Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/up1zEmwsr4UewSJwCVlJIJ_n7tY.roa
File: up1zEmwsr4UewSJwCVlJIJ_n7tY.roa (raw, json)
Hash identifier: NUm9ibISZrUPLETjtapJYdNCpp/S4jJUYB0Y34lZ4c8=
Subject key identifier: BA:9D:73:12:6C:2C:AF:85:1E:C1:22:70:09:59:49:20:9F:E7:EE:D6
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019F7506E88544D00B918DC10CE822593F27
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/up1zEmwsr4UewSJwCVlJIJ_n7tY.roa
Signing time: Sat 18 Jul 2026 11:40:14 +0000
ROA not before: Sat 18 Jul 2026 11:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 45.14.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:06:e8:85:44:d0:0b:91:8d:c1:0c:e8:22:59:3f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jul 18 11:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba9d73126c2caf851ec12270095949209fe7eed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:73:06:23:db:64:c9:81:3e:9e:d5:07:29:
03:a8:05:4c:5b:16:d1:f6:84:96:c6:a1:67:fa:79:
53:31:3c:85:36:c3:ef:52:e1:12:8f:3b:51:c5:15:
25:ac:fe:66:5d:8c:1e:5a:10:bd:f6:c9:a6:34:60:
b6:ac:3d:a9:d9:fe:a6:92:82:f0:89:c3:1a:49:4f:
11:c7:b2:e2:7d:26:a8:b7:12:5a:43:35:b2:fa:4c:
d8:6f:c7:0c:07:f9:7a:93:d6:a7:07:a0:31:3c:78:
40:96:6d:11:94:a8:c8:25:b7:79:78:a5:51:ec:80:
89:fe:d2:2b:3a:02:87:cb:db:f8:7a:59:d9:29:28:
9f:55:77:57:ba:0b:e2:97:70:b8:ec:50:14:85:7a:
33:d2:bb:14:5b:77:48:8b:8b:b6:ad:dc:cf:ba:70:
d7:e3:ee:6c:e8:da:53:0e:7d:06:86:33:7c:ad:ce:
f3:2b:28:dd:f0:21:1d:c6:91:72:09:c0:e3:e9:86:
4d:14:ca:52:a6:8c:e8:90:56:91:53:03:d4:8b:b9:
5d:bd:e0:0a:ac:02:5f:9a:bb:1c:0b:c5:b9:49:55:
31:1e:5c:f5:4f:83:24:b0:99:53:9e:52:d9:3d:e2:
77:a3:ec:96:2c:a3:f1:75:e9:0b:c3:6b:35:81:84:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:73:12:6C:2C:AF:85:1E:C1:22:70:09:59:49:20:9F:E7:EE:D6
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/up1zEmwsr4UewSJwCVlJIJ_n7tY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.180.0/24
Signature Algorithm: sha256WithRSAEncryption
73:23:bc:7f:d8:0c:97:d3:dd:55:48:31:bb:de:5d:8a:99:d5:
f8:35:90:a8:c3:de:37:e0:34:7a:dc:93:ad:38:1d:4a:cb:c4:
3a:cc:0c:fc:86:36:81:56:50:c5:73:9b:c2:74:27:0d:19:61:
39:ee:ab:b1:31:24:1a:a4:b6:d4:a8:1d:ac:28:e7:5d:c3:2f:
7f:ba:86:b2:37:bc:1a:58:13:27:9d:d3:8c:90:ac:83:06:dc:
44:f7:a7:45:7f:52:29:73:34:f5:e3:de:fa:ff:a5:26:de:36:
cd:ba:e4:53:f2:eb:89:ef:61:d6:74:5e:b2:f1:b5:2f:c2:e8:
ea:4d:a2:58:1a:e8:ff:89:a5:80:4b:ce:45:b9:7b:53:b1:36:
33:5a:77:35:de:27:c5:9c:3c:42:22:42:ec:97:dc:32:78:4a:
78:d3:37:e3:a5:61:d7:ab:5c:15:3a:6d:55:cc:c4:dd:11:e9:
ca:a1:c1:6e:26:7d:bc:d6:33:45:20:c5:63:79:b7:df:a4:04:
9c:6c:1e:97:b7:df:c5:75:c9:a4:7a:4e:ba:00:11:40:39:2d:
f6:30:7c:73:53:fa:b4:bd:d4:61:30:d7:5b:b3:40:ff:04:e5:
28:42:07:32:8d:ef:54:7d:b9:5e:15:5a:47:15:cc:57:b1:ea:
14:4e:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:51 2026 by rpki-client