Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/uqa1tyxWj6cFaANZUIcESG1vArI.roa
File: uqa1tyxWj6cFaANZUIcESG1vArI.roa (raw, json)
Hash identifier: vTGoqUA5XDYJlnJpWHgE1fB7R+WNNBHqxw/ULLm7ImA=
Subject key identifier: BA:A6:B5:B7:2C:56:8F:A7:05:68:03:59:50:87:04:48:6D:6F:02:B2
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 019C7747FFC59C0B79220F2C409757EFFBC1
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/uqa1tyxWj6cFaANZUIcESG1vArI.roa
Signing time: Thu 19 Feb 2026 19:02:13 +0000
ROA not before: Thu 19 Feb 2026 19:02:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 185.165.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:47:ff:c5:9c:0b:79:22:0f:2c:40:97:57:ef:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Feb 19 19:02:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baa6b5b72c568fa705680359508704486d6f02b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:1b:85:07:70:b5:4c:f5:2d:14:3e:83:6b:
62:05:d4:0f:56:38:a9:f4:ab:31:f3:41:00:55:99:
e4:aa:ac:41:0f:e0:b3:39:eb:e6:76:8d:fa:96:fd:
26:48:75:63:5f:33:70:bb:d7:0a:af:59:87:c2:f8:
12:45:22:93:46:b1:cf:e5:fb:6c:53:b3:3c:61:e4:
96:72:d7:84:6c:a0:26:9f:1f:94:f6:4c:23:e5:16:
12:2c:87:a8:6c:04:2b:9b:66:67:ea:43:e0:77:96:
4e:84:1d:1c:05:16:5b:93:46:64:7c:14:79:e2:50:
b5:bc:8b:b3:0a:53:95:9a:a3:09:ce:02:3b:e9:84:
05:be:3f:83:5a:3d:e5:6a:0e:6b:1d:ce:06:2a:e1:
74:d7:f1:3c:6b:ed:ad:7c:ec:b0:16:07:4b:0b:7b:
84:9b:8d:6c:59:a3:3d:32:2f:23:9a:b3:ec:6d:1f:
25:e6:58:f5:23:99:07:38:6f:09:dd:25:93:cf:c0:
70:2d:5b:b3:71:f8:63:d6:23:ca:48:fb:1b:95:a2:
25:35:33:71:63:ab:25:ab:1b:d7:24:99:52:a7:34:
a0:34:7c:9e:67:70:b1:b6:b4:24:78:b5:ca:48:e4:
9e:69:a9:68:d7:94:48:6c:74:1b:9e:5b:bc:bd:23:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A6:B5:B7:2C:56:8F:A7:05:68:03:59:50:87:04:48:6D:6F:02:B2
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/uqa1tyxWj6cFaANZUIcESG1vArI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.47.0/24
Signature Algorithm: sha256WithRSAEncryption
83:03:da:3c:3d:17:0d:58:eb:65:b3:12:50:4b:2f:36:c8:ef:
2f:2c:9b:fa:68:4d:aa:5b:08:2f:bf:e1:0a:30:23:c4:e8:76:
0a:0d:5f:de:b8:db:30:ca:72:76:02:b3:9e:36:65:7f:94:72:
0d:bf:31:16:f5:1f:36:09:14:61:61:50:5a:76:f5:fd:fc:98:
7a:f4:d9:ae:cd:36:a2:7d:1e:01:69:af:94:da:a6:c7:54:4d:
16:6e:f4:32:94:fa:ed:ba:ab:d7:a0:7a:ce:82:a7:75:46:f4:
f1:08:da:88:0e:79:cd:94:eb:01:d5:aa:e2:6c:8f:97:6e:68:
bb:21:36:ac:61:f9:c0:54:9a:28:1f:59:4f:b3:35:6d:43:79:
88:de:e0:af:a9:ba:f9:29:9a:fd:21:77:17:2e:67:8e:9e:af:
63:e6:3c:7a:19:13:8a:4b:1e:06:d0:2e:5d:f2:b3:c5:0c:3f:
9f:5b:5c:b7:2c:13:9f:bc:6a:36:94:58:b8:46:67:72:7d:0e:
d3:7c:a4:eb:4b:35:38:a1:97:c5:b2:5b:33:6d:83:9f:71:3b:
be:fb:ae:24:3a:1c:7c:bc:0e:13:60:80:8a:29:f1:a3:7e:99:
4c:7d:17:dd:1c:25:06:a7:e6:1e:c0:e3:75:95:63:d4:41:51:
54:b2:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:33:07 2026 by rpki-client