Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uvFPeQun5l4I8uLZwpnw3h779_0.roa
File: uvFPeQun5l4I8uLZwpnw3h779_0.roa (raw, json)
Hash identifier: ZJ5q5QulqUq8/tWSFLpLuruULm5GpNHzfFisaZQCaTo=
Subject key identifier: BA:F1:4F:79:0B:A7:E6:5E:08:F2:E2:D9:C2:99:F0:DE:1E:FB:F7:FD
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1FB053ABA9F7630C0CA8117072A84D
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uvFPeQun5l4I8uLZwpnw3h779_0.roa
Signing time: Tue 01 Sep 2026 13:19:12 +0000
ROA not before: Tue 01 Sep 2026 13:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202828
IP address blocks: 79.175.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1f:b0:53:ab:a9:f7:63:0c:0c:a8:11:70:72:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baf14f790ba7e65e08f2e2d9c299f0de1efbf7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:9c:b5:b5:34:a8:6f:54:c5:33:89:0b:c0:
3d:2a:27:85:92:e7:ff:22:e4:33:de:de:99:16:8d:
e2:82:ee:ad:78:2c:f0:53:c4:bc:cd:b5:55:77:15:
68:e3:2e:a0:3a:f0:2c:d9:3f:32:32:4c:44:df:84:
f5:20:0a:23:70:b3:b6:b1:25:4a:ff:8d:3c:39:3e:
35:df:a5:73:96:7b:7f:49:3e:d9:d2:fb:7f:eb:dd:
f5:a8:81:25:66:ee:06:d6:c5:83:4f:07:6a:99:95:
a8:14:7e:f4:fd:02:6f:02:69:21:be:b2:1e:a9:ed:
5c:61:f7:0a:dc:27:72:8e:83:0a:c3:84:c8:b8:58:
60:04:97:b3:3c:9d:bf:ba:04:a6:b4:87:c0:fe:17:
d0:c4:e4:8e:8f:49:74:d5:f2:fa:db:33:88:7b:24:
76:ea:38:be:33:f8:76:03:d2:7c:fd:3f:c1:e1:6a:
e2:01:a7:05:2b:ab:6f:d2:96:da:92:21:b3:9f:23:
17:ba:f1:80:d1:bf:ac:d4:65:e7:d6:28:8f:39:27:
73:3f:15:7f:c2:af:10:49:48:3b:fb:33:72:f1:81:
98:5e:b8:62:f4:49:00:5c:cc:45:e5:f6:35:fe:1d:
6f:ad:38:90:36:c9:88:f8:2d:b2:93:d8:10:a5:0a:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F1:4F:79:0B:A7:E6:5E:08:F2:E2:D9:C2:99:F0:DE:1E:FB:F7:FD
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/uvFPeQun5l4I8uLZwpnw3h779_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:d4:93:17:ea:01:69:d0:00:28:6e:cc:2d:69:d7:96:b3:ba:
a5:fd:dc:eb:dc:7b:89:75:15:7d:2b:25:8c:d8:37:ed:a0:65:
e8:05:80:06:80:0a:ea:c0:4d:2b:29:a3:29:fe:6e:68:6e:ef:
a5:d3:14:5d:61:d4:13:37:09:de:56:7b:c9:0e:b5:72:3a:af:
8a:9c:4a:83:10:9e:ff:c3:c6:56:51:61:2e:18:0b:42:a7:d7:
3b:95:06:e4:9d:b4:d2:cb:35:25:16:d0:d2:f9:7c:2e:5c:e9:
6f:75:f6:93:20:c7:37:01:88:0d:98:54:f8:06:8a:2c:8d:a7:
73:5e:90:07:ce:76:4e:26:0d:43:4b:e7:f3:5e:48:6a:2a:ae:
46:4a:d4:79:ac:53:4d:05:35:eb:8b:d8:2e:76:ee:d9:52:41:
95:4f:24:69:0b:7a:c4:d9:7c:28:e4:f6:3a:b1:f6:ff:9e:50:
a6:4d:0a:00:10:6c:7a:db:bf:5f:0d:6b:5f:84:c6:22:e3:db:
09:6c:bd:a7:1b:8b:ff:e1:2a:56:fc:90:90:ac:90:2d:2e:84:
fe:f0:2f:0c:33:6a:97:53:8b:16:a8:b1:b2:d1:5f:db:a4:eb:
31:6a:de:9c:75:77:16:db:c5:b4:9c:f6:55:0a:0b:7a:20:54:
1d:c9:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:45 2026 by rpki-client