Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/UCHav0USJ72KUeyDtmvlSLVCeYg.roa
File: UCHav0USJ72KUeyDtmvlSLVCeYg.roa (raw, json)
Hash identifier: 3WWUbdLjAuU1XIlzj/xZGgFJ0D0xpP27qM0k9KOyY+U=
Subject key identifier: 50:21:DA:BF:45:12:27:BD:8A:51:EC:83:B6:6B:E5:48:B5:42:79:88
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 01A10DA1989D99941E9E394A9116082B3DB5
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/UCHav0USJ72KUeyDtmvlSLVCeYg.roa
Signing time: Mon 05 Oct 2026 19:54:16 +0000
ROA not before: Mon 05 Oct 2026 19:54:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218755
IP address blocks: 193.28.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:a1:98:9d:99:94:1e:9e:39:4a:91:16:08:2b:3d:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Oct 5 19:54:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5021dabf451227bd8a51ec83b66be548b5427988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:bc:4f:05:73:49:7e:78:c7:d0:bc:80:9f:
69:fc:67:c9:0f:37:90:5d:ca:11:78:b4:fc:b1:65:
c3:83:1b:23:cb:b1:6e:53:b6:f8:23:1d:fd:a9:0e:
94:a5:a1:82:d9:1c:24:f9:0e:9a:d9:29:d4:a9:e4:
43:d5:49:cd:36:96:87:0d:6e:ce:23:83:76:64:a0:
75:f5:a3:bf:3c:21:87:5c:4a:64:5f:00:a2:f1:c3:
4f:17:f0:8a:af:c1:f0:68:c3:59:29:67:dc:27:33:
87:b0:77:24:5f:70:6d:00:95:b6:a3:58:fe:f8:e1:
b3:24:ab:0c:53:99:a5:ff:f1:71:93:cd:0a:25:3b:
1a:48:46:29:c5:47:ed:24:98:09:1f:e9:c6:8f:14:
ab:9f:84:7f:ba:cd:4c:7e:8d:d1:f6:c3:6b:16:65:
34:73:10:b9:83:92:5d:0e:df:42:30:4e:79:b7:23:
cf:44:a2:b7:1d:fa:26:bb:a8:52:7c:6b:b6:e1:f9:
3f:11:9b:84:b0:74:54:25:44:c9:63:7f:d6:ae:6f:
c2:0f:82:14:b4:01:7c:5a:9d:ed:d5:20:43:b1:dd:
8c:14:08:5f:06:7b:e0:fc:90:bb:14:53:a1:3d:7d:
81:85:58:63:3d:02:43:2c:90:d1:16:50:8a:06:ea:
2c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:21:DA:BF:45:12:27:BD:8A:51:EC:83:B6:6B:E5:48:B5:42:79:88
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/UCHav0USJ72KUeyDtmvlSLVCeYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.86.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:39:4f:ce:35:66:da:1c:56:8b:ec:60:25:f5:b7:72:05:1d:
3d:70:e8:90:02:e7:10:6d:1e:cf:7a:cb:5d:05:9b:4c:35:f1:
bf:77:45:9a:c0:18:d7:3b:6e:97:7d:30:87:66:c5:08:34:09:
90:c3:29:74:b7:5e:9a:1c:ba:1b:1e:a1:7b:e0:6a:81:10:02:
94:b2:62:ee:2b:36:9b:fa:88:ff:9e:79:c4:25:be:90:5d:3f:
71:c4:b5:cd:4b:17:4e:57:9a:8e:3a:f7:7b:b4:6a:c4:3c:95:
29:ce:2c:e2:a4:3d:78:c5:24:13:08:62:9a:a3:95:2d:f7:3f:
7c:38:37:02:3d:91:b9:dd:95:e5:73:f3:f6:9d:45:29:c1:63:
69:f4:3d:1d:0d:bd:38:88:59:c7:0b:cc:90:e9:b0:e4:22:b4:
63:1f:f4:7c:49:d4:9e:55:cd:8c:2c:eb:f3:a2:57:af:69:d7:
87:ad:11:a7:6b:0b:85:2d:de:bc:06:a1:7a:f7:f8:88:4e:06:
85:8d:57:e0:44:c7:ec:e8:ec:7d:06:f0:70:00:f9:17:f4:04:
f2:d8:d4:e0:77:83:88:d5:fa:72:97:0e:95:b3:60:a5:06:31:
ee:b4:2f:74:41:a7:f5:e3:77:56:ba:cb:54:b8:74:b5:30:0e:
ef:e4:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 23:35:15 2026 by rpki-client