Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uPg--S2aaf2uiD1gVYAQV6pSFug.roa
File: uPg--S2aaf2uiD1gVYAQV6pSFug.roa (raw, json)
Hash identifier: EEGgeI9HQBO0Vq4Z0HxnOFt4hsUigt/kUK2ExInqUcg=
Subject key identifier: B8:F8:3E:F9:2D:9A:69:FD:AE:88:3D:60:55:80:10:57:AA:52:16:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A073C456C8A6B29280CA5C89CF10162ACE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uPg--S2aaf2uiD1gVYAQV6pSFug.roa
Signing time: Sat 05 Sep 2026 22:50:42 +0000
ROA not before: Sat 05 Sep 2026 22:50:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a10:ccc0:120::/44 maxlen: 48
2a10:ccc0:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 19:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:c4:56:c8:a6:b2:92:80:ca:5c:89:cf:10:16:2a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 5 22:50:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8f83ef92d9a69fdae883d6055801057aa5216e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ef:f6:2e:c7:43:e9:bd:4b:bc:c4:eb:99:03:
69:01:3a:e4:53:25:6e:27:be:65:07:5e:d2:02:b4:
85:1a:ff:36:4a:f0:fd:4f:ae:fa:8f:6e:1d:85:ed:
f4:d3:3a:cb:58:72:99:da:5c:76:a0:ec:40:da:46:
43:2d:a0:0b:df:65:82:4f:ec:f3:12:fc:15:57:b8:
4a:c5:b3:b0:7d:d6:de:6e:00:fb:20:99:97:2d:df:
dc:9b:e8:4b:60:2f:21:7a:2d:ca:06:c2:18:03:98:
42:5c:3d:69:b0:40:f3:d5:c6:a8:60:a1:c5:16:77:
37:cf:65:0f:d1:3e:48:58:bb:58:2b:eb:bf:d9:ee:
a2:9e:e6:b4:79:a3:57:4b:79:48:ff:c0:f8:2c:b9:
8f:c6:e8:33:ff:08:7f:70:3f:10:17:2e:20:fb:cb:
c7:95:7b:1b:9f:bd:7a:bc:39:17:58:e7:d6:40:b8:
e9:e7:2f:81:d4:58:dc:72:3a:41:06:80:8d:cc:69:
53:25:ac:be:2f:3b:6e:9e:4c:59:31:5b:c6:98:06:
b0:b4:78:c8:c6:85:29:78:21:00:af:f7:65:92:42:
42:78:24:16:35:db:07:b8:be:58:d1:84:64:7a:f9:
9a:05:af:6a:9d:7b:93:31:0b:ec:12:2f:d9:85:d9:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F8:3E:F9:2D:9A:69:FD:AE:88:3D:60:55:80:10:57:AA:52:16:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uPg--S2aaf2uiD1gVYAQV6pSFug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a10:ccc0:120::/43
Signature Algorithm: sha256WithRSAEncryption
c5:7b:34:1b:a1:1d:d6:62:1b:ae:41:77:36:44:56:a7:86:c9:
de:24:7b:80:05:d0:18:dd:df:e7:7c:f4:b6:d2:f3:07:e2:40:
0a:5b:c9:41:5b:eb:d7:a5:b2:7e:fa:33:ec:6d:16:0d:df:17:
ec:67:76:65:56:a0:58:b4:96:19:89:a4:4f:70:3e:3f:9b:11:
e7:fc:5a:e0:a2:29:65:48:ba:f6:8c:a9:85:eb:87:aa:45:3e:
63:f0:a0:71:05:18:7c:e9:01:01:2f:f5:6c:c5:00:c8:d6:b4:
7f:02:2f:a8:09:aa:58:06:56:09:bf:b2:9a:44:98:70:b7:d7:
21:bd:d4:c4:1d:cc:20:8c:66:89:59:4e:c1:6d:ad:fc:89:5f:
6d:f4:a2:0c:ba:8b:b5:13:79:99:1e:a1:07:41:f8:63:fa:b9:
2e:3b:2c:e8:ca:12:cf:00:ec:89:7f:67:ae:4c:38:f0:5c:cd:
66:4d:a2:dd:71:da:1c:05:a4:5f:55:15:8b:f1:b7:55:45:c3:
9b:c3:88:89:3e:40:82:6e:02:7d:9d:ef:4f:06:0f:0e:38:3d:
9d:21:35:b8:7b:9e:dd:4a:5c:52:b5:0f:b9:30:6e:ba:95:e1:
18:cb:b8:55:4c:96:e3:44:29:a2:b5:78:7d:9d:f6:44:ae:3c:
96:40:27:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBzxFbIprKSgMpcic8QFirOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTA1MjI1MDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGY4M2VmOTJkOWE2OWZkYWU4ODNkNjA1NTgwMTA1N2FhNTIxNmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue/2LsdD6b1LvMTrmQNpATrkUyVu
J75lB17SArSFGv82SvD9T676j24dhe300zrLWHKZ2lx2oOxA2kZDLaAL32WCT+zz
EvwVV7hKxbOwfdbebgD7IJmXLd/cm+hLYC8hei3KBsIYA5hCXD1psEDz1caoYKHF
Fnc3z2UP0T5IWLtYK+u/2e6inua0eaNXS3lI/8D4LLmPxugz/wh/cD8QFy4g+8vH
lXsbn716vDkXWOfWQLjp5y+B1FjccjpBBoCNzGlTJay+LztunkxZMVvGmAawtHjI
xoUpeCEAr/dlkkJCeCQWNdsHuL5Y0YRkevmaBa9qnXuTMQvsEi/Zhdkb/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLj4Pvktmmn9rog9YFWAEFeqUhboMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdVBnLS1TMmFhZjJ1aUQxZ1ZZQVFWNnBTRnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKg6XwAJA
AwcFKhDMwAEgMA0GCSqGSIb3DQEBCwUAA4IBAQDFezQboR3WYhuuQXc2RFanhsne
JHuABdAY3d/nfPS20vMH4kAKW8lBW+vXpbJ++jPsbRYN3xfsZ3ZlVqBYtJYZiaRP
cD4/mxHn/FrgoillSLr2jKmF64eqRT5j8KBxBRh86QEBL/VsxQDI1rR/Ai+oCapY
BlYJv7KaRJhwt9chvdTEHcwgjGaJWU7Bba38iV9t9KIMuou1E3mZHqEHQfhj+rku
OyzoyhLPAOyJf2euTDjwXM1mTaLdcdocBaRfVRWL8bdVRcObw4iJPkCCbgJ9ne9P
Bg8OOD2dITW4e57dSlxStQ+5MG66leEYy7hVTJbjRCmitXh9nfZErjyWQCfq
-----END CERTIFICATE-----
Generated at Sun Sep 6 01:16:38 2026 by rpki-client