Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/uFmKQIOM22Gf0n9NsjnDx0c77jY.roa
File: uFmKQIOM22Gf0n9NsjnDx0c77jY.roa (raw, json)
Hash identifier: fUJaWhjz/0nSENjm+Jnurdoq9gCX5ybznrqsrDoG2QQ=
Subject key identifier: B8:59:8A:40:83:8C:DB:61:9F:D2:7F:4D:B2:39:C3:C7:47:3B:EE:36
Certificate issuer: /CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Certificate serial: 019F9DA3A3E6C9196D3C653CB5192CA96661
Authority key identifier: 1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/uFmKQIOM22Gf0n9NsjnDx0c77jY.roa
Signing time: Sun 26 Jul 2026 08:56:14 +0000
ROA not before: Sun 26 Jul 2026 08:56:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 213.187.148.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a3:a3:e6:c9:19:6d:3c:65:3c:b5:19:2c:a9:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ba51a0bc0f0afebbf6d5d927fe1f9816f52352d
Validity
Not Before: Jul 26 08:56:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8598a40838cdb619fd27f4db239c3c7473bee36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:16:47:20:d3:d9:fa:2b:d3:22:6b:4d:35:8c:
6f:95:3f:a4:ea:ab:2d:cc:24:38:ec:b1:eb:ad:56:
b0:3e:59:ee:ef:3a:66:76:4f:2f:dc:ff:b5:47:20:
69:37:58:21:ec:0b:ec:ab:af:23:24:ef:2d:62:c1:
f9:54:57:be:4d:b0:1c:f0:ca:cc:0a:f8:40:1f:b9:
ca:0f:38:94:49:bf:d9:d6:50:1b:9d:ce:e8:a1:87:
66:b5:1e:74:f0:8f:d8:cd:0d:98:d4:fa:d0:d0:d3:
3c:4e:e0:de:4e:46:9f:39:bb:cf:5c:2e:00:5c:4f:
1c:34:be:2d:82:f7:83:a3:56:89:ee:5e:cd:6b:ba:
91:7c:0b:fd:2b:07:e0:5f:12:47:8c:b1:19:59:ff:
81:6a:cf:7b:bc:1b:35:9f:c2:22:49:b1:0f:83:91:
f0:98:c5:43:af:f5:f3:5a:84:67:c6:96:1d:c6:35:
99:b0:32:94:72:34:93:df:a1:28:f9:85:e7:c2:e4:
88:4e:1b:1d:54:dc:90:51:58:c5:c5:60:b2:ea:b3:
a3:a6:29:36:ba:14:0d:4e:85:6a:fc:88:dc:ed:93:
cf:c6:88:6a:5f:ad:06:5c:92:c9:a0:ba:26:82:e2:
be:c9:52:72:d9:11:8d:14:ac:6f:4b:24:b5:c0:35:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:59:8A:40:83:8C:DB:61:9F:D2:7F:4D:B2:39:C3:C7:47:3B:EE:36
X509v3 Authority Key Identifier:
keyid:1B:A5:1A:0B:C0:F0:AF:EB:BF:6D:5D:92:7F:E1:F9:81:6F:52:35:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/uFmKQIOM22Gf0n9NsjnDx0c77jY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4f211e-79d7-4504-9ead-871f9ed708e0/1/G6UaC8Dwr-u_bV2Sf-H5gW9SNS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e9:3b:38:11:72:c9:52:e8:53:1d:c4:bd:7f:58:ae:6b:c5:
93:f9:fc:d3:14:6c:8a:6c:8a:b3:6e:6c:1a:fb:8d:08:43:06:
b3:f9:1d:45:3f:95:6c:e4:db:31:b4:a6:44:04:89:03:d3:c2:
31:af:7d:e3:a7:bb:a6:24:69:67:e3:5a:c5:8a:6b:a5:5e:30:
d0:7e:21:2f:62:41:0d:13:cf:16:e2:44:5b:ba:e1:b3:fe:27:
0c:7f:44:2e:d2:03:1d:56:51:e7:01:a4:d2:28:50:4c:7c:a5:
16:66:98:6f:83:80:e8:f9:c9:24:3d:73:8b:32:f1:40:4e:4b:
32:05:2c:3d:fc:b2:eb:67:a5:9f:c7:cb:2b:bc:b2:b8:32:cc:
8b:5e:a8:dc:20:b1:09:5d:14:e3:a4:f6:41:24:0d:35:49:c3:
20:a9:da:f4:fc:49:cf:bf:8e:c3:6d:f0:4d:b0:2f:9f:93:5f:
29:0b:eb:71:06:27:48:e3:37:72:55:ae:97:d5:03:09:fb:a5:
f3:3d:ee:30:39:ab:13:61:43:f5:16:06:e3:d2:b8:bf:f5:98:
e6:e7:80:6c:e7:29:ea:96:6c:48:a6:0e:c6:7b:34:c8:52:3b:
73:2f:6a:65:c2:3b:bf:80:26:27:c4:78:66:23:46:5f:f7:2b:
24:4f:f1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 21:17:34 2026 by rpki-client