Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uzJJqfXo_bgW8A0MtmQ1pDlKCwI.roa
File: uzJJqfXo_bgW8A0MtmQ1pDlKCwI.roa (raw, json)
Hash identifier: TKAfRuPqo02THZCD6pwpeJucA6r/xSN0I4U1MwT2+HM=
Subject key identifier: BB:32:49:A9:F5:E8:FD:B8:16:F0:0D:0C:B6:64:35:A4:39:4A:0B:02
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A05C6CA34F3268415469ACC622A0318069
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uzJJqfXo_bgW8A0MtmQ1pDlKCwI.roa
Signing time: Tue 01 Sep 2026 10:03:38 +0000
ROA not before: Tue 01 Sep 2026 10:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142482
IP address blocks: 109.65.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:6c:a3:4f:32:68:41:54:69:ac:c6:22:a0:31:80:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 1 10:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb3249a9f5e8fdb816f00d0cb66435a4394a0b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cb:77:ae:a8:a7:a3:6a:c9:7f:03:45:58:1e:
e5:97:18:ac:8e:72:87:ec:4f:83:7b:41:3a:cf:cd:
2f:85:0f:45:98:26:f2:d6:e7:e4:86:ed:4e:9b:fb:
9c:5e:d4:72:91:be:f2:6b:96:2d:29:4e:d7:74:9f:
0b:9c:c9:cd:62:4c:f9:12:6a:cd:b2:31:96:76:a4:
dd:6e:a7:cc:08:d3:4b:2e:65:16:bd:13:71:8f:26:
94:f8:7e:a1:dd:52:53:c6:3a:3f:45:ce:61:c3:08:
80:5b:08:79:ad:0b:43:d0:42:d4:9c:9e:4a:34:04:
10:33:88:71:d4:78:44:de:54:81:92:83:a2:d5:20:
a3:23:28:69:05:40:84:6f:5c:ff:de:01:27:ab:aa:
84:54:ab:01:a9:96:83:86:19:e1:e5:9c:82:6b:90:
ab:a1:b1:f6:4e:ec:3d:a4:ca:2e:07:f9:2e:8f:f6:
2d:4e:83:e7:86:ed:04:c5:50:f3:6a:7b:6b:84:44:
18:9e:6e:e2:2d:2b:91:06:81:f7:08:85:5e:e5:82:
ea:e0:29:f6:fd:7f:c8:68:7e:5c:2a:05:9a:69:94:
ee:e6:7d:8b:e3:cb:99:a6:ed:85:b9:0c:1a:88:ac:
f3:0c:a9:6a:b1:cb:fa:b4:30:ab:d2:74:1b:a6:ac:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:49:A9:F5:E8:FD:B8:16:F0:0D:0C:B6:64:35:A4:39:4A:0B:02
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uzJJqfXo_bgW8A0MtmQ1pDlKCwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.65.0.0/24
Signature Algorithm: sha256WithRSAEncryption
63:b8:c9:e8:9c:3d:9f:51:a8:92:6b:96:5a:66:bf:2f:12:35:
bc:39:60:49:f0:2b:6b:0b:61:16:87:6a:45:dc:cc:51:8a:12:
91:43:17:c5:74:21:db:7b:dc:df:e6:cc:19:d2:e2:0b:74:11:
e9:e1:61:d6:94:64:33:1a:44:b5:19:07:08:7b:78:c0:c9:83:
e1:71:a8:8e:10:11:25:6e:b3:55:0e:45:7f:25:cb:a1:7d:e4:
d2:3e:70:26:10:2c:2f:cf:8f:06:33:3f:43:94:b3:d6:82:4a:
fd:a8:5a:f5:d4:28:be:8b:37:2e:dd:2e:cd:d4:05:da:bc:8e:
1c:10:0f:73:e1:82:99:07:35:b0:80:b8:40:64:dc:27:59:1a:
dc:cb:15:a7:a2:c0:37:8e:dc:67:ec:ae:bc:1b:5c:53:ea:13:
4b:b9:54:2b:27:38:6e:8f:d6:d8:19:0b:05:7c:d7:99:d4:c6:
80:66:02:d5:6b:5d:1c:bc:05:5d:3e:9f:8e:e5:ac:86:45:01:
c6:d6:14:7c:d8:8c:13:94:c4:3c:df:44:d7:86:a9:24:9e:0a:
65:dc:d4:a3:c6:76:43:8a:43:57:2e:6a:3a:7d:ae:71:fd:b2:
4b:54:d1:94:ac:70:3b:36:78:8a:04:27:f7:a8:a6:a5:83:ee:
49:db:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:26 2026 by rpki-client