Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/UywiNukAKqHV5KQalLlSjvBklY0.roa
File: UywiNukAKqHV5KQalLlSjvBklY0.roa (raw, json)
Hash identifier: MgZGEpkFMF8NbUPYs1DO9MSY5EhDtajTfJe+jth86Ac=
Subject key identifier: 53:2C:22:36:E9:00:2A:A1:D5:E4:A4:1A:94:B9:52:8E:F0:64:95:8D
Certificate issuer: /CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Certificate serial: 019C81BD381319FBCC28A857D6862C19CB75
Authority key identifier: 33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/UywiNukAKqHV5KQalLlSjvBklY0.roa
Signing time: Sat 21 Feb 2026 19:46:27 +0000
ROA not before: Sat 21 Feb 2026 19:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 2a13:a740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:bd:38:13:19:fb:cc:28:a8:57:d6:86:2c:19:cb:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338c1868b56380e08c45f81ffe61dd3281d6697e
Validity
Not Before: Feb 21 19:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=532c2236e9002aa1d5e4a41a94b9528ef064958d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:53:9a:f6:73:96:ed:9c:3d:b2:52:e8:48:f8:
e1:ca:eb:0e:41:8d:ec:91:4c:58:c2:f1:55:f4:bd:
16:01:83:00:d8:5e:aa:ce:5b:ae:e6:0d:b8:88:a5:
6f:60:80:1e:b2:ec:81:3c:4b:63:9e:68:b3:b4:b4:
a4:b9:e1:ee:66:39:5c:3e:55:a4:df:29:f5:73:29:
57:58:58:6c:3f:ff:8a:63:6c:f9:99:9d:95:15:8d:
9b:75:63:36:e9:cf:6b:d5:10:b2:e3:6f:bf:34:1c:
5b:f7:35:78:a3:42:3e:b2:f0:51:af:68:7d:c1:24:
b0:94:8a:1a:17:9b:d8:9d:98:2b:2e:f0:e2:c3:f9:
b7:45:ca:9d:6e:25:f5:50:13:87:74:e4:f6:a1:f3:
15:b1:01:21:fa:3f:49:28:44:45:9d:1f:f9:b2:26:
20:67:cc:0a:0a:30:54:80:3c:6f:11:d8:20:1a:b0:
93:04:41:cb:0c:55:27:1b:63:14:ea:d2:81:69:ea:
20:09:9b:a1:0f:00:d7:b5:c5:4c:e5:b5:ac:db:1f:
d5:2c:a8:45:e3:93:9a:e5:2b:14:b4:69:97:96:48:
e8:32:77:5f:83:14:70:bb:a1:51:c5:d7:77:e4:ba:
e4:93:f4:3f:11:69:ca:59:9b:a4:73:23:b3:9a:58:
3f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2C:22:36:E9:00:2A:A1:D5:E4:A4:1A:94:B9:52:8E:F0:64:95:8D
X509v3 Authority Key Identifier:
keyid:33:8C:18:68:B5:63:80:E0:8C:45:F8:1F:FE:61:DD:32:81:D6:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4wYaLVjgOCMRfgf_mHdMoHWaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/UywiNukAKqHV5KQalLlSjvBklY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/42411e-e7ab-4645-9a4b-16dba543b558/1/M4wYaLVjgOCMRfgf_mHdMoHWaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a740::/29
Signature Algorithm: sha256WithRSAEncryption
51:ae:76:2d:e3:a6:5f:3d:1b:b9:92:18:2c:18:86:97:eb:ee:
b9:96:b6:48:58:68:2f:12:16:d4:91:a0:c6:94:8b:c4:06:2c:
b0:db:2c:c4:42:f5:f6:a8:e8:4a:15:c8:06:46:82:be:db:e7:
9d:68:3a:84:7c:5c:ee:67:85:c8:bd:51:5b:b9:89:8e:fc:f7:
7f:07:3f:38:42:88:de:fc:f9:c2:33:1d:1a:99:8d:85:e4:ba:
9e:ee:cf:07:a5:3d:1f:67:a2:13:16:e4:e0:d4:11:ef:75:b5:
67:98:06:fe:73:b4:73:3b:91:3b:64:09:a3:50:ca:83:4a:d1:
63:6d:48:3b:2d:75:ec:8f:7b:6e:32:bb:fa:4b:5f:b5:d8:fb:
bf:2e:d7:85:63:ad:af:fe:17:cb:e0:aa:6b:d0:5b:ad:e4:91:
87:c2:fe:b3:e1:5b:14:d7:2a:05:5f:37:2a:f0:d4:e6:2a:ab:
3d:2e:8a:56:43:19:d1:bf:38:cf:8a:1e:66:f2:f6:c6:31:15:
c6:c6:e3:c6:b2:a6:bb:c6:2c:09:29:63:5f:9d:0b:c7:e8:8c:
69:07:0d:db:26:56:1e:31:10:85:75:85:96:d4:19:b5:f1:73:
9e:d5:37:5f:0a:0c:c5:7f:f9:28:6d:61:00:e0:70:b3:11:5c:
f8:c8:85:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:53:17 2026 by rpki-client