Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/uB-js8eLrApF33iZUBGxAz2OeB8.roa
File: uB-js8eLrApF33iZUBGxAz2OeB8.roa (raw, json)
Hash identifier: v2CZS4LBPcR03VFDtDYyNJUFkRjGLvokXi+BKkeMV0s=
Subject key identifier: B8:1F:A3:B3:C7:8B:AC:0A:45:DF:78:99:50:11:B1:03:3D:8E:78:1F
Certificate issuer: /CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Certificate serial: 01A00658A48D53C5FF9AF9BF29E47745273D
Authority key identifier: 67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/uB-js8eLrApF33iZUBGxAz2OeB8.roa
Signing time: Sat 15 Aug 2026 16:54:27 +0000
ROA not before: Sat 15 Aug 2026 16:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210920
IP address blocks: 45.157.2.0/24 maxlen: 24
74.220.24.0/21 maxlen: 22
74.220.28.0/22 maxlen: 22
2a10:c882::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:58:a4:8d:53:c5:ff:9a:f9:bf:29:e4:77:45:27:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67e24c7284ef4887e45d4ccd9bde679cd9ab4f00
Validity
Not Before: Aug 15 16:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b81fa3b3c78bac0a45df78995011b1033d8e781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:cc:6b:bc:97:29:0d:71:b4:75:ae:2a:55:
f6:59:8c:c4:d3:56:dc:07:c0:90:0c:1f:1d:2d:d8:
27:42:9c:88:75:0c:59:c5:96:c5:24:84:d5:dc:89:
6b:d6:e8:37:05:8a:ad:fe:a5:3d:e0:9f:50:b1:51:
59:7c:ed:5f:47:99:d7:8d:35:ac:d5:40:37:8c:3a:
9d:61:80:fe:32:d5:42:2f:83:34:56:4b:0c:f2:f4:
43:61:ba:1b:b5:32:bf:5b:6c:44:79:4c:bb:1c:7b:
71:f8:d0:b2:c8:28:2d:e4:71:d4:76:b9:39:4f:bf:
2c:19:20:55:92:0f:24:09:0b:65:ab:a7:e8:ba:72:
9d:e6:28:cd:f4:c5:03:ab:4a:68:d0:82:fd:ed:fa:
6f:df:d3:14:8b:b0:b0:9d:b6:ac:96:61:46:c9:6a:
e2:b5:67:d0:f7:49:91:8e:fb:6e:f0:fa:e9:20:ba:
e0:96:94:1d:51:53:9c:11:36:c5:36:5e:29:bd:ec:
9a:c6:aa:ab:af:30:c6:41:57:3c:10:c6:13:4c:db:
ff:7d:9c:4e:11:aa:67:f1:12:4b:9d:96:cc:c1:b6:
af:dc:a0:61:f1:f0:95:e9:b1:08:cd:51:dd:72:97:
b1:05:06:3a:ae:73:ed:18:51:9d:72:47:6f:f8:c1:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1F:A3:B3:C7:8B:AC:0A:45:DF:78:99:50:11:B1:03:3D:8E:78:1F
X509v3 Authority Key Identifier:
keyid:67:E2:4C:72:84:EF:48:87:E4:5D:4C:CD:9B:DE:67:9C:D9:AB:4F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-JMcoTvSIfkXUzNm95nnNmrTwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/uB-js8eLrApF33iZUBGxAz2OeB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/02d3f6-4301-4be5-8c37-0375a9c32b00/1/Z-JMcoTvSIfkXUzNm95nnNmrTwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.2.0/24
74.220.24.0/21
IPv6:
2a10:c882::/32
Signature Algorithm: sha256WithRSAEncryption
48:2a:76:49:f7:09:0c:11:f6:de:71:03:ea:d6:07:ea:35:36:
af:96:4c:45:65:e3:d1:1b:5f:81:9c:4e:dc:da:94:3b:be:0a:
70:2d:33:54:67:8a:57:a9:23:85:f0:f9:37:d9:26:08:28:c4:
1f:62:1f:50:b0:b8:e1:0c:91:49:75:57:39:55:4c:e0:e4:52:
99:f3:3c:a0:99:23:76:6a:39:67:d1:da:51:68:44:f5:23:13:
f6:7f:c1:71:24:c1:3b:8e:d1:07:15:4e:12:b1:19:e6:2b:10:
8c:83:d9:68:0d:29:2d:56:6b:af:f4:aa:31:51:34:81:15:3c:
51:6f:8e:4a:ba:20:b9:73:da:44:29:77:cb:dd:14:2b:9d:c4:
cc:57:4d:d3:18:7d:e0:05:6f:58:4f:bd:dd:8d:f0:a8:6d:68:
67:bd:2d:6c:60:fe:57:b9:4d:2f:07:97:b1:b9:dc:df:f3:0a:
22:ba:0b:c7:f6:0b:e0:cc:62:a1:01:05:5c:d6:dc:e9:9f:fc:
5b:0b:3f:eb:de:d3:ac:f4:4c:88:40:ee:6d:47:51:6c:9e:a8:
c6:71:22:5c:92:d7:a8:17:b0:66:77:1d:39:1f:8c:0d:23:cb:
6e:7c:62:5a:a6:72:8b:38:33:37:5a:48:61:c0:16:7b:ec:0b:
f4:e3:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:51:59 2026 by rpki-client