Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/UTgNv2GwCKa_0irP6WQWW67bsRs.roa
File: UTgNv2GwCKa_0irP6WQWW67bsRs.roa (raw, json)
Hash identifier: OOK5YaCSotitsJyeBjF44JB5QpNMqseu0AlD7gGR14s=
Subject key identifier: 51:38:0D:BF:61:B0:08:A6:BF:D2:2A:CF:E9:64:16:5B:AE:DB:B1:1B
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A0A4285DFEC3960E0738D12863A4C23E7E
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/UTgNv2GwCKa_0irP6WQWW67bsRs.roa
Signing time: Tue 15 Sep 2026 08:21:44 +0000
ROA not before: Tue 15 Sep 2026 08:21:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 132.243.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:28:5d:fe:c3:96:0e:07:38:d1:28:63:a4:c2:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Sep 15 08:21:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51380dbf61b008a6bfd22acfe964165baedbb11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:8c:47:a9:9c:ce:d7:e6:04:44:6f:02:e6:
f8:f9:af:f2:c3:9a:4f:88:d2:4f:8b:03:52:65:1a:
94:9c:59:04:59:fe:84:28:d5:fc:64:ad:7a:03:d9:
6c:68:e1:f0:f4:2a:a8:60:52:02:82:83:b3:53:a6:
de:0b:fb:fd:b3:7e:b2:8f:d1:8c:68:72:e2:25:95:
ed:8c:87:57:8b:cd:b6:69:23:ac:36:3c:6d:d6:b8:
3f:b4:f3:9b:7d:11:66:66:ca:ec:c7:6e:40:47:98:
65:c7:89:a4:aa:b4:ed:1c:17:6f:7e:53:ec:4b:8f:
0c:49:bb:a8:65:64:ef:a3:21:99:ee:ef:13:64:23:
66:5c:e7:44:9c:49:08:f8:89:bb:e5:99:73:b0:2d:
42:49:e8:64:20:5c:b1:d3:56:ce:d5:ca:3f:6b:28:
c6:c7:45:06:03:c4:75:fc:7f:21:bc:20:3b:d6:3c:
2e:95:84:5c:73:fc:1e:fb:c6:57:0f:6c:c0:0a:e4:
82:5d:64:44:57:cb:00:53:18:e2:63:5c:09:60:7f:
1c:bd:d3:99:93:3f:86:f5:39:46:83:0c:f0:0a:db:
54:92:2a:5a:81:88:21:7a:9e:87:70:7b:08:b1:a6:
da:b9:94:ae:b0:7e:46:7e:ea:a5:d4:df:2d:b4:e2:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:38:0D:BF:61:B0:08:A6:BF:D2:2A:CF:E9:64:16:5B:AE:DB:B1:1B
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/UTgNv2GwCKa_0irP6WQWW67bsRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.212.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:39:a2:2b:06:f2:70:dc:85:0f:2b:01:f8:32:48:c9:98:e9:
a5:34:89:d9:50:49:d8:a2:5b:c2:bf:f3:01:bb:ec:bf:ee:e3:
fd:c5:3c:a0:36:19:45:d6:a3:14:3f:14:13:be:3b:ab:7f:95:
52:fd:c4:f3:c4:8b:60:e5:eb:77:00:11:40:eb:ff:b9:09:1d:
47:74:74:32:3b:0f:eb:c5:c1:ff:89:57:cc:fa:40:ec:fb:8d:
46:10:53:71:f6:73:83:b6:9d:36:da:de:1a:79:56:4b:c7:f1:
c1:38:06:15:23:48:9a:f3:42:4f:1a:14:92:a7:fb:9c:d0:b4:
8c:a6:29:e0:d7:b8:b3:7e:d7:c1:ab:24:b7:f7:3b:8b:09:7c:
a7:bf:6b:8a:f3:33:60:c3:ac:d7:ae:48:ee:5e:f6:9a:a6:6a:
4d:a3:1e:31:ee:70:5e:50:a4:fe:7f:92:62:c8:34:1c:4a:07:
4f:78:0b:aa:5f:9c:dc:1b:12:d7:4f:b7:f8:ec:02:5f:77:3e:
10:bd:f8:35:6d:5b:59:85:0f:9b:fc:9c:36:78:ee:c3:a8:e1:
e6:35:bb:ce:b1:24:1b:f7:4a:41:5d:2d:83:02:2c:fb:07:18:
e8:9e:de:b6:c8:d5:c3:62:29:65:17:d1:d4:e6:95:03:73:b1:
16:01:b7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:41 2026 by rpki-client