Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/ueXdZ_sUp3BHaJG0qBz9Q6PZnBI.roa
File: ueXdZ_sUp3BHaJG0qBz9Q6PZnBI.roa (raw, json)
Hash identifier: ziOQYMjTSgBNkfwAGhNuQHXVrxoXxGh9ZkXw5VRr58w=
Subject key identifier: B9:E5:DD:67:FB:14:A7:70:47:68:91:B4:A8:1C:FD:43:A3:D9:9C:12
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 01A012204CF706F7642E969BF4C6D45D32A6
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/ueXdZ_sUp3BHaJG0qBz9Q6PZnBI.roa
Signing time: Mon 17 Aug 2026 23:48:21 +0000
ROA not before: Mon 17 Aug 2026 23:48:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204755
IP address blocks: 193.142.147.0/24 maxlen: 24
2a0f:ca80:616::/48 maxlen: 48
2a0f:ca80:fe0::/44 maxlen: 44
2a0f:ca80:1339::/48 maxlen: 48
2a0f:ca80:b00b::/48 maxlen: 48
2a0f:ca80:beef::/48 maxlen: 48
2a0f:ca80:deed::/48 maxlen: 48
2a0f:ca81:deed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:12:20:4c:f7:06:f7:64:2e:96:9b:f4:c6:d4:5d:32:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Aug 17 23:48:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9e5dd67fb14a770476891b4a81cfd43a3d99c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:b7:bd:a8:3a:98:42:5b:fa:a7:a4:56:54:
20:46:4c:d6:19:10:96:4e:ce:3c:65:fd:f9:cf:d8:
6e:dc:fe:00:fd:e8:79:27:67:9b:55:5d:a4:66:c2:
50:b2:c3:9b:87:1d:62:33:2d:fb:a9:4d:3d:44:7c:
5b:1c:8a:db:a5:7a:8f:18:97:07:b4:93:c5:60:e5:
b4:7f:e4:60:0a:6c:90:c0:af:21:fa:30:bd:6c:bd:
a8:7b:04:df:49:34:01:f4:4d:a6:25:df:8e:20:9b:
e7:b2:a0:15:cb:c3:81:ec:10:c4:16:12:d1:b8:0f:
bd:cc:f9:66:c8:b9:6f:62:fe:6c:ae:85:b7:85:84:
fb:ed:3d:ac:cc:55:06:e6:19:cb:a1:99:4b:ac:18:
50:06:86:9d:65:e2:c9:d6:87:2b:ea:24:cb:b3:5b:
8f:bb:7e:99:4b:8d:53:88:7e:d1:59:b7:b0:c5:2c:
0b:17:48:0a:88:e4:1f:20:b7:4f:9e:aa:65:65:11:
ef:0c:3f:d7:75:20:c7:eb:69:f2:05:4e:47:a9:5c:
2b:c7:44:52:e0:21:ae:46:2b:ae:c7:13:a6:50:28:
3b:c8:b0:67:fc:0b:6c:59:db:40:8d:61:3b:87:c6:
0d:b6:44:16:c6:38:6e:2f:8e:b0:13:e0:e0:3e:6b:
92:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:DD:67:FB:14:A7:70:47:68:91:B4:A8:1C:FD:43:A3:D9:9C:12
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/ueXdZ_sUp3BHaJG0qBz9Q6PZnBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.147.0/24
IPv6:
2a0f:ca80:616::/48
2a0f:ca80:fe0::/44
2a0f:ca80:1339::/48
2a0f:ca80:b00b::/48
2a0f:ca80:beef::/48
2a0f:ca80:deed::/48
2a0f:ca81:deed::/48
Signature Algorithm: sha256WithRSAEncryption
b3:1e:d3:48:d9:30:72:19:75:81:c5:c2:4e:cb:fa:62:69:a0:
c9:cd:ab:b5:76:b5:6b:ba:27:1b:a3:8e:5a:f1:49:1c:3b:ff:
33:60:e0:9f:17:a1:a0:7f:b7:4c:7c:14:7d:8b:62:56:c0:41:
e3:9b:df:a2:b5:d8:0b:d2:a6:8e:64:06:9e:03:2b:b2:60:3e:
a8:47:d2:2f:4a:85:f3:79:71:c0:a6:75:cf:52:4c:32:82:c8:
91:1e:00:c6:5c:6f:d4:ee:45:91:8a:4e:89:0c:7b:1d:e9:96:
02:e0:e9:fd:3d:80:29:60:2d:60:3d:0f:e4:06:f6:02:af:bc:
62:3f:ec:3c:5d:f3:83:0f:57:31:0e:2b:c0:bc:ec:2d:cf:61:
50:8c:af:b6:97:3b:5f:b5:6e:81:d2:4b:20:9f:b3:6e:5f:47:
4d:33:af:26:3c:9a:26:14:0c:65:6c:cb:90:67:7b:3d:ed:8c:
ab:52:33:be:83:ea:f4:3c:8e:18:60:5c:0f:07:ce:84:f8:64:
d3:08:ab:96:85:1d:40:bd:ef:ad:3d:ef:b6:d4:3c:bd:24:d1:
af:9c:c0:a8:7d:bb:cc:a6:75:7a:ca:59:0f:6c:ca:36:d9:5e:
d1:45:3b:32:21:b5:ac:3f:f9:68:37:5d:8c:54:00:86:fa:7d:
e7:9c:4b:05
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgISAaASIEz3BvdkLpab9MbUXTKmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2
MjFkYjEwHhcNMjYwODE3MjM0ODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWU1ZGQ2N2ZiMTRhNzcwNDc2ODkxYjRhODFjZmQ0M2EzZDk5YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFy3vag6mEJb+qekVlQgRkzWGRCW
Ts48Zf35z9hu3P4A/eh5J2ebVV2kZsJQssObhx1iMy37qU09RHxbHIrbpXqPGJcH
tJPFYOW0f+RgCmyQwK8h+jC9bL2oewTfSTQB9E2mJd+OIJvnsqAVy8OB7BDEFhLR
uA+9zPlmyLlvYv5sroW3hYT77T2szFUG5hnLoZlLrBhQBoadZeLJ1ocr6iTLs1uP
u36ZS41TiH7RWbewxSwLF0gKiOQfILdPnqplZRHvDD/XdSDH62nyBU5HqVwrx0RS
4CGuRiuuxxOmUCg7yLBn/AtsWdtAjWE7h8YNtkQWxjhuL46wE+DgPmuSfQIDAQAB
o4ICUDCCAkwwHQYDVR0OBBYEFLnl3Wf7FKdwR2iRtKgc/UOj2ZwSMB8GA1UdIwQY
MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt
ZmIxMDMwNjUxMDY3LzEvdWVYZFpfc1VwM0JIYUpHMHFCejlRNlBabkJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3
LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTAMBAIAATAGAwQAwY6TMEUE
AgACMD8DBwAqD8qABhYDBwQqD8qAD+ADBwAqD8qAEzkDBwAqD8qAsAsDBwAqD8qA
vu8DBwAqD8qA3u0DBwAqD8qB3u0wDQYJKoZIhvcNAQELBQADggEBALMe00jZMHIZ
dYHFwk7L+mJpoMnNq7V2tWu6JxujjlrxSRw7/zNg4J8XoaB/t0x8FH2LYlbAQeOb
36K12AvSpo5kBp4DK7JgPqhH0i9KhfN5ccCmdc9STDKCyJEeAMZcb9TuRZGKTokM
ex3plgLg6f09gClgLWA9D+QG9gKvvGI/7Dxd84MPVzEOK8C87C3PYVCMr7aXO1+1
boHSSyCfs25fR00zryY8miYUDGVsy5Bnez3tjKtSM76D6vQ8jhhgXA8HzoT4ZNMI
q5aFHUC9760977bUPL0k0a+cwKh9u8ymdXrKWQ9syjbZXtFFOzIhtaw/+Wg3XYxU
AIb6feecSwU=
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:06:42 2026 by rpki-client