Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/uELHl90ybkBOCojsdHJu4OwDF48.roa
File: uELHl90ybkBOCojsdHJu4OwDF48.roa (raw, json)
Hash identifier: DuUe+j6JrAOoAv3sHUmR6fh780C04VQgZcjzFpI0GVM=
Subject key identifier: B8:42:C7:97:DD:32:6E:40:4E:0A:88:EC:74:72:6E:E0:EC:03:17:8F
Certificate issuer: /CN=993e814676f32f264771c7ad767a4df87d3c63e2
Certificate serial: 01A111149CE314F76EE72D5854CED7335E2D
Authority key identifier: 99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/uELHl90ybkBOCojsdHJu4OwDF48.roa
Signing time: Tue 06 Oct 2026 11:58:45 +0000
ROA not before: Tue 06 Oct 2026 11:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197477
IP address blocks: 2a0d:b084::/32 maxlen: 32
2a0d:b085::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:14:9c:e3:14:f7:6e:e7:2d:58:54:ce:d7:33:5e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=993e814676f32f264771c7ad767a4df87d3c63e2
Validity
Not Before: Oct 6 11:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b842c797dd326e404e0a88ec74726ee0ec03178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:48:ec:f6:e7:ae:82:4b:ac:c3:03:43:52:
56:55:79:cf:2c:7b:1d:fc:78:9b:3f:7d:44:52:59:
5d:a1:a5:ba:16:c3:17:59:22:14:15:06:b1:7b:7c:
0a:53:2e:d7:cc:b8:b6:d3:27:6e:c1:fc:a3:d1:24:
89:bb:65:8d:cc:4a:0e:7b:7e:3c:d3:10:c1:8f:aa:
14:57:01:c1:8c:ea:92:53:ae:4d:39:01:c8:b7:ed:
6b:2c:76:5d:bb:1b:c3:e6:f5:43:e6:56:9a:09:17:
18:a7:05:3e:69:1b:f9:4b:e4:1f:e5:26:ce:75:f6:
72:bd:32:54:cf:81:05:0a:6b:48:5a:30:2d:75:1f:
51:a8:b0:8b:0b:11:77:bb:30:b2:34:c6:93:44:eb:
9a:74:40:2a:c5:e2:6e:e2:b0:37:3e:23:1b:47:87:
05:54:23:dc:69:e8:37:86:45:cd:b4:4b:c8:76:4e:
94:9a:78:5a:89:09:18:5b:05:39:99:0c:06:8f:a4:
36:d1:dd:03:f7:c5:8e:9c:b2:70:92:23:fa:b6:bb:
d7:cb:53:65:ce:26:4d:c0:67:6d:c8:53:23:4c:75:
82:d4:f8:c9:dc:c5:41:cc:f5:c2:b6:a1:fc:19:34:
1b:0b:f8:bb:ce:e1:61:df:1c:df:8f:17:71:83:d4:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:42:C7:97:DD:32:6E:40:4E:0A:88:EC:74:72:6E:E0:EC:03:17:8F
X509v3 Authority Key Identifier:
keyid:99:3E:81:46:76:F3:2F:26:47:71:C7:AD:76:7A:4D:F8:7D:3C:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT6BRnbzLyZHccetdnpN-H08Y-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/uELHl90ybkBOCojsdHJu4OwDF48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c321f5-d611-4218-af1f-48cb0fcb90c3/1/mT6BRnbzLyZHccetdnpN-H08Y-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b084::/31
Signature Algorithm: sha256WithRSAEncryption
1d:51:43:2b:ed:5f:42:80:b4:b8:0e:fc:07:c9:70:80:b0:de:
29:c9:0c:29:4e:f5:55:73:ff:bb:f6:6a:0d:ad:c3:23:0c:5d:
1f:00:ff:26:0e:5b:1d:eb:41:00:7f:d0:b0:0c:02:93:10:ef:
4c:a5:78:e8:f9:eb:53:9a:ec:e0:b5:fa:20:27:2a:25:ef:e4:
09:42:c3:59:51:a3:65:ed:eb:4d:8c:7d:ef:f5:63:8e:11:3b:
5a:e1:d4:2b:f9:eb:46:4f:57:5e:a2:0a:00:f2:12:e9:25:24:
27:33:c1:a1:80:43:b3:79:39:e3:d4:32:5b:37:1e:2f:5e:1a:
32:d4:32:83:e6:8e:66:66:bf:aa:ae:1b:ef:42:50:0d:0a:52:
1f:23:9b:21:2c:78:37:7b:c7:d2:5d:35:97:2c:77:48:4b:c8:
02:94:29:48:86:72:f0:62:da:d7:1b:1a:d0:ec:fc:52:e0:aa:
18:e3:6f:1f:7f:06:8e:4d:8b:51:77:48:9c:16:9d:cf:77:8a:
52:0f:f2:68:ed:d3:e7:19:cd:e4:b8:86:73:79:41:8e:c6:51:
f2:f0:cc:cc:95:28:df:4a:95:64:6a:70:d3:07:14:65:8e:90:
e6:34:5e:9f:c5:07:1d:2d:c9:8d:5b:dc:0a:48:49:fd:e6:39:
a6:e7:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:10 2026 by rpki-client