Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/UgcaqARpZEhIRz65bcMkPzf98wU.roa
File: UgcaqARpZEhIRz65bcMkPzf98wU.roa (raw, json)
Hash identifier: yLTp7DiKxk6cbTossdpZ5QihnG6qCy0foGcotAsMr6E=
Subject key identifier: 52:07:1A:A8:04:69:64:48:48:47:3E:B9:6D:C3:24:3F:37:FD:F3:05
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 01A031AC422673E189171AD7B199722CDB0E
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/UgcaqARpZEhIRz65bcMkPzf98wU.roa
Signing time: Mon 24 Aug 2026 02:49:27 +0000
ROA not before: Mon 24 Aug 2026 02:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36231
IP address blocks: 2a03:e680::/48 maxlen: 48
2a03:e680:1::/48 maxlen: 48
2a03:e680:3::/48 maxlen: 48
2a03:e680:4::/48 maxlen: 48
2a03:e680:5::/48 maxlen: 48
2a03:e680:6::/48 maxlen: 48
2a03:e680:7::/48 maxlen: 48
2a03:e680:8::/48 maxlen: 48
2a03:e680:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:31:ac:42:26:73:e1:89:17:1a:d7:b1:99:72:2c:db:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Aug 24 02:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52071aa80469644848473eb96dc3243f37fdf305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:43:4c:a5:de:28:fc:62:13:50:f0:e9:44:07:
76:81:2c:45:3a:eb:ab:a2:cf:80:fd:0b:10:23:9b:
a6:b0:6d:03:1d:fb:85:c9:02:6a:94:1e:36:66:7f:
ce:26:38:ec:25:94:f0:76:81:3a:9a:d7:87:e6:c9:
b4:54:7d:9d:d6:77:0f:e6:5e:b5:cd:8e:6c:a9:21:
65:fb:fd:e5:5e:9e:fa:0f:75:db:59:e3:fb:51:b4:
39:84:2c:88:7d:b0:5b:dc:d3:82:db:f5:f3:14:e6:
39:44:20:61:1e:3c:13:0c:fe:6d:98:69:87:2a:02:
7b:33:a5:8f:01:5d:d3:2e:e5:5d:38:f4:0e:37:d4:
cf:9f:5f:ab:ff:30:69:1e:18:3b:33:dd:0c:ff:5f:
25:db:06:24:1a:bc:7b:ef:29:4f:0b:76:f3:26:a3:
a6:18:16:f1:7c:5c:96:50:c1:e7:6f:79:42:7f:5a:
18:36:fc:6f:b4:bf:f8:4a:7e:4a:94:f9:f6:32:45:
8d:d1:93:7b:df:d1:a3:ee:bc:ea:83:4b:c4:0b:2c:
23:fe:48:73:28:e3:f9:c8:a8:ca:92:37:0f:1a:9b:
9d:07:e2:91:bf:7e:67:37:8f:1b:b2:8c:aa:33:ca:
f8:e0:12:ea:4b:b0:1a:2b:97:1b:0e:4e:fe:19:ce:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:07:1A:A8:04:69:64:48:48:47:3E:B9:6D:C3:24:3F:37:FD:F3:05
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/UgcaqARpZEhIRz65bcMkPzf98wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e680::/47
2a03:e680:3::-2a03:e680:9:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ac:40:e5:4f:96:7d:a8:92:68:07:5d:70:8c:80:22:0c:e8:30:
7d:10:45:7a:9d:ae:42:41:e8:cb:27:db:c4:fd:6e:3f:9f:4f:
7f:15:96:a4:90:81:70:dc:82:75:24:f0:1e:47:0f:2a:0e:2b:
34:d9:31:0a:64:67:06:e2:81:13:4e:d4:a2:c4:89:22:55:8d:
8d:02:5d:0a:e3:83:a2:bd:9d:01:a3:1e:c7:63:e1:91:2d:e9:
b3:1c:39:04:bf:7e:d5:2d:4c:b1:ed:9f:d8:ac:03:da:68:c7:
fe:d1:3a:e4:6a:ae:68:07:fe:07:4b:c2:41:f5:a5:cb:7f:61:
bf:35:b5:62:52:8a:69:37:0b:d1:54:6a:39:ec:b0:0a:24:9f:
7d:18:34:42:06:92:80:92:20:c9:b2:6c:f9:f1:70:63:02:52:
0d:cb:6e:66:32:2c:d2:32:28:5c:88:62:15:8c:fe:6e:df:10:
ae:24:a3:e5:52:81:c6:a8:e9:78:b2:e6:96:35:53:55:49:bd:
af:af:d9:fc:6c:c5:61:d1:87:f8:85:20:92:f5:e2:88:d7:3a:
c8:08:c4:3d:70:11:6b:5a:a5:07:05:cb:e1:c6:62:0e:36:23:
87:0a:72:6d:26:76:a9:23:4a:6b:a9:ac:01:5c:d5:13:70:a3:
bf:ec:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:57:00 2026 by rpki-client