Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/uEomgdbx0SSJXLdsKU7C7Kj9JB4.roa
File: uEomgdbx0SSJXLdsKU7C7Kj9JB4.roa (raw, json)
Hash identifier: av9XRWGuqwu2vAyclOm2BKAsr7aCyfHw7tRuLe1myAQ=
Subject key identifier: B8:4A:26:81:D6:F1:D1:24:89:5C:B7:6C:29:4E:C2:EC:A8:FD:24:1E
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 01A0945228F9523D8425E23C1B57BE4829DE
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/uEomgdbx0SSJXLdsKU7C7Kj9JB4.roa
Signing time: Sat 12 Sep 2026 06:33:27 +0000
ROA not before: Sat 12 Sep 2026 06:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 2a10:dec0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:94:52:28:f9:52:3d:84:25:e2:3c:1b:57:be:48:29:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 12 06:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84a2681d6f1d124895cb76c294ec2eca8fd241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:b8:44:90:64:90:8c:6e:3d:25:f6:f6:38:
3b:9d:68:f0:29:74:c2:eb:b1:1b:ca:c2:1d:0a:f9:
92:21:64:af:a6:54:9d:a6:ba:40:c5:85:a5:46:2a:
b0:60:a7:55:66:43:a4:2a:be:34:c1:f6:2f:b8:5d:
02:c1:80:97:b6:30:02:78:27:92:c2:cd:31:58:53:
84:db:78:3d:1d:4c:fa:cc:1d:2d:b0:22:da:39:37:
52:e4:55:ac:7e:dc:10:66:49:54:e2:07:8e:06:59:
da:97:9b:b1:3b:81:1a:2c:6d:b8:d8:23:8e:5e:bd:
77:ae:dd:5b:4a:a5:4f:ee:21:f1:4b:9d:d4:34:21:
23:1d:05:ec:88:eb:c0:47:c4:93:9a:a9:13:22:c6:
46:fc:c7:22:7e:88:46:1c:1f:05:59:91:81:ed:9f:
5e:5f:d5:29:af:92:be:2c:ca:b7:8f:a6:fc:ce:09:
d0:39:3c:ca:a8:38:45:29:c7:46:24:44:ad:23:1f:
cf:d6:19:3b:62:d4:7d:f5:8e:0b:e2:b1:0d:29:72:
07:12:d6:d0:47:4b:e2:0f:59:de:27:1b:da:0b:bc:
1b:d8:72:73:15:5d:8b:5c:bf:18:e5:bd:56:1a:84:
69:e8:6c:46:82:0a:4b:c6:84:6a:5b:6a:f4:3b:37:
32:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:26:81:D6:F1:D1:24:89:5C:B7:6C:29:4E:C2:EC:A8:FD:24:1E
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/uEomgdbx0SSJXLdsKU7C7Kj9JB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
49:e9:fe:de:96:a7:e6:dc:2e:be:5c:82:11:32:c1:b6:84:8a:
f6:c6:e1:7a:ef:a1:98:31:54:51:9c:0b:68:98:3b:6f:ef:44:
75:ef:64:7e:f5:53:b0:8f:d2:8f:4b:b8:f0:db:75:5a:13:1e:
f5:36:0c:50:c1:49:da:01:1d:47:5a:4c:b6:c7:c0:64:4a:80:
a9:aa:e5:2d:53:47:6b:38:04:23:71:a6:d9:45:b8:72:37:6d:
b2:19:4a:fd:48:ce:9b:aa:79:94:e0:6f:8c:9f:98:62:c5:f0:
80:ea:a4:78:58:0e:2b:e5:00:ec:c3:8e:d1:96:e1:96:8c:27:
c1:9f:52:af:37:50:bb:e1:57:7e:ff:2e:f3:58:d6:97:89:83:
bd:51:9e:bb:c2:07:94:f8:f9:07:52:fd:38:6f:77:d2:72:a3:
ad:5f:f5:fc:9f:fc:3e:11:b0:cd:e8:b3:61:d5:8e:95:3b:ab:
0b:b1:74:89:37:c2:ee:e9:3e:37:5f:17:a9:09:89:5e:d1:4a:
be:bc:7f:3b:37:49:55:4e:5a:1b:20:da:cf:0e:65:4a:9a:5a:
45:60:a0:27:61:c8:54:d5:f0:7d:17:02:6b:9d:14:20:2f:ef:
86:4b:7a:58:e2:c9:35:06:bd:80:2e:9d:3c:83:a1:a2:9f:19:
ab:a7:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:55 2026 by rpki-client