Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/ueHlFhpD4-DPg29jhV4v1O-mmPc.roa
File: ueHlFhpD4-DPg29jhV4v1O-mmPc.roa (raw, json)
Hash identifier: rRRjobwcSMqij73Hb0fj/FpV3QtXi7vIxsUlXpMFZqQ=
Subject key identifier: B9:E1:E5:16:1A:43:E3:E0:CF:83:6F:63:85:5E:2F:D4:EF:A6:98:F7
Certificate issuer: /CN=279fdf3e491ef66d77714389ae36f045715f2768
Certificate serial: 01A00F2D147887262B9BA891FE84A3E68A58
Authority key identifier: 27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/ueHlFhpD4-DPg29jhV4v1O-mmPc.roa
Signing time: Mon 17 Aug 2026 10:03:27 +0000
ROA not before: Mon 17 Aug 2026 10:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57494
IP address blocks: 193.148.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:2d:14:78:87:26:2b:9b:a8:91:fe:84:a3:e6:8a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279fdf3e491ef66d77714389ae36f045715f2768
Validity
Not Before: Aug 17 10:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9e1e5161a43e3e0cf836f63855e2fd4efa698f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:54:d5:94:7c:14:39:53:a4:93:02:8c:d8:
df:5b:84:86:64:d7:6a:99:e1:f3:da:d6:67:55:af:
10:87:69:68:a7:f9:8d:82:df:70:52:8e:63:86:e1:
ca:a4:bf:fd:4d:28:43:05:13:f5:41:fe:27:82:fa:
64:d9:8a:e6:ea:e5:72:71:1e:a6:a4:d0:4d:57:e0:
08:e8:c4:b1:f3:8f:a6:b3:8d:de:bd:b9:92:76:a6:
42:7b:83:74:7b:19:a4:95:91:f2:3a:57:c1:b5:04:
8f:6b:26:27:9d:47:d9:92:b2:39:71:fb:40:2c:0f:
29:47:2f:d2:96:c3:8a:ec:f0:15:6a:28:5d:50:96:
4d:b2:da:ca:cb:9f:e7:cd:c0:93:81:d1:17:67:fb:
74:d2:aa:bc:e0:e2:7a:11:5a:42:57:a9:50:b6:dd:
e2:1f:43:58:14:10:06:fb:86:2f:a6:a5:4f:29:09:
b3:14:3c:ee:64:f1:d6:38:17:4d:3f:7f:9f:46:86:
1a:c8:64:15:12:60:f2:22:94:8d:79:3b:47:c7:e9:
7e:77:b8:b5:ee:db:08:93:f5:6e:cf:6f:14:4d:92:
95:c1:ae:a0:43:ff:9b:a1:32:81:c9:57:c2:9c:86:
25:cf:9d:6d:54:ad:aa:51:6c:ea:d3:13:6f:ba:65:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E1:E5:16:1A:43:E3:E0:CF:83:6F:63:85:5E:2F:D4:EF:A6:98:F7
X509v3 Authority Key Identifier:
keyid:27:9F:DF:3E:49:1E:F6:6D:77:71:43:89:AE:36:F0:45:71:5F:27:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5_fPkke9m13cUOJrjbwRXFfJ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/ueHlFhpD4-DPg29jhV4v1O-mmPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2f3a44-5023-4695-a5fb-7b66e32a40fa/1/J5_fPkke9m13cUOJrjbwRXFfJ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:72:e5:f4:f1:d4:5d:82:fe:d3:92:fc:4a:44:73:ce:aa:38:
91:33:12:df:5d:ce:aa:a1:5e:60:fd:a5:91:5a:3b:f8:e2:49:
fe:ba:3c:01:ed:ee:21:42:3c:c3:a4:de:a3:7b:96:99:46:51:
98:07:68:86:36:84:4c:1e:53:87:cb:f9:7f:6c:ad:e3:26:0d:
b1:22:8d:bb:e5:fe:05:f5:02:71:4c:4c:bd:12:81:de:f8:a7:
e7:83:e3:10:8e:71:5c:8d:b9:c6:d4:c5:f2:5d:ba:51:67:b2:
2b:7d:d2:28:ba:ab:1d:66:87:79:36:8f:5c:31:ef:58:c1:96:
34:f4:ca:44:fe:eb:5e:2b:0e:b3:80:d9:f2:17:4a:49:ce:0b:
96:44:d4:47:1c:fe:8c:64:db:87:70:7b:44:d7:8a:5d:01:2b:
89:a6:ff:12:e6:b5:c1:af:8c:6e:37:cc:7b:00:bb:1d:d6:4b:
f3:dd:c2:62:6f:56:e1:28:42:97:56:76:8c:e8:f5:9e:14:5c:
98:76:64:0f:ee:f5:e9:09:d0:83:49:1f:69:3c:1b:ac:d0:29:
4e:59:37:68:10:1c:ce:97:4b:d7:05:4e:d5:52:a8:c0:15:e9:
d7:1d:2f:b6:9b:8f:73:19:80:62:30:e0:3b:d1:70:0a:91:e1:
4b:ca:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:07 2026 by rpki-client