Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/uUkYTWJlvzaPh0qHhHyoZNFlGIk.roa
File: uUkYTWJlvzaPh0qHhHyoZNFlGIk.roa (raw, json)
Hash identifier: LBun7MYL+1YtN2glOK5uK1eDRtkgLoINsdtK7MQ7+90=
Subject key identifier: B9:49:18:4D:62:65:BF:36:8F:87:4A:87:84:7C:A8:64:D1:65:18:89
Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Certificate serial: 01A13F79F488CA3CCD27163A2AAD44D4C6F6
Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/uUkYTWJlvzaPh0qHhHyoZNFlGIk.roa
Signing time: Thu 15 Oct 2026 12:11:59 +0000
ROA not before: Thu 15 Oct 2026 12:11:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19527
IP address blocks: 64.39.82.0/23 maxlen: 23
64.39.82.0/24 maxlen: 24
64.39.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:79:f4:88:ca:3c:cd:27:16:3a:2a:ad:44:d4:c6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd
Validity
Not Before: Oct 15 12:11:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b949184d6265bf368f874a87847ca864d1651889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:4f:05:bf:c5:b1:08:58:5a:49:59:97:35:
fa:e7:17:31:d5:63:6b:90:9d:52:6f:2e:8d:20:22:
88:62:9c:01:d2:8c:28:5f:4f:6f:3d:0d:85:e0:09:
0f:2d:a5:cf:73:c3:0f:2c:d4:90:9a:6d:c1:c5:cb:
2a:0c:cd:23:2b:83:81:00:b3:31:fb:9e:ac:59:46:
64:a8:ca:8a:62:16:40:8d:16:18:b2:c6:dd:8a:c1:
91:9e:bb:93:1d:28:d2:95:09:89:93:7c:b6:56:fb:
79:97:44:4c:9c:ff:81:8b:05:99:70:a8:23:11:d8:
02:87:cc:dc:ea:bb:92:c9:28:77:e8:58:d6:6c:b2:
a0:53:1d:6c:c3:ca:a0:d5:03:16:4b:27:f3:b1:63:
7d:a8:aa:6f:2f:6e:d6:2b:47:20:c3:ff:ee:50:9c:
62:c6:c7:a3:00:28:5a:6a:3a:d0:ee:94:45:47:f2:
92:1e:de:f2:9b:f3:19:b4:98:d4:79:b4:09:8b:cd:
54:de:e0:90:f0:0c:93:e4:41:d4:a2:cb:98:3d:38:
e5:3b:24:d3:94:f8:f6:d3:c0:2c:1b:19:fb:fa:63:
47:2f:88:6d:96:67:d2:d6:87:e1:f3:7f:6a:1e:b5:
21:5a:ba:a9:a9:c5:5c:e2:67:23:42:aa:f9:8d:e5:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:49:18:4D:62:65:BF:36:8F:87:4A:87:84:7C:A8:64:D1:65:18:89
X509v3 Authority Key Identifier:
keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/uUkYTWJlvzaPh0qHhHyoZNFlGIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.39.82.0/23
Signature Algorithm: sha256WithRSAEncryption
40:24:51:7f:cd:da:d1:92:d5:f8:61:8c:10:19:db:0b:d8:bb:
72:1d:8b:74:0b:a2:73:73:d4:0b:bb:e0:2a:f8:03:df:ad:7a:
8b:7b:be:0c:16:ac:14:86:af:6d:e9:2d:a3:1f:90:1f:bc:93:
e8:27:3a:24:35:f2:4b:37:ce:90:04:a4:3b:38:8c:52:c7:af:
ff:5d:43:c7:85:49:c5:8f:af:80:c3:13:6c:21:de:f3:ea:89:
f3:a7:3e:6a:0e:31:cf:b2:b0:1a:b7:b0:28:ea:d8:26:1b:d8:
a0:41:86:b1:ce:81:33:f8:4d:f7:71:a0:55:2c:76:8b:46:67:
11:5e:b6:2d:00:bc:4d:93:ee:33:41:c0:a0:68:02:a2:b0:63:
a1:37:9c:ad:99:c9:c6:e0:d1:82:9a:00:d4:a7:c4:48:1f:92:
ec:09:9a:65:94:2a:44:31:7f:98:a6:a1:94:ba:e0:cd:f9:43:
f8:25:c0:3c:76:72:20:49:35:d2:a5:f6:28:d7:a9:b5:40:07:
44:d7:49:53:ab:7e:0a:75:f0:d1:ee:e3:96:79:de:96:6c:b7:
6e:7b:b5:9d:e0:cc:93:53:4f:d4:7d:42:0c:ce:9e:9f:49:b6:
43:0f:23:7d:79:06:92:9b:c0:fa:6d:cd:47:d9:2c:05:5c:ab:
98:d9:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:01:25 2026 by rpki-client