Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/uv5hOM2EL0ZROQexv5lATLPcqUQ.roa
File: uv5hOM2EL0ZROQexv5lATLPcqUQ.roa (raw, json)
Hash identifier: AQwzgVCBYATPgW2R9QHaQmDekCRO+HGMVqXoJbA+k+A=
Subject key identifier: BA:FE:61:38:CD:84:2F:46:51:39:07:B1:BF:99:40:4C:B3:DC:A9:44
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019DFD9775715B37AF3A64724EBB92BF386D
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/uv5hOM2EL0ZROQexv5lATLPcqUQ.roa
Signing time: Wed 06 May 2026 14:00:54 +0000
ROA not before: Wed 06 May 2026 14:00:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213474
IP address blocks: 138.226.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:97:75:71:5b:37:af:3a:64:72:4e:bb:92:bf:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: May 6 14:00:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bafe6138cd842f46513907b1bf99404cb3dca944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:89:36:db:73:32:bb:74:76:99:ee:7e:81:
42:a1:c5:6c:15:22:a6:84:4e:f1:14:f0:00:bd:b9:
9e:d4:54:ac:26:4b:53:0e:e7:3a:54:62:b2:1a:5b:
00:97:03:af:f7:81:9b:5f:e3:08:e4:ba:dd:42:ed:
c1:c6:97:c2:a0:2c:ec:32:27:20:ce:ec:8a:49:17:
86:00:ba:19:16:c8:a6:46:ba:7f:83:5a:90:f7:52:
6d:ba:fb:84:23:08:88:b4:6d:a3:8f:dc:a5:03:51:
6e:7d:c1:3b:26:61:33:4a:fa:37:0f:2d:79:28:10:
f8:c3:1a:74:75:88:69:4b:01:c7:da:b1:1f:95:68:
6e:36:88:b5:6b:30:e3:80:2d:1a:4c:cd:0a:cc:dc:
00:bb:c1:18:89:4c:0b:f3:c4:22:bc:35:a3:75:9e:
e5:4e:69:ba:ed:85:c7:95:2e:c2:26:fe:e7:35:cf:
c5:38:4e:58:b0:93:c7:f7:1d:74:60:99:c4:62:aa:
e0:7c:35:f9:07:0c:c3:65:cb:fa:4e:ea:61:72:a2:
3d:6b:3f:93:5d:1a:70:25:ae:22:c4:99:37:41:b7:
af:7d:c5:69:77:15:06:8e:64:7a:9e:1d:b6:87:f2:
3e:ea:af:e4:a3:f2:08:af:f5:e1:b9:a9:04:43:18:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:61:38:CD:84:2F:46:51:39:07:B1:BF:99:40:4C:B3:DC:A9:44
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/uv5hOM2EL0ZROQexv5lATLPcqUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.239.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6d:d5:18:44:4b:32:65:68:02:e9:a0:4f:66:cd:70:99:f4:
dd:43:ec:07:6e:6e:1e:c4:91:d8:96:5c:7a:45:69:7b:62:3e:
18:45:51:83:cf:fa:78:f3:3d:c2:2b:76:7e:cb:de:05:22:ac:
f2:6a:c7:de:5f:bf:1f:65:1c:80:73:88:7c:3f:ef:f6:38:d6:
94:2b:f4:81:37:ee:4c:03:21:55:10:e0:ed:9d:04:9f:57:aa:
a4:09:81:14:73:d3:5b:41:e1:d4:f0:02:5b:35:35:16:5c:15:
c7:70:f4:3c:a4:35:e2:56:ea:7a:39:18:30:b6:82:6b:64:bb:
50:8f:15:e6:75:17:bf:69:da:23:3e:f5:d3:49:84:b5:f1:cf:
1d:f8:55:1c:b7:76:5a:ee:28:aa:e1:e8:50:a0:4d:76:53:be:
e4:be:67:dd:5e:a6:be:36:b7:3d:45:dc:7b:eb:d8:03:df:cd:
b7:5d:49:d0:a5:f2:60:42:f8:65:a9:bf:d9:2c:55:0a:2a:01:
ea:68:4f:e3:c7:41:1f:cb:82:41:35:32:8c:45:4f:6d:22:02:
72:35:36:c9:d8:fe:ad:c9:64:b3:ce:a5:07:d2:10:e2:97:7c:
3c:27:67:8e:a6:b7:7b:61:81:63:b2:52:13:f0:fa:0c:13:c3:
bf:0b:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:33:36 2026 by rpki-client