Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uRnbpmI_6foXeFPbbrylTx_6P_k.roa
File: uRnbpmI_6foXeFPbbrylTx_6P_k.roa (raw, json)
Hash identifier: yZPWfxmBefkhV6ZNN0WAojuRAyVnLzjfdaSDMrbW9F4=
Subject key identifier: B9:19:DB:A6:62:3F:E9:FA:17:78:53:DB:6E:BC:A5:4F:1F:FA:3F:F9
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01A15334E922A4237F0836B93BFACEDC5266
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uRnbpmI_6foXeFPbbrylTx_6P_k.roa
Signing time: Mon 19 Oct 2026 08:08:58 +0000
ROA not before: Mon 19 Oct 2026 08:08:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204730
IP address blocks: 77.65.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:34:e9:22:a4:23:7f:08:36:b9:3b:fa:ce:dc:52:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Oct 19 08:08:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b919dba6623fe9fa177853db6ebca54f1ffa3ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:30:94:96:c5:67:fe:f6:06:02:34:4f:b5:45:
22:9a:3a:d7:40:a6:a3:2a:39:86:70:bc:ad:bc:cf:
95:f5:23:03:27:67:7b:b5:f2:9b:5d:18:42:f2:42:
72:2e:bf:39:d6:06:f0:d4:77:35:ad:34:04:16:bd:
21:d8:fd:12:f2:59:52:47:67:30:38:14:3a:d7:7e:
a7:56:98:6a:be:ec:60:21:e6:67:06:81:81:79:3c:
eb:0c:57:71:de:18:fe:56:a6:81:dd:b8:bf:3d:3b:
7d:8e:2d:c7:d4:4c:f2:6c:b9:92:0b:23:65:54:16:
7b:80:93:9a:b3:d9:e9:76:31:f6:6d:e2:ad:50:b8:
b3:00:54:4b:36:67:c7:d0:ec:67:01:3d:79:58:95:
fa:11:0b:87:b6:5e:00:6d:c6:cf:a9:f9:b6:1a:91:
dd:07:2d:3e:21:ea:a7:aa:ad:e6:7a:6a:d3:7e:ef:
9f:4d:8c:8b:bc:a9:16:fb:d1:ae:82:82:3d:0f:e4:
6d:ab:f9:27:0b:01:90:cd:0f:a2:31:bf:bb:58:21:
89:6f:f9:84:41:ac:f0:26:17:81:c6:50:14:40:8d:
d1:6b:3a:77:85:70:61:d6:0f:fb:21:f4:b0:9b:a1:
91:02:6e:73:de:48:aa:24:aa:e8:56:93:c4:f9:7f:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:19:DB:A6:62:3F:E9:FA:17:78:53:DB:6E:BC:A5:4F:1F:FA:3F:F9
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uRnbpmI_6foXeFPbbrylTx_6P_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.65.218.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:dc:ad:f8:35:35:44:76:da:73:c6:83:6a:81:1f:19:b3:52:
03:bd:df:9b:a7:7e:fa:34:35:dc:fd:3e:0a:01:1c:7a:ff:e3:
61:f6:c0:32:7f:82:24:cb:5b:94:30:a9:67:29:24:9e:12:c2:
1d:78:6b:69:b0:23:b6:0a:83:c2:50:92:77:9d:2c:5b:f7:90:
af:74:b1:af:8f:4a:93:78:2d:9d:4a:d1:9e:41:54:ad:7a:a9:
36:dd:62:a8:78:2f:98:f0:84:95:4b:08:47:9f:8d:1b:a7:91:
87:14:cc:59:33:06:e9:87:58:fb:db:1c:c1:00:08:4d:17:da:
97:6d:37:d6:d9:89:56:e9:c7:5b:b7:19:ca:bd:bc:65:f5:ea:
aa:db:11:d0:51:7e:90:cd:a3:22:7c:a3:1b:63:c8:ab:7f:e0:
f9:ab:34:7c:85:31:1f:b7:bd:d3:12:44:bf:42:d1:c3:10:aa:
7b:be:f5:18:6c:47:0e:c8:6d:66:08:58:44:6b:eb:d6:28:b9:
82:1e:a4:bb:a4:76:9e:7b:fe:db:c9:95:7d:49:5e:17:5b:b1:
18:33:bc:35:80:32:a9:93:21:77:ec:93:9f:74:66:a6:bb:4d:
5f:9a:c0:57:c6:f4:56:96:d8:28:4d:4e:c2:d1:58:3b:f2:12:
a2:51:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:08 2026 by rpki-client