:9c:e9:ce:33:ae:75:
6d:a1:59:df:06:ad:13:1a:dd:c2:0c:d2:1e:33:7c:
17:e5:5a:c4:3b:fb:e3:6a:23:9f:b9:8e:cd:16:0f:
fd:1d:71:97:fa:70:73:ad:70:93:32:11:aa:d6:52:
5a:d4:68:26:cd:b6:cf:c6:16:cf:6d:90:5c:99:ae:
24:58:5b:aa:cb:8a:74:81:a5:12:72:44:32:a7:08:
98:0a:08:86:65:74:7e:d4:d3:22:21:3e:35:d4:89:
68:4a:b6:6c:91:88:65:5e:8e:60:c9:a4:5f:c0:d5:
61:e1:f9:eb:d6:56:25:86:43:7b:eb:d0:db:df:e0:
0a:4f:d4:3f:be:41:f4:01:33:07:4c:3b:9e:c1:a1:
3f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:23:8A:D1:E5:F8:4D:8B:AE:98:7E:48:73:6A:DF:78:87:93:BE:E9
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uSOK0eX4TYuumH5Ic2rfeIeTvuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:9a:f3:82:5f:f7:44:bf:2c:e6:18:ed:e6:9c:95:92:07:4a:
40:32:62:e7:2f:3e:95:b6:e6:b6:2e:35:65:40:f6:9e:84:82:
36:f1:65:7a:98:f5:14:dd:e7:49:e8:75:f8:3e:e7:f0:f4:90:
74:2d:53:9e:82:dc:ee:f0:b0:fe:bd:65:68:24:ab:a7:a1:b2:
21:1d:99:e3:9f:e9:36:b8:6b:6f:15:aa:42:1b:dc:77:89:da:
0b:b4:2e:09:37:52:9b:78:b0:fe:18:79:ba:c3:a7:8b:03:d0:
43:7e:23:73:38:5b:67:29:2c:9b:4e:6a:b1:1c:0a:74:39:08:
c8:f6:ae:a9:0c:ec:60:fd:6b:ec:f7:3c:aa:68:0a:ea:f4:b3:
df:98:cc:9b:7a:35:76:2a:9d:a0:95:12:33:52:61:3f:e0:25:
a7:ea:b0:1b:2b:b7:82:eb:3f:45:0d:93:9d:0b:ef:25:50:0b:
63:77:b4:87:aa:e2:8c:bf:bc:58:2e:7a:15:b4:16:8f:a4:0d:
e9:a9:0c:d5:21:af:f0:01:96:93:c4:71:b1:05:41:b9:8b:3a:
e8:b7:5f:b4:b6:74:a4:a1:b3:ed:c2:7f:46:bf:3b:b0:5b:4c:
35:03:1b:6c:ad:4a:56:18:c8:50:1e:7f:39:bb:fb:be:b4:6d:
91:28:9c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:38:56 2026 by rpki-client