Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa
File: UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa (raw, json)
Hash identifier: EIulUW9Qb1i3y88NRqFWG6S+4xRTW+qht9M8c6ut9FY=
Subject key identifier: 52:7A:51:54:22:BF:19:CE:55:6D:53:66:F2:22:CF:F4:C2:8A:64:B7
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 01A065E721E762A4C1A6481B55675A44B1D6
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa
Signing time: Thu 03 Sep 2026 06:14:01 +0000
ROA not before: Thu 03 Sep 2026 06:14:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212336
IP address blocks: 69.8.128.0/24 maxlen: 24
69.8.129.0/24 maxlen: 24
69.8.130.0/23 maxlen: 24
69.8.132.0/23 maxlen: 24
216.23.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:65:e7:21:e7:62:a4:c1:a6:48:1b:55:67:5a:44:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Sep 3 06:14:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=527a515422bf19ce556d5366f222cff4c28a64b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:9c:18:c8:9a:9b:74:53:e7:e4:91:a4:2a:
53:0d:ac:72:cb:af:c6:52:0e:9e:5e:75:8d:5c:c8:
fa:72:e6:27:ec:4f:73:ec:ce:f7:0f:f8:31:67:4d:
8c:35:60:78:03:b0:d8:ea:8e:5e:fd:cc:d7:df:31:
f2:64:e7:c2:06:f8:4c:2b:d9:3a:c3:f7:8f:a6:15:
d5:3d:e1:1a:f0:03:e1:2b:6b:b9:dd:d6:7d:b6:84:
64:e5:3d:c2:ce:a3:88:f6:18:d6:57:b8:cf:c8:10:
cd:45:b5:1f:0e:99:61:34:fc:bd:a2:30:0e:0f:8a:
e2:f8:cb:38:00:ee:06:b5:aa:2f:a6:96:ac:ee:8a:
5d:aa:0d:28:ef:15:4c:72:cd:de:70:83:5c:f4:08:
d4:d6:62:33:4b:09:da:66:52:50:37:07:ee:3a:66:
f6:93:28:33:3e:e2:cc:4c:a3:e9:2b:c6:0c:60:f5:
f6:7e:70:46:b4:0a:37:04:e2:ef:40:88:f3:dd:8f:
c5:27:6c:08:68:aa:9d:fa:3c:27:7c:a5:c5:74:95:
86:e2:ac:1e:d7:87:41:0d:b9:74:ff:1e:f7:63:5a:
db:e1:d3:65:0f:ee:df:e9:54:7a:93:ad:d4:36:f0:
ea:4a:cf:26:d4:6f:2a:b0:56:05:66:90:06:ae:81:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:51:54:22:BF:19:CE:55:6D:53:66:F2:22:CF:F4:C2:8A:64:B7
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/UnpRVCK_Gc5VbVNm8iLP9MKKZLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.8.128.0-69.8.133.255
216.23.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:bc:c6:ad:27:45:5b:e6:f5:06:51:87:8e:8d:1e:23:e4:b2:
45:46:92:d4:8d:49:97:de:d6:68:6a:83:16:93:c1:01:81:c6:
3b:41:b1:56:6c:c6:e6:03:b5:ce:37:5a:62:63:49:5f:b7:28:
34:8d:96:96:84:91:05:9e:f8:f0:ab:26:b9:46:6d:12:0c:00:
72:67:96:b0:db:90:85:79:0c:ad:bc:4b:6e:ff:cf:1b:a0:e8:
6f:ce:68:dd:73:6e:8c:50:df:98:53:ab:62:a5:df:29:d2:c9:
f1:aa:68:ae:6d:16:6c:27:6d:46:44:3e:e3:96:97:c4:02:b9:
4f:ed:f1:2f:6f:f8:ac:8e:87:02:24:65:d4:a6:03:67:12:27:
36:34:c3:58:3f:6f:bf:ed:ae:28:2d:d7:80:34:f4:0f:c1:28:
d4:c4:3f:23:86:27:74:24:16:3d:bd:22:67:2c:8b:a0:f7:c6:
c9:fa:67:9c:c2:42:69:ef:e7:6f:ca:26:5e:18:af:f5:78:f0:
d4:8c:21:8e:73:d4:85:eb:a7:b6:05:17:1a:04:33:f0:0e:18:
c1:da:12:13:bd:13:d1:ac:86:5f:f8:df:4f:1c:7e:5c:7a:ca:
50:cf:c5:b9:b7:fc:87:f9:02:19:2d:ce:17:3a:1c:b6:b3:ad:
cd:c6:83:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:15:38 2026 by rpki-client