Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ugZw9OpkemL6tPjpeSZpoR7PlxU.roa
File: ugZw9OpkemL6tPjpeSZpoR7PlxU.roa (raw, json)
Hash identifier: 1VtK029vPkKfYQK+T/xSbkQOFcdZqNBLwk2TT4eg+fM=
Subject key identifier: BA:06:70:F4:EA:64:7A:62:FA:B4:F8:E9:79:26:69:A1:1E:CF:97:15
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A14EF4E513DBEC3CBF3FF4B636B393A581
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ugZw9OpkemL6tPjpeSZpoR7PlxU.roa
Signing time: Sun 18 Oct 2026 12:20:34 +0000
ROA not before: Sun 18 Oct 2026 12:20:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59956
IP address blocks: 94.131.200.0/24 maxlen: 24
94.131.201.0/24 maxlen: 24
94.131.202.0/24 maxlen: 24
94.131.203.0/24 maxlen: 24
192.162.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:f4:e5:13:db:ec:3c:bf:3f:f4:b6:36:b3:93:a5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Oct 18 12:20:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba0670f4ea647a62fab4f8e9792669a11ecf9715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:c1:5a:4b:00:58:1d:48:72:e4:e9:71:a2:
d7:2c:6c:f9:24:3f:db:57:41:94:2b:18:04:03:93:
3f:dc:d7:12:55:12:42:75:ca:1e:74:32:86:80:88:
8a:a3:20:d7:99:0e:5a:9a:71:30:6d:59:dc:f5:44:
b5:45:fd:61:d6:1e:87:b0:13:a6:55:98:22:96:c8:
44:ad:43:5e:47:3a:ca:74:d0:cb:84:5d:cc:d8:9f:
26:3a:c7:a5:e3:52:03:da:90:a7:87:26:18:c3:83:
29:0b:33:ef:4a:03:86:84:c1:85:a8:ed:84:c1:5f:
d7:0e:d3:1d:ca:90:c1:86:aa:f5:6b:6a:0c:7f:b0:
54:d2:f6:07:4b:e6:26:dc:37:82:81:9f:d1:a7:d5:
f9:b9:1f:1d:0b:3a:81:14:d8:db:57:a7:3f:d3:50:
01:eb:25:b6:b2:6a:1f:fc:5e:8e:ca:c2:94:8a:84:
be:9a:32:64:42:be:77:6e:67:56:26:43:ce:24:fc:
33:c6:c4:2a:a3:af:ff:56:5a:3c:4b:3b:62:c0:38:
cb:2e:2e:5f:dd:ad:1e:9a:4b:6a:41:2b:a1:23:70:
b6:e7:84:64:53:1a:b5:5a:d5:f2:7a:0f:d8:54:f8:
c1:00:bb:3d:06:96:8c:76:e0:00:6d:46:88:23:e2:
3c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:06:70:F4:EA:64:7A:62:FA:B4:F8:E9:79:26:69:A1:1E:CF:97:15
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ugZw9OpkemL6tPjpeSZpoR7PlxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.200.0/22
192.162.198.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a2:22:fc:8f:c7:1f:45:a9:73:85:15:8a:84:92:47:85:15:
ea:99:96:a7:54:25:41:e0:2c:e3:3f:4e:f3:d6:b0:0a:04:22:
2a:42:23:71:bd:d5:fb:da:24:44:41:75:f7:d2:61:62:00:10:
ba:a9:41:03:0a:d5:62:52:33:6f:bd:9f:76:31:86:ca:12:c9:
49:4e:75:d0:6a:88:be:9d:d8:1d:d4:41:e0:88:ef:90:c4:2f:
38:92:ec:b5:4a:f0:05:58:6f:ce:21:58:38:fe:8c:b8:cf:d0:
47:72:71:b3:e9:80:ba:d9:8b:37:d4:c4:4e:17:82:ab:27:a2:
df:91:53:dd:7e:d0:2f:b9:7b:03:bb:6b:5b:5e:1e:71:d0:bf:
f0:7a:45:88:5c:71:20:43:e0:35:30:6a:1e:9d:11:a7:a9:f5:
74:37:8e:1e:a4:9c:b4:56:dc:e6:80:7f:c3:bd:60:b2:c3:e9:
9c:6f:f1:64:22:f8:17:0d:4b:80:66:d3:75:83:74:ea:d8:94:
fe:30:88:97:d3:bc:1f:8c:de:74:07:93:24:0a:21:cd:bf:96:
ad:81:d0:c1:eb:a0:fb:42:7b:0b:7b:4a:38:e6:95:10:e5:1a:
13:93:3e:40:41:9c:69:c8:b2:e9:37:16:95:cc:26:ec:6a:da:
fa:6d:db:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:56:28 2026 by rpki-client