Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/uVHZnXyKAg2wuj00nAtOngR1JnA.roa
File: uVHZnXyKAg2wuj00nAtOngR1JnA.roa (raw, json)
Hash identifier: 835RTh47MU7AkQYMQUhdS8VZJUB8z4lvdCihw6n6I6A=
Subject key identifier: B9:51:D9:9D:7C:8A:02:0D:B0:BA:3D:34:9C:0B:4E:9E:04:75:26:70
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01A0E75D1E0F6E72047C097FC28CBC3B847E
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/uVHZnXyKAg2wuj00nAtOngR1JnA.roa
Signing time: Mon 28 Sep 2026 09:33:54 +0000
ROA not before: Mon 28 Sep 2026 09:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218566
IP address blocks: 62.76.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:5d:1e:0f:6e:72:04:7c:09:7f:c2:8c:bc:3b:84:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Sep 28 09:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b951d99d7c8a020db0ba3d349c0b4e9e04752670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:bf:15:e3:c2:bf:15:f6:bb:39:a2:ca:d0:
c0:22:4c:75:5a:a3:a5:1d:b5:42:ca:ad:13:be:5f:
1a:c7:af:22:c3:15:8c:8a:43:7d:9a:3c:56:6d:13:
b1:c4:c3:ee:95:1c:12:79:79:4a:b7:32:6f:5b:87:
51:68:81:ff:48:d9:f2:de:9e:99:3e:c2:88:d5:75:
29:0d:5a:ac:33:ed:99:13:7e:db:13:d0:fe:4f:be:
19:28:54:a5:99:9b:6c:32:b4:c4:24:0c:a9:cc:44:
0d:1c:6a:e4:3b:5b:d8:2f:7d:e4:81:5f:38:44:a0:
a5:59:28:1c:d5:e6:bf:fc:49:a2:d2:94:d9:65:05:
15:11:9d:62:aa:0f:ce:c6:d6:0e:3f:a0:ff:65:66:
90:f0:3f:68:76:1c:46:2a:9b:66:23:ff:74:17:96:
4c:dc:74:6f:f6:3b:a2:ad:f8:20:c5:da:a4:4d:64:
cf:7e:6d:ee:5f:41:cb:e5:3d:60:15:d7:72:da:02:
8d:f1:a9:7b:c1:ba:96:d6:00:cd:e6:37:b1:eb:7f:
6d:c3:55:2f:37:0c:e5:53:f2:95:9f:85:d9:57:e1:
f8:41:f6:67:04:62:2d:a5:bc:e4:10:2e:21:e4:c8:
3a:5f:39:ba:73:95:a1:55:02:44:7d:fb:07:8a:34:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:51:D9:9D:7C:8A:02:0D:B0:BA:3D:34:9C:0B:4E:9E:04:75:26:70
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/uVHZnXyKAg2wuj00nAtOngR1JnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:97:d4:a6:6e:f7:51:bb:b7:9b:20:21:fe:a0:34:26:53:46:
6c:02:8c:94:73:43:15:ac:ec:80:14:97:fd:37:d8:54:0b:9f:
1c:3d:38:9e:58:a8:33:77:47:5b:07:02:87:c8:13:4f:ee:c9:
f8:cf:51:7a:a4:ed:09:bc:cd:f5:c2:f3:89:a9:60:41:89:13:
30:92:11:ac:fc:a8:54:4f:ef:7d:57:d8:d3:a9:5d:bb:36:2e:
bf:be:9d:21:d4:df:99:47:c9:23:1a:bd:6b:f5:c2:e9:89:f0:
05:49:23:3f:60:a6:54:85:b0:f4:fb:28:37:bc:21:26:95:40:
a0:1e:ae:fb:fc:7b:da:f6:21:81:49:b7:59:d2:57:b9:78:38:
a6:b1:cc:1f:db:c1:32:32:3a:fe:0d:66:f2:e2:7c:00:7d:db:
1e:38:b4:06:7f:3e:15:28:40:78:4c:4b:86:03:13:de:90:69:
6b:72:59:19:9e:a6:6f:04:e4:65:bc:fd:d3:33:e1:db:90:77:
e7:01:ec:2b:44:4a:52:51:34:81:76:20:ef:ea:86:75:3c:ce:
e0:04:f8:45:17:41:66:25:b6:4a:f0:34:75:93:38:5a:46:ba:
87:c6:1a:e4:0e:8b:dc:7d:15:16:89:16:21:18:82:e2:d7:99:
d2:6b:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:50:19 2026 by rpki-client