Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa
File: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (raw, json)
Hash identifier: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=
Subject key identifier: B8:C3:97:AC:52:EA:73:94:F4:62:0D:73:AC:BF:C9:9A:4E:1A:09:9F
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 01A047C2521FE87FBA90969A83EC41EB56A1
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa
Signing time: Fri 28 Aug 2026 09:45:12 +0000
ROA not before: Fri 28 Aug 2026 09:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 2.59.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:c2:52:1f:e8:7f:ba:90:96:9a:83:ec:41:eb:56:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Aug 28 09:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8c397ac52ea7394f4620d73acbfc99a4e1a099f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:40:e9:b8:be:53:7b:8d:b9:9f:cf:f9:a9:
53:f1:66:c0:4a:bd:03:ac:70:85:94:01:32:bb:08:
92:12:81:96:a3:eb:7b:96:ea:c3:bc:b9:4e:da:0a:
a2:72:ed:df:6c:06:d3:bc:61:66:8f:55:bf:8c:5a:
b6:bc:25:c8:a6:c1:f0:2d:be:3b:f0:4c:63:5a:43:
17:4d:c6:c8:6f:cf:47:60:00:45:cb:9a:9a:d8:12:
54:b2:85:53:ea:77:64:67:ef:e0:31:24:25:62:62:
c9:57:b4:15:a0:ce:7a:e5:46:82:f7:a8:8b:5f:42:
db:bd:dd:7e:70:3a:dd:45:ce:89:e5:a7:40:df:d9:
e9:be:10:c0:d3:13:e7:5f:0b:09:2e:25:43:de:9f:
09:c7:1b:7f:12:46:c5:4e:7c:9a:bb:98:a7:98:0e:
05:be:ae:4f:ec:23:34:56:34:74:6e:f6:11:88:81:
10:e6:4c:2a:2b:84:8c:89:10:d4:2f:86:86:94:eb:
5e:ac:3e:18:34:da:53:67:9d:a3:d0:f6:3c:7b:30:
0d:52:00:a8:9a:29:68:48:8e:e2:19:59:ac:71:9c:
3b:06:14:57:7f:c5:a6:95:b5:41:d0:8c:45:22:ef:
69:7c:94:f5:a9:17:09:a0:0a:f3:b9:d7:55:3f:f4:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C3:97:AC:52:EA:73:94:F4:62:0D:73:AC:BF:C9:9A:4E:1A:09:9F
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.180.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:33:08:e7:47:3e:7f:b8:94:0d:93:19:19:ae:cc:02:43:90:
36:a2:bb:d3:6e:2f:d5:5b:1d:47:15:5f:70:ab:22:1d:d8:b9:
68:e5:4f:93:9b:f2:d3:5a:2b:37:8d:7a:ee:64:2f:a3:dc:8e:
bf:99:7c:cc:d4:2a:ad:8b:1e:82:4a:8d:83:e4:a0:ea:32:7a:
d0:7e:5c:f3:18:89:9f:c7:ef:ea:1c:d1:a1:fc:cb:86:12:c4:
11:a5:d4:2a:4f:e8:5d:c7:41:6e:36:77:6e:80:c3:ca:33:cd:
ee:dc:c3:23:73:3f:3d:8e:3b:69:9f:44:17:4d:e3:4d:c5:45:
96:7d:ea:8b:d4:c7:5b:f2:96:7b:9e:4e:51:92:60:df:93:a4:
f0:85:e4:07:c2:fd:f8:51:da:17:47:af:a9:91:52:34:fe:93:
c6:11:e3:88:4c:dd:06:0f:8a:49:35:17:99:d5:d1:21:f7:a9:
b8:69:f5:3b:3a:ed:f8:b4:48:bf:20:28:1b:90:3f:bb:10:90:
27:51:63:cf:72:69:3c:e5:2b:25:6f:2d:95:a2:5f:60:77:e2:
3f:7e:b7:33:1c:fc:b8:e6:c3:b6:03:aa:05:9d:c2:48:70:e3:
02:22:a7:d8:e8:5d:5d:07:7e:5f:7e:d8:29:f3:d9:79:49:43:
a5:a3:92:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBHwlIf6H+6kJaag+xB61ahMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2
OTczY2YwHhcNMjYwODI4MDk0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGMzOTdhYzUyZWE3Mzk0ZjQ2MjBkNzNhY2JmYzk5YTRlMWEwOTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VBA6bi+U3uNuZ/P+alT8WbASr0D
rHCFlAEyuwiSEoGWo+t7lurDvLlO2gqicu3fbAbTvGFmj1W/jFq2vCXIpsHwLb47
8ExjWkMXTcbIb89HYABFy5qa2BJUsoVT6ndkZ+/gMSQlYmLJV7QVoM565UaC96iL
X0Lbvd1+cDrdRc6J5adA39npvhDA0xPnXwsJLiVD3p8Jxxt/EkbFTnyau5inmA4F
vq5P7CM0VjR0bvYRiIEQ5kwqK4SMiRDUL4aGlOterD4YNNpTZ52j0PY8ezANUgCo
miloSI7iGVmscZw7BhRXf8WmlbVB0IxFIu9pfJT1qRcJoArzuddVP/QKMQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjDl6xS6nOU9GINc6y/yZpOGgmfMB8GA1UdIwQY
MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It
MzQwZDYyNWM2ZGJhLzEvdU1PWHJGTHFjNVQwWWcxenJMX0ptazRhQ1o4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh
LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAju0MA0G
CSqGSIb3DQEBCwUAA4IBAQBqMwjnRz5/uJQNkxkZrswCQ5A2orvTbi/VWx1HFV9w
qyId2Llo5U+Tm/LTWis3jXruZC+j3I6/mXzM1Cqtix6CSo2D5KDqMnrQflzzGImf
x+/qHNGh/MuGEsQRpdQqT+hdx0FuNndugMPKM83u3MMjcz89jjtpn0QXTeNNxUWW
feqL1Mdb8pZ7nk5RkmDfk6TwheQHwv34UdoXR6+pkVI0/pPGEeOITN0GD4pJNReZ
1dEh96m4afU7Ou34tEi/ICgbkD+7EJAnUWPPcmk85Sslby2Vol9gd+I/frczHPy4
5sO2A6oFncJIcOMCIqfY6F1dB35fftgp89l5SUOlo5Lg
-----END CERTIFICATE-----
Generated at Sun Aug 30 06:27:55 2026 by rpki-client