Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/Uy2quz5thSflllLWbATQ_ZVuJuE.roa
File: Uy2quz5thSflllLWbATQ_ZVuJuE.roa (raw, json)
Hash identifier: I+yc+6htXadss+jR6eavrRviFRjxSW4+i+rNKZb+b0I=
Subject key identifier: 53:2D:AA:BB:3E:6D:85:27:E5:96:52:D6:6C:04:D0:FD:95:6E:26:E1
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A1136E1D3F50C8FBC41AE0CEA70B385D84
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/Uy2quz5thSflllLWbATQ_ZVuJuE.roa
Signing time: Tue 06 Oct 2026 22:55:45 +0000
ROA not before: Tue 06 Oct 2026 22:55:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219147
IP address blocks: 2a0e:e001:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:6e:1d:3f:50:c8:fb:c4:1a:e0:ce:a7:0b:38:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Oct 6 22:55:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=532daabb3e6d8527e59652d66c04d0fd956e26e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:89:1c:85:fe:4f:d1:23:a9:80:5c:5d:1a:7f:
1c:e5:ff:ad:b7:90:b6:e0:26:f3:2c:a7:76:7d:65:
15:c4:38:8e:cb:d7:41:cb:7c:84:39:6a:9f:06:8b:
6a:6f:03:94:8f:f1:b4:e4:41:f8:21:89:79:e9:a0:
a9:b3:a8:6b:e4:7a:71:90:da:79:93:f6:14:55:96:
93:67:cf:81:56:c6:61:b1:54:e5:21:22:d0:29:ff:
51:f4:13:00:cf:68:45:eb:c3:6f:5e:e0:0c:6d:b3:
1f:13:87:a0:08:87:1f:ee:6d:98:26:56:d2:9e:f2:
d6:12:6e:80:18:ed:a0:18:64:0e:b5:75:3d:c3:84:
41:6d:cf:ea:7b:7a:f6:70:60:10:a2:ce:6f:64:c1:
18:61:fc:70:d1:ca:02:48:6e:45:44:4d:43:29:06:
23:ff:6c:55:0f:5d:c7:e6:52:ce:cf:ee:34:00:c0:
73:89:d0:a8:f8:15:1b:64:c0:9e:37:10:b6:32:a0:
07:4c:d9:8b:54:82:c0:88:09:3b:0f:87:64:27:8e:
da:a5:cf:c4:21:58:81:d8:64:a0:79:a4:d0:16:03:
22:8c:f7:6b:fa:ef:ba:f6:a4:ab:fd:02:02:36:54:
60:45:20:95:3c:2d:68:7f:16:c3:20:45:02:53:8d:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2D:AA:BB:3E:6D:85:27:E5:96:52:D6:6C:04:D0:FD:95:6E:26:E1
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/Uy2quz5thSflllLWbATQ_ZVuJuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e001:10::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d4:9e:62:be:68:19:6f:35:f1:60:74:ec:0b:c6:9d:5b:89:
0f:b6:2e:92:fa:de:72:08:b3:5a:8c:82:83:7d:9b:9e:74:57:
53:da:1c:f7:d9:b8:f1:b2:8c:d1:42:7c:a5:99:06:1d:09:4b:
34:b5:bf:e0:9d:63:1b:5f:59:b7:e6:d8:c5:dd:a6:99:cf:ca:
09:b0:68:6c:0b:2e:3b:99:04:aa:6b:50:46:26:ba:01:a1:2f:
45:8d:a7:51:67:41:3d:0e:a3:b7:d8:6b:6a:f0:4d:8c:a5:e6:
0a:4a:80:68:37:c3:d6:a8:93:a8:78:47:0a:81:ab:14:b4:a9:
a0:e4:04:a8:99:ef:9d:89:da:ae:af:e7:6c:19:b7:91:33:af:
f9:dd:f4:11:78:fe:05:7d:4c:20:ec:01:70:15:dc:ad:15:10:
40:6c:07:eb:ac:84:dc:a3:9e:7f:d3:f1:a1:98:3a:b8:af:a9:
f3:77:b8:91:95:10:8f:8a:b6:8f:ed:6f:4d:27:4d:f1:3e:3a:
5b:22:5e:b0:7c:f3:64:96:c5:75:e6:dd:56:72:6a:39:76:d8:
49:ba:c9:69:8a:c2:63:d4:ab:0a:f4:1b:a5:5c:de:f1:0c:41:
0c:c2:51:6e:6a:2b:b7:af:09:5f:59:af:74:e7:1a:52:d9:69:
e6:2a:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:32 2026 by rpki-client