Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/uwz0si1SwVU9VQBKdbu7R8q5vms.roa
File: uwz0si1SwVU9VQBKdbu7R8q5vms.roa (raw, json)
Hash identifier: qbkqCRHMCZSiQRFrAx9zDyfbeZmrRRF+Lxcz2PpqE4E=
Subject key identifier: BB:0C:F4:B2:2D:52:C1:55:3D:55:00:4A:75:BB:BB:47:CA:B9:BE:6B
Certificate issuer: /CN=7976a73b7c13a966d953bd6893c44285fc24efef
Certificate serial: 01A0FDC042E41F7F9BB94A8A437DFF200913
Authority key identifier: 79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/uwz0si1SwVU9VQBKdbu7R8q5vms.roa
Signing time: Fri 02 Oct 2026 17:53:50 +0000
ROA not before: Fri 02 Oct 2026 17:53:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218513
IP address blocks: 2001:678:11c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:c0:42:e4:1f:7f:9b:b9:4a:8a:43:7d:ff:20:09:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976a73b7c13a966d953bd6893c44285fc24efef
Validity
Not Before: Oct 2 17:53:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb0cf4b22d52c1553d55004a75bbbb47cab9be6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:78:f2:ae:5b:f6:47:23:95:e7:84:b8:b1:
be:0b:3b:aa:2b:e4:ef:0e:26:ac:e3:94:1c:9b:3c:
05:98:6a:14:9c:00:ac:ca:b7:0a:3f:8e:ee:54:30:
4b:2c:9f:cb:96:cf:b7:9d:46:dd:00:5d:3a:8b:76:
e2:8c:6f:6e:d4:b5:c2:6a:2c:4f:6c:87:db:f2:fb:
76:1c:a3:cf:96:05:67:d2:34:4b:07:31:60:49:22:
80:60:f5:c9:97:54:74:70:de:6d:88:29:e9:8c:c0:
1a:b1:b1:75:74:02:05:80:ac:8d:ee:db:2e:d2:83:
ab:e4:51:40:57:9b:68:9e:f4:32:01:4f:22:14:60:
79:a0:a5:88:46:b2:45:1a:91:60:7d:41:83:7d:b2:
55:d5:1f:2d:29:fa:3a:81:03:76:ea:4c:f5:fe:25:
49:a1:22:bd:8d:a7:b0:37:e6:2b:f7:df:cd:82:c4:
2f:c6:87:b7:12:05:56:6d:a0:88:8e:55:ad:42:43:
54:88:89:61:3d:9c:58:fa:7d:2e:1f:e4:66:00:4b:
54:30:92:2c:f0:e9:f4:34:7b:88:9c:21:fb:17:04:
a6:a1:a5:4c:2b:58:e3:1d:ea:3f:44:fb:48:bc:1f:
be:03:84:19:74:94:74:92:84:13:53:b4:fc:9e:1a:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0C:F4:B2:2D:52:C1:55:3D:55:00:4A:75:BB:BB:47:CA:B9:BE:6B
X509v3 Authority Key Identifier:
keyid:79:76:A7:3B:7C:13:A9:66:D9:53:BD:68:93:C4:42:85:FC:24:EF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXanO3wTqWbZU71ok8RChfwk7-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/uwz0si1SwVU9VQBKdbu7R8q5vms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bd4ffa-7aa0-4493-892f-22b94de2384d/1/eXanO3wTqWbZU71ok8RChfwk7-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11c8::/48
Signature Algorithm: sha256WithRSAEncryption
4f:a4:11:ba:be:db:3b:f5:88:ea:60:83:25:c0:79:50:0e:28:
1a:10:c2:42:9c:14:dc:a1:f3:a6:aa:10:d9:86:cb:1e:ff:3c:
7e:eb:78:e7:a8:27:dc:2d:c0:bd:b9:34:43:e4:62:68:49:bb:
d4:30:81:1e:79:cb:01:f9:60:66:48:c1:e2:71:74:8c:99:4f:
f4:ed:96:ec:6c:07:76:66:c4:1a:ae:7b:e4:a2:87:39:0c:e2:
01:82:5e:3d:50:21:b2:a7:36:28:5d:74:f1:ce:4c:d7:60:c0:
65:e9:08:1b:c1:95:70:3a:5d:43:36:79:91:ff:09:5f:34:fa:
12:f4:c9:64:36:91:19:58:23:55:b7:0d:08:29:03:90:23:5e:
a2:2f:6d:ea:f3:64:4a:d9:d9:bc:29:60:18:8e:a6:c8:e6:2d:
de:1e:98:86:17:66:85:0c:3e:60:14:23:9f:26:11:ea:7d:41:
d2:a3:f8:81:04:cc:3a:23:7e:8e:85:70:2c:f9:c3:25:29:2d:
97:99:8c:53:d1:71:1b:b9:54:86:58:52:0f:c0:90:8d:7e:45:
0e:53:5c:fe:7f:f4:19:34:e2:fc:18:9a:2b:bd:36:53:68:5b:
6e:16:b4:15:ce:4e:33:80:1d:00:16:87:50:db:41:a8:7f:a8:
eb:92:69:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 12:41:31 2026 by rpki-client