Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uZY90eEaeaGv-eSxNJa6AzmlaUk.roa
File: uZY90eEaeaGv-eSxNJa6AzmlaUk.roa (raw, json)
Hash identifier: KcB3jLm+E6g29JZRok+j1tTbbnHO02JTQI3Q20xp/Bs=
Subject key identifier: B9:96:3D:D1:E1:1A:79:A1:AF:F9:E4:B1:34:96:BA:03:39:A5:69:49
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019EA187611C2C89A8C2DE001990928F382B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uZY90eEaeaGv-eSxNJa6AzmlaUk.roa
Signing time: Sun 07 Jun 2026 10:01:04 +0000
ROA not before: Sun 07 Jun 2026 10:01:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56755
IP address blocks: 45.148.118.0/23 maxlen: 24
85.202.203.0/24 maxlen: 24
139.28.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a1:87:61:1c:2c:89:a8:c2:de:00:19:90:92:8f:38:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 7 10:01:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9963dd1e11a79a1aff9e4b13496ba0339a56949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4c:52:0d:fa:d3:de:59:b5:62:27:59:d1:e2:
14:44:40:47:16:80:2f:bf:6c:ef:35:a2:3f:a2:3c:
34:47:ca:c2:e2:9a:63:9e:c6:0d:75:bf:9b:83:5c:
98:aa:1c:54:a1:69:7b:24:76:67:a3:ee:42:88:6e:
ee:03:de:22:f4:af:cb:6e:5d:b5:7e:80:6b:07:bb:
99:59:06:4f:c5:9d:49:10:b4:f3:e5:f3:c2:12:d6:
9d:f2:99:7d:43:00:65:3f:61:42:c0:95:02:fb:e1:
85:ee:17:72:00:6d:3b:5f:89:7a:70:ef:81:d5:1c:
09:e1:c8:13:3e:72:f7:7f:ec:a0:bc:3a:51:b9:dd:
83:53:09:62:5e:b0:09:86:c7:18:fd:71:d3:e0:36:
71:75:ac:70:d7:72:9a:77:fd:f3:e7:bf:51:0a:31:
31:ba:ca:d3:3a:56:15:81:24:13:7f:48:b0:96:f3:
9f:c1:15:bf:37:9d:22:da:81:ba:4a:23:c1:d2:d2:
9a:87:39:e6:cf:d6:c0:ef:5e:04:c5:76:f8:29:3b:
84:39:f8:fd:45:54:66:8f:d8:2c:ec:ea:f3:eb:40:
e7:8c:32:df:b2:db:0f:b3:87:1f:9a:4e:2a:83:2e:
14:20:23:10:c1:30:6d:f7:39:5a:3c:24:ab:eb:9d:
14:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:96:3D:D1:E1:1A:79:A1:AF:F9:E4:B1:34:96:BA:03:39:A5:69:49
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/uZY90eEaeaGv-eSxNJa6AzmlaUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.118.0/23
85.202.203.0/24
139.28.99.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d3:60:09:f6:4c:75:ba:4c:22:06:c3:8f:09:cd:4a:9b:2c:
44:b9:57:93:b0:a6:7c:e8:d9:3b:c8:a9:ed:c0:ed:14:29:f5:
f4:06:06:50:4d:5a:e9:d1:fe:3b:a7:47:13:e8:3f:b1:da:f7:
d6:61:db:53:56:e4:2a:54:21:71:c2:81:bc:04:99:a2:e1:e6:
12:83:a0:9a:00:30:53:dc:f8:37:5b:98:ec:ec:2e:40:c2:a9:
05:16:aa:59:06:ce:f3:44:4e:42:1b:26:59:e6:a4:70:26:81:
37:70:35:31:b0:83:37:a3:62:17:8b:3b:5b:32:3a:b9:6e:cc:
02:3c:83:02:0e:25:1a:61:d1:c7:85:90:34:58:8f:54:f1:7e:
ed:ae:c7:c3:7e:42:b8:f9:b6:78:9a:4a:c3:bf:20:be:05:fc:
cb:91:17:c5:5f:31:cf:70:ed:48:4a:92:3d:25:20:5c:fb:7f:
b8:31:50:be:d5:ce:09:b4:3a:13:ce:9b:bd:aa:90:3a:a7:4f:
51:35:1b:f9:3f:23:a5:65:f8:01:09:d1:31:c9:8e:11:a2:70:
47:c6:d9:04:58:1c:41:c6:99:3c:38:66:54:fb:41:29:36:a2:
b7:38:64:7a:f2:89:1f:b4:4c:fc:c6:c7:27:9f:b4:d9:b5:65:
43:85:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 13:53:19 2026 by rpki-client