Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa
File: ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa (raw, json)
Hash identifier: S6htXVqvYivJ/J0tyQH0JXgWVjrdc9WIOkcpLunur6E=
Subject key identifier: B9:C5:43:EB:6B:88:A3:F1:32:6F:40:0C:C9:6A:08:C1:81:AA:65:34
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019C9E00A044FAE217AB79BD41A7F0584D2A
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa
Signing time: Fri 27 Feb 2026 07:29:27 +0000
ROA not before: Fri 27 Feb 2026 07:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200823
IP address blocks: 213.176.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:00:a0:44:fa:e2:17:ab:79:bd:41:a7:f0:58:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Feb 27 07:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9c543eb6b88a3f1326f400cc96a08c181aa6534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:24:a1:3e:9d:2f:32:5e:e3:bc:05:53:8b:
f7:25:e1:d1:55:26:a8:e6:73:55:e4:a7:d3:06:f4:
95:d3:92:0f:28:8c:7a:6e:ae:3b:e4:75:3d:2a:b8:
2c:d9:4c:cb:5a:5c:60:ef:d1:ad:b8:b6:0a:ec:e4:
c1:a2:e6:cc:fb:93:cd:db:25:76:83:16:ac:ec:21:
7d:2c:9b:d7:f4:6a:c6:fb:cf:0d:9e:0d:7c:e0:8d:
01:95:a5:32:ee:85:34:e1:8b:ad:6f:b2:da:c4:ed:
86:2a:5c:05:08:f7:94:05:be:db:ef:2f:79:e9:80:
c5:78:80:cf:c6:70:71:c8:9c:cf:6d:cf:fd:20:8d:
c0:93:4c:fb:69:35:cd:af:d7:f4:4c:a0:b8:be:49:
4a:b3:d8:18:7f:61:7b:52:ca:be:f5:c9:ae:66:91:
87:a1:1e:90:67:99:54:e4:cf:9d:18:51:e2:91:ad:
01:5d:f0:44:bc:38:d1:17:6d:7f:ed:cc:9f:2e:6c:
8f:59:28:df:ab:73:3a:f6:92:0c:aa:53:19:c3:19:
c3:42:8b:e7:b8:0c:e1:ca:01:2f:e8:5e:33:f5:8a:
b3:fd:d2:5a:cf:0a:cb:68:2b:07:11:48:15:fe:14:
69:87:7e:8b:4b:f3:2c:a6:2a:76:8b:ab:a3:57:35:
31:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C5:43:EB:6B:88:A3:F1:32:6F:40:0C:C9:6A:08:C1:81:AA:65:34
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/ucVD62uIo_Eyb0AMyWoIwYGqZTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.79.0/24
Signature Algorithm: sha256WithRSAEncryption
75:78:da:6e:57:04:9f:e9:77:e2:2c:df:1d:bf:24:e5:55:e8:
be:43:4d:bb:02:08:87:e1:e1:35:b2:ab:90:f8:d9:b1:ea:01:
06:8e:59:b5:3b:13:93:08:79:34:00:4a:4c:cc:fd:f3:d0:35:
94:b5:5a:f1:5b:29:6a:c9:83:d6:a2:b2:f5:cd:ef:b6:ba:e7:
53:12:9e:6d:e9:b9:c4:78:29:5a:0c:15:b5:19:0d:d3:a9:c5:
94:11:af:12:5d:bf:fa:52:10:b8:59:8e:e7:2b:89:11:25:2d:
26:1c:1f:11:d7:4c:db:7d:3a:a8:f2:ef:0c:a1:94:aa:6c:7a:
c4:fb:90:4e:37:72:ff:05:ac:6f:96:5f:22:88:40:ee:76:88:
f6:7c:d1:c9:d2:76:74:47:e7:f4:74:ea:5e:6d:75:7b:04:cf:
dc:bd:91:39:6a:e9:7f:d4:4f:3b:1b:65:da:20:79:bc:d4:62:
09:54:45:c6:17:24:d9:77:94:61:3e:7a:37:c9:aa:b9:78:33:
56:80:e5:04:bd:27:34:3e:6e:d9:e0:04:c5:37:e9:64:a6:a5:
43:8f:ed:99:f0:f1:6d:3e:c5:88:ad:62:3d:16:45:e6:4b:90:
39:12:03:14:e2:aa:a9:0d:fc:93:10:c5:74:da:19:a6:5d:85:
d3:a4:8a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:06 2026 by rpki-client