Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/uGU-t-JH44HdoHfFWwj8XKKlNaY.roa
File: uGU-t-JH44HdoHfFWwj8XKKlNaY.roa (raw, json)
Hash identifier: /Ed0fTz5fTvsXNVpQOMOkDnJHAMvKPF4tla1k1Rw8As=
Subject key identifier: B8:65:3E:B7:E2:47:E3:81:DD:A0:77:C5:5B:08:FC:5C:A2:A5:35:A6
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A08B6A7F37EC34BE03B25270F9415441EB
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/uGU-t-JH44HdoHfFWwj8XKKlNaY.roa
Signing time: Thu 10 Sep 2026 13:03:27 +0000
ROA not before: Thu 10 Sep 2026 13:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63450
IP address blocks: 192.200.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:6a:7f:37:ec:34:be:03:b2:52:70:f9:41:54:41:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 10 13:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8653eb7e247e381dda077c55b08fc5ca2a535a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ec:c7:1d:43:53:5c:cc:ee:dd:e6:bc:b9:e8:
85:9f:30:12:94:57:62:a9:f3:89:c7:84:1b:69:71:
e2:20:47:c6:f7:b7:be:0b:09:b5:18:3d:f8:47:c2:
e8:73:ba:c8:fd:34:53:ab:04:b4:55:86:08:57:53:
2e:61:a7:1f:48:86:10:6d:00:7f:f8:23:08:76:66:
d4:30:81:82:51:90:94:fd:e4:71:b2:38:fe:a6:24:
57:ff:6d:ca:d4:cf:29:d2:c6:01:22:03:05:d7:5f:
d9:1d:9b:e5:71:83:d1:0f:77:7c:a6:fb:e6:08:47:
ef:0c:d9:02:ac:26:56:c2:36:47:7e:40:ac:4b:d9:
1f:54:7a:cc:96:d4:b6:71:f5:8f:7f:a4:33:31:49:
26:4a:6d:01:d9:4d:e0:cc:7b:40:fc:ee:50:f2:12:
fa:98:54:58:16:fb:18:84:d7:fc:51:1a:5d:73:1f:
4e:45:7b:9c:f4:8e:c5:a4:98:4c:fc:3c:48:79:e8:
ef:f0:88:1b:0c:95:58:03:4a:22:4b:02:29:04:88:
43:71:f6:58:88:36:8b:9c:5b:0b:f1:b7:04:9c:da:
c2:7b:83:9c:a0:7f:f4:bb:2d:8f:18:53:fb:67:32:
48:be:ec:90:c2:fb:7d:2c:a0:33:93:55:82:75:bf:
b7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:65:3E:B7:E2:47:E3:81:DD:A0:77:C5:5B:08:FC:5C:A2:A5:35:A6
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/uGU-t-JH44HdoHfFWwj8XKKlNaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.200.192.0/19
Signature Algorithm: sha256WithRSAEncryption
33:18:76:5c:6b:34:75:f0:da:ac:e4:ea:97:2f:17:ba:21:bd:
2b:d5:2a:ba:79:b0:99:c0:97:a1:7b:f8:17:01:35:b8:53:4b:
37:9a:45:67:23:07:fa:85:7c:54:b3:9d:18:a8:ae:4a:23:86:
74:27:d8:61:6a:e9:0e:9c:c7:69:6b:a2:33:4b:b2:bf:9f:88:
3c:fc:97:f2:a0:f4:39:d3:29:36:ea:6a:58:a9:80:f8:8f:08:
fb:2d:7b:a8:f0:00:2e:37:67:70:72:16:46:22:c2:3e:f3:10:
d1:31:98:ea:2b:c5:c4:c8:57:4a:66:c0:c2:7f:4e:b6:53:8f:
26:91:0a:f4:17:a7:a5:83:d2:39:31:c0:cb:68:73:a3:40:c5:
0f:a8:07:cf:57:1b:93:09:92:a3:1f:2d:55:1e:30:46:eb:4d:
8c:43:a0:cd:3b:aa:01:4a:1a:c6:ba:0b:fe:c9:a3:6d:7b:12:
61:01:69:5d:45:26:cc:18:7f:bb:d0:a7:3a:59:d0:ee:05:30:
c9:e3:7d:06:37:3b:fc:b6:1b:9a:de:89:44:f8:d9:0f:1e:34:
42:c0:b6:6a:64:2b:7a:2a:12:d4:bb:ce:79:db:c1:2a:79:48:
0a:7b:9a:af:f8:32:08:33:d5:08:cc:bf:0a:68:03:cd:28:2f:
46:51:b5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:27 2026 by rpki-client