Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/uKtPfwvx5B6XeGpENsInTuBCciU.roa
File: uKtPfwvx5B6XeGpENsInTuBCciU.roa (raw, json)
Hash identifier: +7a7SL8VvLvGQs/OKDdLsmsgdAA79tP8yltWgYFxF9g=
Subject key identifier: B8:AB:4F:7F:0B:F1:E4:1E:97:78:6A:44:36:C2:27:4E:E0:42:72:25
Certificate issuer: /CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Certificate serial: 01A15F316BDAE65DACC6C4A7722F4CEB12C8
Authority key identifier: 96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/uKtPfwvx5B6XeGpENsInTuBCciU.roa
Signing time: Wed 21 Oct 2026 16:00:36 +0000
ROA not before: Wed 21 Oct 2026 16:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213953
IP address blocks: 185.42.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:6b:da:e6:5d:ac:c6:c4:a7:72:2f:4c:eb:12:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96cbcf2e957ca8d942472a7b0044285b26db6b22
Validity
Not Before: Oct 21 16:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8ab4f7f0bf1e41e97786a4436c2274ee0427225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:eb:25:30:46:e1:0e:8d:b7:e5:1d:db:a4:
36:bc:22:25:eb:08:a6:2d:8d:86:23:f2:9a:22:95:
5e:33:e5:e4:77:58:55:dd:7b:57:33:e1:9c:85:19:
e4:63:a1:94:eb:87:87:99:28:29:51:eb:ae:16:02:
3c:35:e7:ab:43:7a:0c:95:8f:ab:05:43:04:4f:9f:
ec:94:16:42:56:fd:13:90:ca:99:71:30:02:7b:93:
a6:b3:62:db:7f:97:31:52:d2:63:57:9d:86:3e:e3:
86:48:a8:7e:43:bb:25:a5:d0:c9:d7:86:c8:52:72:
4d:af:5c:25:80:cd:05:0e:3c:d2:e0:18:9d:41:3e:
e7:38:be:5b:18:cc:2a:4c:f1:10:53:b4:6f:55:5c:
9c:d1:9e:23:c6:a9:f1:c7:af:52:64:e0:60:30:95:
b7:0f:e0:45:7f:e8:8d:3c:58:9b:c7:a5:ee:84:dc:
ee:d6:85:74:7a:48:aa:e1:f6:84:27:cd:7b:d9:cc:
45:5e:21:57:71:1e:f3:ad:3a:36:29:07:bb:24:3f:
28:8c:64:de:fb:c3:3d:ab:59:73:e9:2d:da:9d:e3:
24:fa:c0:8c:1b:f6:c4:34:7f:8c:d8:0c:dd:19:3a:
64:af:a1:c5:0e:50:54:20:35:70:47:da:72:e1:34:
b6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AB:4F:7F:0B:F1:E4:1E:97:78:6A:44:36:C2:27:4E:E0:42:72:25
X509v3 Authority Key Identifier:
keyid:96:CB:CF:2E:95:7C:A8:D9:42:47:2A:7B:00:44:28:5B:26:DB:6B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsvPLpV8qNlCRyp7AEQoWybbayI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/uKtPfwvx5B6XeGpENsInTuBCciU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1b60e9-b6e0-4890-9de1-13b431342ab8/1/lsvPLpV8qNlCRyp7AEQoWybbayI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:14:ee:1e:8e:91:62:cf:c5:12:76:09:e6:c2:80:c9:4f:ec:
92:02:93:10:cf:90:47:0e:80:46:c2:4c:9f:cc:58:c8:65:05:
d4:1f:f2:90:f6:19:34:38:6f:98:57:e0:ae:2b:e5:45:d0:91:
77:35:ae:27:f4:d2:51:91:ef:ec:b5:20:48:44:e4:19:34:bd:
00:9f:f6:ee:5f:c8:64:93:e2:71:0c:d4:79:cb:e0:b9:91:d3:
00:29:ab:b9:6e:cb:94:43:74:95:b3:16:4b:f5:df:04:bc:68:
41:8a:64:0e:96:0f:b8:84:22:46:3c:bf:e5:cb:fb:02:a6:3a:
4d:65:82:44:d8:34:19:35:70:1d:a1:56:8c:2d:91:94:32:ff:
c4:b3:d5:d4:77:17:61:a3:68:c3:bd:05:80:c3:8b:eb:eb:1a:
15:57:43:cc:ca:4e:54:3f:ab:bb:24:b3:51:1d:8d:bd:b4:54:
b9:ff:6a:c3:8d:9f:72:9b:d3:14:95:66:cf:c1:6a:64:d4:4e:
fa:c8:ec:21:23:a3:87:02:24:06:14:69:33:92:6c:fd:cd:5c:
6f:4b:9c:2d:4c:e6:bd:bd:75:b2:df:66:90:6b:6b:43:00:a5:
5c:91:20:e1:ed:01:2f:17:ad:c1:69:f7:8b:ef:b0:ba:4c:a2:
27:ca:99:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:00 2026 by rpki-client