Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/uDY65mPa3CA0ATuNW_UofUlOVHo.roa
File: uDY65mPa3CA0ATuNW_UofUlOVHo.roa (raw, json)
Hash identifier: MOx97DXQM1veFBD3X3uPh9KTsc2aCNs+DfWLpHvfvyc=
Subject key identifier: B8:36:3A:E6:63:DA:DC:20:34:01:3B:8D:5B:F5:28:7D:49:4E:54:7A
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE1046DF79CA550EF7AEC9F520F9A
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/uDY65mPa3CA0ATuNW_UofUlOVHo.roa
Signing time: Tue 15 Sep 2026 21:49:28 +0000
ROA not before: Tue 15 Sep 2026 21:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11572
IP address blocks: 142.228.4.0/22 maxlen: 22
142.228.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e1:04:6d:f7:9c:a5:50:ef:7a:ec:9f:52:0f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8363ae663dadc2034013b8d5bf5287d494e547a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ed:9a:40:5c:92:c4:10:2c:90:1e:57:d0:ff:
7f:b8:58:af:d2:5c:7a:da:53:3d:db:f4:55:df:27:
93:bc:94:31:5b:72:aa:2a:47:8e:3f:8d:50:d8:98:
14:d8:6a:c6:44:46:7b:dc:5e:4a:8a:a5:be:67:2d:
45:89:b7:90:c5:04:cb:5c:99:52:8f:26:f9:6f:59:
2f:c6:88:97:91:8d:11:6b:ba:8f:f3:cd:8b:37:26:
b1:3a:0c:8c:68:07:b2:b8:c4:80:bb:65:6f:78:5c:
db:88:7e:17:34:04:68:b5:a1:1a:9e:72:cd:b3:11:
0c:72:98:1c:4a:b2:95:fb:7c:5a:e7:6c:e9:e0:b9:
6f:9f:3c:4b:79:7d:7d:d5:94:80:49:11:9a:14:87:
d9:b2:fd:bb:d4:10:86:da:39:aa:2b:6c:e2:62:8b:
a2:47:21:7f:03:13:2b:35:b8:72:ec:87:39:3e:f5:
6a:bf:d8:bf:85:22:11:15:fe:7d:16:99:d0:54:07:
ce:f7:fc:8e:20:82:42:2b:83:86:4c:42:72:7a:2f:
de:ff:ee:b8:b7:df:7b:ef:5e:35:a3:bc:40:05:d2:
31:4d:c1:0d:79:d2:eb:69:b5:f8:65:fd:fd:9e:83:
e6:66:36:00:41:fd:9e:77:67:f3:78:eb:ea:b3:7a:
77:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:3A:E6:63:DA:DC:20:34:01:3B:8D:5B:F5:28:7D:49:4E:54:7A
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/uDY65mPa3CA0ATuNW_UofUlOVHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.4.0/22
142.228.40.0/22
Signature Algorithm: sha256WithRSAEncryption
65:27:67:57:1f:d8:47:1c:cc:9f:a7:b8:54:3a:74:67:45:1a:
e3:26:3d:f6:d3:2b:52:b8:4c:74:b3:4c:fe:7a:81:e7:0e:00:
86:5f:2b:4d:71:72:3c:6c:24:ad:5c:2b:d9:eb:9a:10:91:de:
7d:b4:f2:45:91:da:5b:a3:26:ff:1d:90:c4:5a:99:4d:7c:41:
5c:d2:31:d2:d1:e1:fd:02:69:5e:11:fc:b5:fd:d6:55:31:6d:
1c:a0:c1:39:31:44:a6:94:73:81:4d:67:a5:da:ef:61:d4:ec:
ce:6b:56:04:e4:71:2b:f7:e1:68:64:6f:ef:12:cc:3d:ae:d3:
6e:23:f6:0d:d8:72:74:d3:f6:3f:01:29:2a:d2:c5:f8:9d:5b:
3c:dd:bc:25:d4:73:ea:05:d9:17:ab:b7:0e:cf:32:3f:36:fe:
58:8c:7e:62:c5:68:ad:f4:3c:a9:ae:2e:df:42:1f:dc:24:5e:
13:25:72:7d:6a:e2:85:8b:2c:14:ff:bf:a0:1e:5a:88:a1:ed:
c9:bb:74:fe:52:be:ea:48:9b:ce:69:22:b4:14:3e:92:44:71:
61:3d:22:f2:25:59:0a:84:12:1f:6f:0b:3d:88:7d:c1:59:7c:
43:35:1d:d7:b3:5e:8d:8d:58:8f:3a:43:3b:f9:2a:f9:f9:23:
cf:ab:d3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:52 2026 by rpki-client