Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uwNku_m68ewLF-zHjThz5wTVjog.roa
File: uwNku_m68ewLF-zHjThz5wTVjog.roa (raw, json)
Hash identifier: lsOVclfN8dVxnjmp2NIxSSN1K9DiDTAgiaOOn6K4VCk=
Subject key identifier: BB:03:64:BB:F9:BA:F1:EC:0B:17:EC:C7:8D:38:73:E7:04:D5:8E:88
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019FDB4BF09BAF03141EE132168736592AE6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uwNku_m68ewLF-zHjThz5wTVjog.roa
Signing time: Fri 07 Aug 2026 08:16:54 +0000
ROA not before: Fri 07 Aug 2026 08:16:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136725
IP address blocks: 193.8.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 09:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:4b:f0:9b:af:03:14:1e:e1:32:16:87:36:59:2a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Aug 7 08:16:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb0364bbf9baf1ec0b17ecc78d3873e704d58e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0d:01:3c:ed:ed:3f:e6:9d:70:91:90:96:88:
f7:bb:a4:21:1f:48:b6:b8:8f:bb:e9:73:e8:12:e6:
51:13:3b:d5:5c:7e:c3:29:a1:ae:b8:16:c1:dc:f0:
72:a5:c6:81:41:74:bf:7d:f8:e0:03:16:87:48:4b:
ae:68:d9:86:3f:d6:36:b1:b2:87:e2:be:5a:fc:9f:
1a:1d:a5:65:58:a8:b2:11:df:3f:61:94:24:f5:a5:
04:2d:6e:d5:84:97:70:bf:94:8f:b1:f5:d3:3d:72:
48:13:6e:32:36:3d:e3:e8:97:9d:c4:2b:f5:47:18:
0e:39:74:9c:80:66:b6:87:75:7a:2e:00:4f:00:ed:
bb:b9:92:a2:a8:08:07:ec:2a:ba:0d:53:64:9b:c6:
6d:fd:27:d1:1a:12:9e:74:85:c9:42:01:ea:e8:4b:
b4:d6:80:2c:b9:9c:55:98:d8:28:f5:c9:c1:e0:4f:
b4:97:cc:3b:61:07:48:4a:f2:5c:c9:a5:11:b3:69:
d1:e7:88:8f:88:1d:a0:dc:52:9d:2a:68:5e:ac:97:
8d:44:c8:a3:5e:a3:8d:62:9a:bb:52:84:96:9f:7d:
69:ac:a6:65:8c:99:94:d2:10:ba:c7:c7:fc:99:46:
cf:f1:5e:19:63:3d:58:5b:0b:14:4f:0f:8a:e5:34:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:03:64:BB:F9:BA:F1:EC:0B:17:EC:C7:8D:38:73:E7:04:D5:8E:88
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/uwNku_m68ewLF-zHjThz5wTVjog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.114.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d0:61:78:0f:10:3a:94:17:8d:99:dd:fb:03:67:13:98:7c:
b3:30:c2:6c:ae:91:06:2a:31:11:4e:f4:2d:08:3e:8c:ca:f8:
5a:0e:3f:d4:71:3f:b1:92:e6:f5:cb:60:49:81:8e:85:99:c1:
d5:44:77:55:12:14:07:db:c8:c8:b2:42:13:6a:59:b5:d6:10:
14:73:90:94:5e:c7:ce:8e:8e:89:9c:fe:d2:ab:54:e1:34:a3:
9b:a1:48:74:3d:53:c0:2c:0f:ef:e7:58:0d:00:5e:8a:1e:a7:
97:69:5d:c1:71:82:59:77:a1:c1:28:47:17:72:31:70:bf:59:
78:a1:63:6d:b6:94:f2:9b:39:b2:17:f2:31:3a:02:70:8d:f6:
2f:58:00:b5:e5:da:32:6b:22:18:62:64:de:cc:7e:6a:31:a5:
d3:29:9c:ed:15:a5:a4:c3:fb:9f:dd:9e:4d:41:ac:49:78:8c:
f8:f3:3c:2d:60:b5:98:73:ac:b8:ba:d2:b7:43:c2:ed:d7:80:
02:d1:2f:89:f2:d2:69:1e:00:16:db:2e:6d:4f:df:30:97:b6:
23:ed:04:95:2b:d1:ae:b9:1f:0c:7d:94:02:ec:ad:a4:59:8e:
e7:21:26:af:6a:91:be:32:2b:6a:c0:b7:bb:fa:92:ab:d2:d9:
03:49:69:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 19:04:52 2026 by rpki-client