Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0uqRZr6v_jrjXatTb4SsQJ3J0NI.roa
File: 0uqRZr6v_jrjXatTb4SsQJ3J0NI.roa (raw, json)
Hash identifier: mEtaYzFz64uHH/knv2+5oQUEw/nivDP/WUEkaCMUL8U=
Subject key identifier: D2:EA:91:66:BE:AF:FE:3A:E3:5D:AB:53:6F:84:AC:40:9D:C9:D0:D2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0E6FB9B42D011D9F010DE9286022FB35A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0uqRZr6v_jrjXatTb4SsQJ3J0NI.roa
Signing time: Mon 28 Sep 2026 07:47:23 +0000
ROA not before: Mon 28 Sep 2026 07:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213999
IP address blocks: 95.214.251.0/24 maxlen: 24
171.22.109.0/24 maxlen: 24
171.22.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:fb:9b:42:d0:11:d9:f0:10:de:92:86:02:2f:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 28 07:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2ea9166beaffe3ae35dab536f84ac409dc9d0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:58:f3:23:fa:5d:a0:2b:7b:91:28:46:58:
8a:63:63:69:ac:26:29:97:7c:a3:5d:ed:16:0c:f3:
8a:10:a8:c4:24:19:cc:9b:21:1d:c7:73:8f:63:b9:
8c:df:37:71:31:e1:c2:28:82:69:8d:b0:09:10:b5:
a4:c7:e1:d7:93:28:65:92:9f:0e:c8:d2:dd:ab:7c:
1e:91:21:df:3e:15:f2:fe:96:81:67:a0:a4:2f:13:
69:3d:01:60:29:b5:a8:ae:79:8b:9b:cd:76:ae:43:
36:a2:81:98:35:52:16:df:96:72:0c:23:3f:97:44:
4c:82:a0:37:82:71:d3:de:de:f9:54:98:91:ee:9f:
b9:de:50:33:80:43:6d:f3:a8:2d:62:97:7a:59:09:
cf:09:62:39:02:96:78:83:74:bf:c8:1d:92:19:f7:
c4:0a:98:2a:ec:bc:e5:99:5b:26:eb:07:2f:20:fa:
69:dc:0e:3b:fe:3e:18:3f:93:28:45:25:14:49:fd:
fd:5a:a8:04:27:b0:39:d5:31:14:5d:c6:c9:cc:02:
db:53:1f:80:bc:ab:48:81:36:6c:62:85:c0:52:d8:
99:e7:29:b1:45:c0:a6:4d:9f:29:0b:81:47:a4:00:
9a:4c:a3:3a:75:0e:29:0c:2c:22:a0:7a:1d:03:5d:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EA:91:66:BE:AF:FE:3A:E3:5D:AB:53:6F:84:AC:40:9D:C9:D0:D2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/0uqRZr6v_jrjXatTb4SsQJ3J0NI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.251.0/24
171.22.109.0/24
171.22.121.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:11:57:18:4e:dd:33:9c:e8:40:e1:ae:17:98:a9:e8:f0:41:
6c:c0:02:9a:b2:6a:84:e0:a4:f7:3b:e5:de:9a:bc:5c:dc:19:
77:66:d2:b1:92:a7:66:1f:cc:4e:51:79:9a:33:cf:10:42:da:
52:f8:84:3a:7d:3d:99:5e:10:26:72:9d:62:39:c0:72:d9:36:
ea:fa:01:9a:4d:12:06:23:c6:2b:79:19:d9:46:5e:e1:c4:72:
08:71:a9:66:8b:57:4f:75:3c:0d:48:24:18:74:4f:89:c6:7f:
a4:df:14:1d:55:96:28:2f:d0:c8:7a:4d:e4:63:36:16:3d:b9:
bc:5e:13:bf:92:90:f0:10:dc:a2:5f:a5:96:6d:5f:ba:e4:f8:
5d:8d:59:2b:8f:3a:55:43:1d:90:db:74:fe:67:4e:1b:fb:55:
b9:4b:86:d9:b9:c5:7d:f3:a1:7c:ce:a4:3c:d5:68:4a:7b:c1:
f9:a1:22:ac:cb:db:05:70:ba:c9:64:34:f0:26:52:98:94:93:
ec:0e:fd:11:19:05:dc:bb:cc:70:f7:5f:c5:ee:ee:15:fe:67:
23:e7:92:fe:a6:c2:40:d4:9a:8b:2a:1b:3e:2e:af:68:40:56:
94:be:7e:19:38:e0:85:8e:0f:29:c6:93:49:52:f5:26:3c:35:
aa:1a:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:06 2026 by rpki-client