Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa
File: UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa (raw, json)
Hash identifier: 0Pi09oTT2Bs/Jp2BUgsBTNW54DORQjFSQtJ6rpxdYR0=
Subject key identifier: 51:39:76:A0:49:CC:E9:A0:85:DA:4A:41:EC:57:FD:0E:35:32:D3:A1
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01A04C772764BCC7EF56392190D9D6B19FDC
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa
Signing time: Sat 29 Aug 2026 07:41:12 +0000
ROA not before: Sat 29 Aug 2026 07:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12679
IP address blocks: 212.8.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4c:77:27:64:bc:c7:ef:56:39:21:90:d9:d6:b1:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Aug 29 07:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=513976a049cce9a085da4a41ec57fd0e3532d3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:20:5b:d5:8a:1e:ea:fc:b9:30:b7:4a:7e:
fe:c9:5c:66:03:9e:2d:88:bf:cb:46:2d:11:a2:27:
46:a4:17:6d:83:25:36:51:e7:2d:19:f7:99:83:27:
85:e7:66:1c:6c:24:60:b5:11:48:1f:75:74:bf:98:
2c:09:1b:4d:db:0c:3d:a5:52:d7:b7:25:52:95:25:
26:d3:05:3f:fe:da:d7:12:c1:56:46:3b:2c:ed:a0:
6d:78:05:8c:a8:cb:49:0f:c3:57:c8:d3:3d:6a:db:
57:a1:64:b7:6e:74:27:7c:3f:a5:30:8a:d9:6a:f8:
43:34:b2:1a:f6:63:b6:04:b5:d2:77:68:ae:7a:4c:
03:24:d2:26:f9:26:94:94:ce:fb:3c:9d:83:ca:05:
08:67:a8:8a:09:85:e8:af:d3:ec:ad:90:33:b1:ed:
6f:8b:da:9b:81:d8:93:86:21:2e:38:22:24:4a:f9:
79:42:13:18:d3:7d:9e:f1:9c:0f:f5:42:eb:7b:19:
5f:5d:c3:a1:dc:38:c7:c0:1f:7d:d9:f1:63:51:61:
95:93:b2:87:40:d7:c0:b5:72:a6:aa:81:2e:db:b1:
c1:ec:83:ab:2d:47:27:0f:c3:62:da:9b:47:97:cf:
e3:ab:39:d2:4d:04:52:19:9a:05:ba:0f:df:ff:60:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:39:76:A0:49:CC:E9:A0:85:DA:4A:41:EC:57:FD:0E:35:32:D3:A1
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/UTl2oEnM6aCF2kpB7Ff9DjUy06E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.8.224.0/23
Signature Algorithm: sha256WithRSAEncryption
15:f5:fa:30:90:93:a8:23:59:e3:24:b0:7f:7f:48:70:ec:68:
ab:1e:6e:aa:ac:ba:90:48:bc:97:83:72:75:1c:f5:95:a6:d7:
82:c1:e9:24:03:50:9f:98:a8:e7:e4:fa:ca:37:16:3d:08:fa:
8d:a5:24:3f:05:70:5e:2c:85:da:1b:53:8f:2b:e3:a8:5a:7d:
13:66:f1:dd:e1:8f:61:37:84:23:34:3e:60:3d:ce:ce:5f:b5:
d0:8e:89:b1:fe:6b:1b:82:2b:ea:d1:d6:1e:15:a2:d7:eb:30:
db:4a:2f:78:77:f3:72:43:bd:36:73:92:9e:bc:8a:9d:0c:24:
1e:06:fc:ae:76:10:ca:8b:c2:0a:29:65:bb:95:23:ca:35:15:
fc:ce:3a:16:a0:ba:2b:13:2f:6a:94:c4:57:83:c4:46:d0:5e:
e7:8b:5c:d2:17:36:8f:05:34:b2:57:e8:8b:42:29:db:a7:a7:
30:35:c7:41:95:fc:a8:8e:d7:e5:95:fa:73:2d:75:e0:2e:64:
15:98:a8:26:7b:c0:5f:59:9d:3c:27:5c:2e:2b:6b:29:fa:2f:
4e:59:44:78:21:76:77:d1:54:53:3a:75:15:c3:7d:95:47:85:
49:f2:3e:63:71:8f:5c:ee:ce:02:85:5f:6c:39:d9:92:22:d7:
e6:4b:38:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 19:31:48 2026 by rpki-client