Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uBd-QFPKtf1a6JieXpIADKUqm2Y.roa
File: uBd-QFPKtf1a6JieXpIADKUqm2Y.roa (raw, json)
Hash identifier: VR+d4zNLm7/vJFfME76uH/g5v+fejOEvutJu74QhD34=
Subject key identifier: B8:17:7E:40:53:CA:B5:FD:5A:E8:98:9E:5E:92:00:0C:A5:2A:9B:66
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01A03CF1176010DB7F1729CFC843409CB7DF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uBd-QFPKtf1a6JieXpIADKUqm2Y.roa
Signing time: Wed 26 Aug 2026 07:20:28 +0000
ROA not before: Wed 26 Aug 2026 07:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43618
IP address blocks: 193.37.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:f1:17:60:10:db:7f:17:29:cf:c8:43:40:9c:b7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 26 07:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8177e4053cab5fd5ae8989e5e92000ca52a9b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4e:36:10:d3:04:24:e8:b3:1d:94:b6:2b:86:
72:1b:59:53:73:37:df:e6:47:e5:00:f5:57:63:80:
c8:7c:e0:5b:89:66:88:eb:2b:7f:16:04:d7:ec:c1:
ca:4b:aa:04:34:39:4b:bd:d2:fb:bd:18:7c:8b:d7:
67:9a:1f:64:43:ab:d9:80:f0:67:fc:59:b1:21:ef:
61:01:7b:45:47:62:c3:e4:26:73:9b:1d:e0:9c:19:
1c:7a:f7:94:b5:ae:fc:8b:7d:55:6e:2f:ad:d0:4c:
c6:d8:f5:ce:02:ca:19:33:6e:22:37:fb:79:9d:63:
dc:5a:84:5b:ce:1d:44:89:97:3a:08:1e:a6:2c:8e:
8d:c4:f2:80:b7:cc:12:fb:ed:71:01:8e:f9:e6:a9:
fc:06:ca:a8:78:e5:3a:22:58:30:03:de:17:43:3e:
84:77:16:50:8c:89:b6:ca:5c:68:2f:2b:ce:24:ff:
3f:20:45:53:bb:32:f0:c0:fe:59:df:90:8d:db:dc:
c5:fc:95:ee:39:89:98:7c:1d:72:62:e9:8f:c5:ec:
7b:cf:70:43:5d:76:5f:f4:44:2f:24:13:fb:57:36:
e2:c9:4b:2b:2e:58:7b:7b:fb:34:73:e1:74:9a:af:
6a:aa:db:76:8e:8d:d3:68:fd:f8:c8:e3:68:5e:bf:
47:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:7E:40:53:CA:B5:FD:5A:E8:98:9E:5E:92:00:0C:A5:2A:9B:66
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uBd-QFPKtf1a6JieXpIADKUqm2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.67.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c2:07:17:75:a9:40:60:fc:90:71:aa:b8:95:15:07:d8:b2:
85:25:9f:1e:83:8e:ab:14:38:b2:f4:25:d9:1b:32:41:db:fb:
2a:15:2d:37:e5:5e:f9:52:ab:11:70:d0:51:de:05:da:6d:86:
3d:5b:8d:d5:ed:db:fc:40:a9:85:87:6a:38:50:0c:54:4e:f3:
c9:cc:71:ae:31:c7:61:b0:eb:b8:4c:09:6b:bf:74:fe:f9:92:
11:d0:e2:bc:77:61:d0:3b:1b:03:36:c9:e6:f1:40:f2:46:09:
af:18:6e:ba:72:ad:85:dc:ce:3e:cd:dd:ea:17:85:1b:20:8b:
b4:3d:75:7e:a4:52:f1:ab:89:83:09:81:83:18:56:85:21:52:
6f:c3:a9:34:c8:ba:25:e7:da:7f:7e:52:5f:0b:4a:47:32:0e:
7c:4e:76:48:f2:ad:6c:9d:cb:db:d3:61:c3:eb:17:e4:87:72:
f5:de:27:62:8e:36:43:60:78:35:cc:f2:d1:ce:03:df:15:11:
04:70:00:aa:63:bf:39:05:e6:3c:af:ff:29:23:d7:7a:95:93:
3e:05:02:f9:39:80:aa:55:99:21:fb:7e:a4:0a:39:78:ac:f1:
c6:55:32:00:58:a5:64:a7:8f:1c:c2:58:30:3b:c9:08:a1:35:
a6:f5:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 22:31:33 2026 by rpki-client