Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/UzH4c4RQOKsiBvBcEIcZh9bQ3WY.roa
File: UzH4c4RQOKsiBvBcEIcZh9bQ3WY.roa (raw, json)
Hash identifier: 1mgcGfattmpFYTM4j+3LHWqB2+rAmsEmUO132eax4h0=
Subject key identifier: 53:31:F8:73:84:50:38:AB:22:06:F0:5C:10:87:19:87:D6:D0:DD:66
Certificate issuer: /CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Certificate serial: 01A0F12B91C867B2C5A7CF0C4CCE17B515CF
Authority key identifier: 08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/UzH4c4RQOKsiBvBcEIcZh9bQ3WY.roa
Signing time: Wed 30 Sep 2026 07:15:59 +0000
ROA not before: Wed 30 Sep 2026 07:15:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6848
IP address blocks: 193.108.201.0/24 maxlen: 24
2a07:37c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:2b:91:c8:67:b2:c5:a7:cf:0c:4c:ce:17:b5:15:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081e0c54425bf1809b6cd9ca903355b6f60370cc
Validity
Not Before: Sep 30 07:15:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5331f873845038ab2206f05c10871987d6d0dd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:70:2b:79:39:3b:72:8c:62:85:c4:85:fe:22:
e7:69:78:cc:77:d1:19:1d:97:10:c4:4f:03:a0:21:
fd:44:87:17:61:29:ff:dd:72:f0:48:7e:88:4a:95:
32:85:98:69:5d:46:a4:dc:24:33:ba:42:09:33:64:
0c:e7:b5:47:55:2b:b6:49:56:8f:55:6b:df:1a:4a:
76:fd:6b:a7:e7:93:e2:f6:cf:4e:21:f4:8b:09:bf:
be:b4:ab:8b:0a:f9:57:e0:53:ed:c6:1a:fe:4b:d6:
8a:fe:62:c5:5f:fc:8c:8c:e6:25:34:6c:77:43:66:
00:5e:f3:8b:c8:6d:e6:dc:d2:57:2e:61:dc:25:6e:
43:7b:78:73:1a:19:c9:62:73:5c:55:47:aa:fc:d0:
eb:8d:06:53:a2:3c:e2:38:16:12:da:0e:bb:ca:22:
f8:fd:8f:08:08:95:b5:bf:bb:30:8c:9a:4c:ad:34:
f8:57:27:b3:f2:2f:4b:71:6a:58:07:0d:39:34:12:
5a:6c:60:fd:01:49:1d:67:45:27:a0:8c:af:71:a8:
04:25:bb:35:5c:c6:43:ee:e8:7c:97:98:b6:da:d7:
3b:8f:06:65:03:e2:a8:87:6a:05:a4:99:b6:e9:d8:
d3:e0:9b:f4:da:14:25:23:bc:e9:a6:78:e1:59:a2:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:31:F8:73:84:50:38:AB:22:06:F0:5C:10:87:19:87:D6:D0:DD:66
X509v3 Authority Key Identifier:
keyid:08:1E:0C:54:42:5B:F1:80:9B:6C:D9:CA:90:33:55:B6:F6:03:70:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CB4MVEJb8YCbbNnKkDNVtvYDcMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/UzH4c4RQOKsiBvBcEIcZh9bQ3WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f9c36d-e526-428c-9ed7-3a17754c8bc0/1/CB4MVEJb8YCbbNnKkDNVtvYDcMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.201.0/24
IPv6:
2a07:37c0::/48
Signature Algorithm: sha256WithRSAEncryption
43:6a:cf:21:ac:a5:4f:f2:b8:f9:77:31:ba:9c:8d:84:29:74:
f8:2a:5e:7f:3f:ae:0c:d3:46:6b:4d:dc:ae:d7:3e:2d:95:22:
f0:eb:bb:b5:8b:cd:fc:83:8a:e8:ec:cd:19:ab:4b:9d:39:0d:
0d:93:23:ff:5c:5e:56:e3:0b:9e:15:0b:b7:1f:fc:d3:c3:72:
ea:14:c5:e7:3d:71:81:bf:0f:f6:7c:da:a9:17:c0:a1:88:ee:
c6:1f:8a:85:84:f2:23:15:3b:31:81:53:d1:cb:82:90:86:b7:
55:96:e0:4e:bc:77:05:5e:85:89:df:93:40:24:b2:ed:86:63:
da:4d:22:2a:80:57:8b:9f:f2:eb:23:5a:11:ab:b4:36:3b:d4:
7b:94:44:9e:86:f1:4c:bd:e2:2b:7f:ec:e9:2b:ad:ab:90:ea:
2b:fd:a2:0c:86:d0:9c:79:11:74:56:b6:4b:8a:8c:9f:56:fb:
73:f4:63:e5:ee:91:42:4a:a9:db:9d:76:b6:8b:6c:c6:e4:6f:
8d:0c:be:0e:11:c4:fa:16:83:db:54:56:8a:47:12:de:5e:92:
4a:eb:66:de:96:69:5f:f1:80:58:5a:cd:60:59:93:b2:df:ad:
49:cf:cb:4e:b8:7e:b7:6e:76:7a:78:49:e4:1f:63:52:48:8f:
35:db:1d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:08:04 2026 by rpki-client