Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/OR-UUzM73lSUM_hbKHEM8OHJZXo.roa
File: OR-UUzM73lSUM_hbKHEM8OHJZXo.roa (raw, json)
Hash identifier: kUN7qIoBO4FukILSXeAZWF7RJ65CvgOOJNH7ORJAX/U=
Subject key identifier: 39:1F:94:53:33:3B:DE:54:94:33:F8:5B:28:71:0C:F0:E1:C9:65:7A
Certificate issuer: /CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Certificate serial: 019E73C1727B0F8EA8B5C715FBB66A4CEB55
Authority key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/OR-UUzM73lSUM_hbKHEM8OHJZXo.roa
Signing time: Fri 29 May 2026 12:41:58 +0000
ROA not before: Fri 29 May 2026 12:41:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214802
IP address blocks: 2001:678:1298::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:c1:72:7b:0f:8e:a8:b5:c7:15:fb:b6:6a:4c:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Validity
Not Before: May 29 12:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=391f9453333bde549433f85b28710cf0e1c9657a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:5d:35:f0:ca:a6:58:2d:df:5c:b9:39:8b:
c2:f9:d5:23:c8:6c:0e:33:09:4f:87:6e:8e:b9:bf:
28:3f:8f:7e:95:04:85:5d:30:3c:88:c4:5a:69:f4:
ff:9b:94:8b:a3:06:2a:e2:74:7e:39:a3:a7:d6:b1:
4e:c2:34:1e:af:88:c3:5a:90:9a:b3:6e:2b:6c:99:
b4:8c:8a:25:62:91:48:47:44:60:89:ae:70:ba:1c:
59:ce:a6:01:30:3c:fb:bf:50:21:09:4b:00:aa:72:
41:c2:36:3d:9e:98:bf:89:49:2d:86:88:ae:cf:9f:
be:9e:0c:69:69:1b:2d:5e:42:e1:e4:84:97:62:7d:
51:b5:b6:00:2c:e7:f3:9d:2b:8a:46:c9:6e:87:1b:
44:ec:ac:5a:ba:c0:a1:f5:fe:88:6d:05:63:7f:1c:
4b:34:2b:cc:84:a9:e1:03:72:db:d5:41:43:3a:24:
20:42:ca:a9:97:6f:ec:bf:bd:96:8f:96:0a:c3:32:
39:e0:da:aa:3a:87:e8:94:df:5d:83:9a:81:9c:b4:
75:56:8b:2c:22:e6:76:e2:14:eb:76:51:d3:e5:be:
7d:14:4c:46:f5:d4:46:2d:fc:98:53:c3:2d:3a:90:
2d:b9:5e:3b:bf:54:93:2d:e1:07:38:49:b5:d3:ce:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1F:94:53:33:3B:DE:54:94:33:F8:5B:28:71:0C:F0:E1:C9:65:7A
X509v3 Authority Key Identifier:
keyid:12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/OR-UUzM73lSUM_hbKHEM8OHJZXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1298::/48
Signature Algorithm: sha256WithRSAEncryption
44:20:0b:1c:d3:ad:8a:71:63:fa:c3:77:45:58:26:9d:94:7f:
71:2e:7a:ba:ac:6d:b3:dd:b3:9e:37:81:52:70:bd:ad:e1:1b:
e8:ce:df:2d:72:91:34:8e:a4:65:3e:5c:1a:36:20:b2:a7:cf:
8b:7a:eb:ec:81:4a:20:ed:1b:df:93:00:db:2f:ae:d9:b8:63:
47:a1:00:d1:59:7d:68:f0:36:88:b4:35:41:51:e0:4f:85:85:
d0:0c:74:a3:87:2d:26:77:91:46:40:86:18:be:88:5f:4f:8b:
97:e6:ce:67:f1:c7:73:b4:5a:9e:d5:95:92:b7:0f:2a:a2:af:
23:36:9c:ad:16:79:c9:57:66:7b:d3:34:78:1c:54:30:a7:8a:
22:ec:72:5d:86:b5:51:5c:f1:82:76:0b:ab:21:da:03:3a:af:
81:5a:d9:ab:df:03:6f:67:11:f2:10:40:c9:00:87:53:1b:8c:
55:14:35:e4:5e:94:ad:a2:a0:bc:db:89:bc:fc:c6:de:a3:48:
43:fb:bb:66:dd:a6:01:6d:e6:10:f2:01:e1:18:d9:9f:97:5e:
46:07:2b:d7:18:b9:7f:16:8a:ae:e7:cf:29:2f:1b:c0:8d:bb:
af:f3:57:9b:9a:49:0d:ab:57:1e:39:7d:4e:6b:ec:49:30:93:
79:82:00:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:29 2026 by rpki-client