Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uNyKCTBqML-uDAKQS4DhqIh-xCQ.roa
File: uNyKCTBqML-uDAKQS4DhqIh-xCQ.roa (raw, json)
Hash identifier: 12LfGrMcOkQXrrcKPSV01o7pnux7IZhpXph7V5ZI4aU=
Subject key identifier: B8:DC:8A:09:30:6A:30:BF:AE:0C:02:90:4B:80:E1:A8:88:7E:C4:24
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01A000577903429D095E6BDD067D305DF393
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uNyKCTBqML-uDAKQS4DhqIh-xCQ.roa
Signing time: Fri 14 Aug 2026 12:55:27 +0000
ROA not before: Fri 14 Aug 2026 12:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 83.147.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:57:79:03:42:9d:09:5e:6b:dd:06:7d:30:5d:f3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Aug 14 12:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8dc8a09306a30bfae0c02904b80e1a8887ec424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:62:a7:02:05:e6:d4:74:13:6a:69:3f:ab:e9:
79:99:a1:39:f2:b6:bd:39:cb:89:9d:81:9a:23:ae:
7b:b6:54:9d:c0:fa:da:2e:c0:06:7b:22:3e:0b:60:
4f:fb:a8:8b:e9:9c:5d:d7:4c:be:3b:27:06:b6:9e:
83:79:87:67:c1:af:94:fe:f6:bc:cf:92:36:19:6d:
f9:17:1f:50:d3:a0:93:c4:94:66:b5:ba:be:c8:57:
f1:46:a5:4b:ae:d5:fa:51:c2:61:75:8f:59:91:ec:
88:a6:f0:30:d2:2a:f6:22:f2:c6:e7:ba:87:bf:4d:
cf:cc:37:1c:35:db:38:01:52:63:3e:da:58:f2:b4:
61:aa:55:51:a3:77:e2:07:4f:cc:6d:36:fb:1c:7a:
70:2e:10:53:be:31:93:80:22:06:96:4b:ad:2b:6a:
6b:97:25:e5:50:a1:d8:b4:c4:01:98:c7:c7:d6:37:
84:4d:b7:ea:63:d6:4c:20:06:33:4e:e7:17:7f:60:
c8:5f:a6:a8:8d:b9:97:d0:9f:7f:93:40:f1:a1:96:
98:55:95:09:a7:4c:55:c0:07:b0:2d:9f:e6:2d:e6:
0d:0d:91:ce:dd:e1:3c:6d:2a:3c:c7:c2:7d:c4:e6:
1e:51:8c:ab:a6:1f:9d:86:88:7b:97:31:cb:5b:e8:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:DC:8A:09:30:6A:30:BF:AE:0C:02:90:4B:80:E1:A8:88:7E:C4:24
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/uNyKCTBqML-uDAKQS4DhqIh-xCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.6.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5e:16:08:5a:d5:f0:87:31:b9:30:35:7b:20:bf:cd:2a:f8:
08:46:78:96:85:22:44:84:ea:39:2d:09:cc:a8:27:5b:ea:0d:
b0:29:37:85:f1:5a:d6:e3:45:d4:c2:d3:cb:fd:6b:c5:45:6e:
ef:da:7e:d5:7c:9a:3d:41:9f:4e:14:dc:68:a4:ee:ea:b9:e3:
21:df:ba:79:22:71:b9:4b:18:5d:23:00:65:a4:1a:d9:dc:f4:
a6:30:3a:73:46:55:d3:17:11:2f:bd:b6:62:b1:78:0d:ba:ae:
ba:f6:37:0e:dc:b4:9c:fa:39:32:79:f1:49:8c:76:fc:5e:e4:
bb:cf:19:eb:87:ed:af:0a:ff:b5:c7:d0:b9:ac:89:02:8d:f0:
53:ec:9f:db:5f:09:e9:fa:92:e3:29:5b:14:a1:3d:8c:02:7e:
98:ff:8d:0d:cf:ba:ae:9d:c3:09:ed:ef:85:0b:f3:7a:df:7a:
ff:2b:f1:13:b2:83:59:32:46:a2:08:5d:ef:fb:8e:ac:c2:3c:
1d:b2:b6:76:25:4d:18:90:fd:58:f6:a9:ca:ac:2d:4a:90:ee:
bb:79:6c:12:ab:85:4f:e9:52:9b:df:0b:86:67:5c:b3:d2:49:
e2:e1:79:1b:af:7c:c0:64:0d:8b:a0:7e:52:9a:e6:48:f1:b2:
a5:6d:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:48 2026 by rpki-client