Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/UWfHZ9Gky2-IAfOocDOcarqgZeI.roa
File: UWfHZ9Gky2-IAfOocDOcarqgZeI.roa (raw, json)
Hash identifier: 6qWgFN9WGxLXXO86E6BAVpLxxavFCmvp7KLDu4mJ5Rs=
Subject key identifier: 51:67:C7:67:D1:A4:CB:6F:88:01:F3:A8:70:33:9C:6A:BA:A0:65:E2
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A0F794CB8A55A1417E13DDF3EE2CE6F8F4
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/UWfHZ9Gky2-IAfOocDOcarqgZeI.roa
Signing time: Thu 01 Oct 2026 13:08:38 +0000
ROA not before: Thu 01 Oct 2026 13:08:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403005
IP address blocks: 46.151.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:94:cb:8a:55:a1:41:7e:13:dd:f3:ee:2c:e6:f8:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 1 13:08:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5167c767d1a4cb6f8801f3a870339c6abaa065e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e4:7d:02:61:38:40:d1:d6:06:cb:12:a6:e7:
0c:b9:6c:c3:be:35:d5:8f:ed:d9:bd:af:6f:53:cf:
dd:b2:cf:32:a6:0a:0c:7b:f5:c7:ea:ae:34:1f:45:
c8:73:57:e9:0a:18:8a:c7:5d:6f:89:c2:c3:d9:ac:
00:b2:12:55:de:a2:dc:7b:e6:22:e2:d4:c0:67:25:
11:ec:11:55:9a:d7:66:89:0c:fc:77:04:49:54:61:
06:62:df:05:96:89:88:ff:7f:51:fc:81:e2:6b:e2:
76:95:94:92:87:4a:b1:bc:ba:6a:80:88:87:a5:69:
ce:74:01:2c:a0:6b:f5:5f:2d:0c:73:a0:34:ec:3e:
2b:21:71:43:7e:8e:96:0f:91:6a:d6:14:fe:8f:45:
8f:50:96:07:fb:88:b6:3f:4c:41:c3:5b:f0:e7:46:
9c:42:37:82:60:21:5c:da:31:e8:6a:d1:90:a5:46:
87:de:e8:94:b3:86:00:43:59:1f:92:79:d2:86:49:
7f:8b:66:5c:a0:e3:f3:ca:94:14:f1:3d:6e:4b:94:
51:36:61:45:75:43:37:47:f0:4b:17:72:57:2c:c2:
77:49:96:9e:27:58:b2:bb:4d:d4:84:58:85:3a:d2:
c4:5c:19:2a:63:38:b4:65:b7:77:ca:2f:0e:0f:43:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:67:C7:67:D1:A4:CB:6F:88:01:F3:A8:70:33:9C:6A:BA:A0:65:E2
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/UWfHZ9Gky2-IAfOocDOcarqgZeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.182.0/24
Signature Algorithm: sha256WithRSAEncryption
51:02:ed:57:4e:a7:15:0f:ee:a7:11:7f:4f:49:45:40:f6:da:
16:7b:b1:bc:bd:7b:5a:8f:42:1b:5e:bd:b9:93:15:be:22:d0:
fd:69:0c:85:78:78:e9:57:6e:2e:5f:92:8d:9c:5f:9b:38:56:
9e:44:60:e3:e4:c2:0f:15:8f:e8:3d:45:6e:8a:cd:b9:f1:8e:
94:e0:3c:83:7d:d1:69:6a:83:4e:41:c1:33:4a:c1:83:59:f6:
ca:9c:27:99:27:ab:8f:cb:f6:a7:5e:1c:37:d2:6e:dc:f3:1e:
94:61:c7:ba:76:a7:03:0b:0d:a5:4f:58:60:4f:4d:b5:2a:48:
89:12:ce:99:f3:eb:3d:b2:60:23:cd:6e:88:4c:2d:5f:ca:81:
f2:a1:1f:19:b2:33:fe:d4:e1:b3:0f:82:4d:59:aa:bc:78:21:
4d:0d:37:3e:43:1f:a1:2d:3e:d8:c2:09:9e:ef:5c:38:82:fa:
46:2d:91:46:c4:a8:4a:b7:3f:76:b4:f2:74:b7:48:62:b7:99:
cd:3a:be:79:fd:32:65:04:c4:b3:44:de:ae:25:de:26:e8:ce:
b6:2a:8b:84:f9:8f:bc:14:6a:21:51:23:62:c1:01:ff:35:ac:
b2:25:d4:3d:5d:6d:f7:84:10:fe:54:1a:92:79:0b:58:ae:85:
02:82:a2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:50:30 2026 by rpki-client