Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uqNGUAToRdOzuJEksT1x1pEfSSE.roa
File: uqNGUAToRdOzuJEksT1x1pEfSSE.roa (raw, json)
Hash identifier: oTqQhgWD2DjJlNOejDmQvS8XkQpqECFBtpt/vT6ORc0=
Subject key identifier: BA:A3:46:50:04:E8:45:D3:B3:B8:91:24:B1:3D:71:D6:91:1F:49:21
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A00A73AE2E9B89125A9108342BB082E008
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uqNGUAToRdOzuJEksT1x1pEfSSE.roa
Signing time: Sun 16 Aug 2026 12:02:28 +0000
ROA not before: Sun 16 Aug 2026 12:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214731
IP address blocks: 87.86.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0a:73:ae:2e:9b:89:12:5a:91:08:34:2b:b0:82:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 16 12:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baa3465004e845d3b3b89124b13d71d6911f4921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:64:51:b4:fd:d4:42:3d:ee:fd:78:9e:7b:
89:70:6c:0c:f6:a6:40:5a:c8:fc:ea:0d:8f:92:66:
9d:70:f4:c8:1c:e1:cb:30:f1:4f:b9:6e:9f:11:74:
a4:03:b5:f8:0b:9b:0b:44:17:83:7a:01:d7:d1:b3:
00:0a:e6:34:43:c4:c5:f9:77:a7:03:ac:71:f2:30:
e6:40:83:00:5d:70:e2:e7:ab:c3:95:41:f4:52:25:
7a:eb:42:9b:bf:b6:23:7f:ef:a7:92:36:70:67:1c:
8e:e6:bd:b0:12:f4:fb:2d:6e:22:a2:b1:5d:5a:ca:
d1:9d:fe:f6:48:95:73:69:0a:a5:b0:9a:64:d2:d1:
ad:4c:98:7c:7b:e8:2c:c3:b0:e3:a2:26:b0:3e:56:
fe:38:f4:6e:ed:ff:72:5d:89:83:f2:14:4d:50:37:
8c:b1:01:1f:68:df:c8:f2:00:df:66:e5:03:11:46:
1a:52:f0:ad:a5:9c:90:32:b3:4b:61:01:9c:e4:5b:
78:b5:32:cf:b7:73:2c:7d:38:2b:1d:d8:a2:1f:5a:
f5:2c:f1:2f:67:cb:3e:db:83:c1:20:93:21:ac:ae:
50:4a:97:4c:5a:00:9d:f4:aa:d5:0b:3c:10:7d:47:
aa:7f:09:84:0c:07:c7:60:22:60:c6:eb:00:86:06:
e4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A3:46:50:04:E8:45:D3:B3:B8:91:24:B1:3D:71:D6:91:1F:49:21
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uqNGUAToRdOzuJEksT1x1pEfSSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.86.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0a:3e:9d:3c:2c:bf:58:af:16:0c:c9:ec:0c:df:1e:94:1d:
18:43:dc:f9:7a:eb:19:6d:3a:2a:e2:82:be:25:2e:9f:8b:38:
f6:e5:6c:aa:b5:92:da:5e:07:a7:43:45:55:15:a7:f9:9f:c9:
26:ed:8b:dc:c5:0d:7a:e8:4b:ae:5d:aa:05:f4:03:44:65:c3:
9f:35:b7:e2:c5:98:bc:53:7c:b2:0f:b1:f3:87:22:90:5a:71:
d8:95:29:3d:83:fc:42:1b:da:f0:90:c8:b2:18:d7:d9:62:61:
90:6b:3d:a2:b9:a7:2e:54:9f:78:3c:83:55:ac:d9:4c:90:81:
92:01:e2:bc:58:8c:40:a4:0a:34:3b:94:74:4f:5f:4c:00:9b:
77:ca:39:03:1f:f0:ac:eb:18:71:4f:63:04:c6:24:d8:37:57:
8b:1e:0d:e3:fb:8d:1b:07:91:71:ad:25:1f:45:3e:16:44:c9:
f3:11:f1:7c:96:21:f9:4b:c4:4d:a6:03:d2:a3:df:4c:1d:7c:
20:5c:f9:2d:2a:3e:88:cb:dc:ee:83:c5:e6:b7:a6:c3:81:26:
fb:97:98:6d:30:93:7a:06:8d:98:75:64:95:dc:4d:cf:1e:3a:
ef:02:6c:70:af:ce:b2:48:78:ef:0b:3a:aa:0f:3a:30:19:50:
92:2d:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:43:35 2026 by rpki-client