Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/uYLNQPjAvwZesH3AsdHcFQfXzSY.roa
File: uYLNQPjAvwZesH3AsdHcFQfXzSY.roa (raw, json)
Hash identifier: tAAuDmpu4nqLNQA5hc39QDld4C6F+1xJboUD9Pxzvas=
Subject key identifier: B9:82:CD:40:F8:C0:BF:06:5E:B0:7D:C0:B1:D1:DC:15:07:D7:CD:26
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A13A376E8F38C7016716709DD0E28389C9
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/uYLNQPjAvwZesH3AsdHcFQfXzSY.roa
Signing time: Wed 14 Oct 2026 11:41:13 +0000
ROA not before: Wed 14 Oct 2026 11:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219476
IP address blocks: 2a0b:9800::/29 maxlen: 48
2a0b:a280::/29 maxlen: 48
2a0f:1180::/29 maxlen: 48
2a0f:2380::/29 maxlen: 48
2a0f:4680::/29 maxlen: 48
2a0f:9fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:37:6e:8f:38:c7:01:67:16:70:9d:d0:e2:83:89:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Oct 14 11:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b982cd40f8c0bf065eb07dc0b1d1dc1507d7cd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:52:1c:67:03:3f:f7:35:bc:ec:31:3d:5f:5f:
fb:ef:d7:75:b0:54:91:1a:b0:b0:6d:ca:2a:95:63:
da:67:73:c3:f6:19:a4:80:5f:c3:70:40:ba:90:f5:
9f:bb:07:d2:0a:26:03:2b:6d:6e:c1:81:fe:3b:5f:
1c:f7:76:ba:8f:35:27:aa:97:28:84:c3:36:fc:d6:
89:ae:43:93:45:a6:d3:59:79:8a:17:5c:55:8f:61:
77:24:ce:93:2f:44:dc:cb:f5:53:d6:d7:e4:88:d3:
ea:c5:2f:3e:59:ed:c4:8b:23:9c:9d:be:9f:91:5e:
67:24:56:5b:69:7b:84:f5:4d:94:83:10:9e:0d:08:
f3:ed:72:4b:8c:ca:12:42:6d:7e:42:92:66:59:9a:
5a:3b:02:e6:91:0e:25:9f:2c:ea:91:14:48:e1:9e:
a1:f8:15:70:4f:b0:ab:6d:b7:f9:72:35:3e:a7:d0:
0c:14:85:a6:9e:19:e4:db:17:58:47:89:09:97:6e:
ad:3c:65:fb:be:3b:48:28:0c:88:8a:ed:41:48:f3:
6b:c7:22:75:43:22:05:71:73:92:6d:d5:07:07:25:
67:ad:4d:b5:12:f7:74:c2:b7:9a:82:6f:c6:74:be:
c3:7f:59:58:84:d0:dd:2f:ec:b6:dd:12:a3:58:82:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:CD:40:F8:C0:BF:06:5E:B0:7D:C0:B1:D1:DC:15:07:D7:CD:26
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/uYLNQPjAvwZesH3AsdHcFQfXzSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
2a0b:a280::/29
2a0f:1180::/29
2a0f:2380::/29
2a0f:4680::/29
2a0f:9fc0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:63:23:84:d9:64:1c:d2:af:1a:e5:7c:fb:5b:61:25:96:73:
ce:50:ed:d8:c3:3a:4f:52:f5:b1:68:e6:57:ae:93:26:be:df:
5d:09:46:3e:e0:5c:72:e4:3e:92:53:18:ea:be:02:32:a1:71:
b2:25:33:8e:af:ea:04:6f:45:dd:52:6c:6f:a0:59:ab:f4:ac:
b7:e3:10:41:39:28:b0:20:fa:02:30:12:83:6f:8e:49:b2:a0:
d4:62:4e:e8:ee:7a:1a:d7:d2:27:da:38:33:17:f5:72:a0:fd:
6a:31:31:e4:f3:7f:0e:f9:e0:ec:9e:34:2f:c6:43:21:23:ce:
a6:95:f1:f4:ef:61:fe:da:0c:43:a0:dc:17:78:ad:63:cb:3b:
73:6c:78:7c:e7:92:7e:5a:ff:c0:2e:98:2a:b5:4f:53:ff:05:
96:34:6f:b5:cf:14:b3:68:1d:33:70:a9:04:8b:ff:ec:ec:b5:
81:9f:d4:84:af:96:f1:44:4e:a8:10:d6:dd:81:d6:8a:63:20:
df:1e:77:e6:d2:df:6b:8c:21:e1:93:05:95:d1:9a:15:76:4a:
bc:85:fc:b0:13:63:77:bb:2c:11:43:c2:1a:cd:2f:00:2f:15:
07:a4:4a:74:fd:05:6a:5b:85:5d:0c:03:b3:5e:42:fe:e6:47:
c4:63:9b:64
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaE6N26POMcBZxZwndDig4nJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYxMDE0MTE0MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTgyY2Q0MGY4YzBiZjA2NWViMDdkYzBiMWQxZGMxNTA3ZDdjZDI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VIcZwM/9zW87DE9X1/779d1sFSR
GrCwbcoqlWPaZ3PD9hmkgF/DcEC6kPWfuwfSCiYDK21uwYH+O18c93a6jzUnqpco
hMM2/NaJrkOTRabTWXmKF1xVj2F3JM6TL0Tcy/VT1tfkiNPqxS8+We3EiyOcnb6f
kV5nJFZbaXuE9U2UgxCeDQjz7XJLjMoSQm1+QpJmWZpaOwLmkQ4lnyzqkRRI4Z6h
+BVwT7Crbbf5cjU+p9AMFIWmnhnk2xdYR4kJl26tPGX7vjtIKAyIiu1BSPNrxyJ1
QyIFcXOSbdUHByVnrU21Evd0wreagm/GdL7Df1lYhNDdL+y23RKjWIKoqwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFLmCzUD4wL8GXrB9wLHR3BUH180mMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvdVlMTlFQakF2d1plc0gzQXNkSGNGUWZYelNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKguYAAMF
AyoLooADBQMqDxGAAwUDKg8jgAMFAyoPRoADBQMqD5/AMA0GCSqGSIb3DQEBCwUA
A4IBAQA8YyOE2WQc0q8a5Xz7W2EllnPOUO3YwzpPUvWxaOZXrpMmvt9dCUY+4Fxy
5D6SUxjqvgIyoXGyJTOOr+oEb0XdUmxvoFmr9Ky34xBBOSiwIPoCMBKDb45JsqDU
Yk7o7noa19In2jgzF/VyoP1qMTHk838O+eDsnjQvxkMhI86mlfH072H+2gxDoNwX
eK1jyztzbHh855J+Wv/ALpgqtU9T/wWWNG+1zxSzaB0zcKkEi//s7LWBn9SEr5bx
RE6oENbdgdaKYyDfHnfm0t9rjCHhkwWV0ZoVdkq8hfywE2N3uywRQ8IazS8ALxUH
pEp0/QVqW4VdDAOzXkL+5kfEY5tk
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:40:41 2026 by rpki-client