Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/uq6flifS-8MNzYK-SKKeptPpQnc.roa
File: uq6flifS-8MNzYK-SKKeptPpQnc.roa (raw, json)
Hash identifier: piRUP02rnBiBGnKCZ85TJpIMx3kcAqk32wn6KoOR8Oo=
Subject key identifier: BA:AE:9F:96:27:D2:FB:C3:0D:CD:82:BE:48:A2:9E:A6:D3:E9:42:77
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A0AF0E551C63986F6351ED5E435CE2B36D
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/uq6flifS-8MNzYK-SKKeptPpQnc.roa
Signing time: Thu 17 Sep 2026 11:09:07 +0000
ROA not before: Thu 17 Sep 2026 11:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218641
IP address blocks: 2a0a:87c0:fffd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:0e:55:1c:63:98:6f:63:51:ed:5e:43:5c:e2:b3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Sep 17 11:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baae9f9627d2fbc30dcd82be48a29ea6d3e94277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:33:e1:be:be:3f:f6:78:76:62:d0:88:6a:d6:
8c:c0:41:36:34:3a:49:87:96:a8:58:56:73:a5:2a:
66:b9:12:27:92:25:a6:f5:75:0a:23:84:21:e9:8c:
5c:f2:9a:6e:17:9a:d1:af:83:e4:65:4d:ef:d2:e2:
ac:1d:fa:5d:c5:cc:d3:ba:4c:6c:9b:43:90:4c:4b:
84:c1:c7:4a:9f:47:84:a8:95:a6:6e:7b:36:d2:f8:
6e:29:05:83:80:37:67:cb:84:46:d1:db:ba:90:84:
02:88:e5:38:4e:38:f0:74:42:df:32:f8:f0:24:58:
1c:f1:c1:f6:ab:d4:6b:4e:86:29:f7:40:6b:cd:38:
9d:c9:f3:9d:f7:ee:bb:a1:dd:28:d9:79:60:5b:42:
08:8d:8d:09:fd:da:95:01:53:e1:8a:84:e2:12:07:
44:66:bd:6e:2e:b8:a6:6e:d2:8d:30:c5:04:93:39:
78:a5:dd:80:e0:16:6a:97:77:4a:77:e1:3e:8a:58:
4a:fb:bb:d3:b1:8b:2e:48:97:84:6e:3e:96:58:f8:
9e:3e:96:3c:7e:69:22:a5:f2:62:39:4d:19:ab:8b:
8c:91:28:a9:ab:7f:94:41:11:b0:0b:49:37:67:58:
01:70:68:05:f0:cc:94:5e:14:b8:a9:06:25:a5:d5:
13:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AE:9F:96:27:D2:FB:C3:0D:CD:82:BE:48:A2:9E:A6:D3:E9:42:77
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/uq6flifS-8MNzYK-SKKeptPpQnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fffd::/48
Signature Algorithm: sha256WithRSAEncryption
49:43:e4:b7:15:2b:50:52:d5:82:72:d4:3b:1a:7b:a3:80:3f:
45:b3:37:a5:3f:7b:2d:b2:21:b4:90:c7:2f:9c:ef:9d:90:7c:
80:4a:74:6b:14:2f:7c:2f:93:25:d0:54:1e:21:43:0a:16:f3:
91:38:f5:6a:7b:76:bf:0e:ca:7d:23:62:7d:00:15:b5:a1:70:
47:0c:ad:d2:05:28:96:60:50:6f:1d:03:5a:bf:16:26:65:7b:
c3:b8:85:bb:3d:28:84:00:3d:63:64:8c:37:df:0e:08:b5:77:
ef:09:84:b9:15:6e:4a:0b:c5:b8:ac:22:05:ef:d4:6d:e0:59:
d0:13:4c:9b:7d:16:b3:26:9d:c8:ed:8b:49:82:7a:9f:ac:d1:
5a:4e:4f:e0:10:e4:67:91:06:25:c6:1e:50:45:d6:d9:10:a9:
47:86:8a:20:f9:24:22:73:75:6f:eb:ee:9f:12:03:9a:52:34:
93:82:9f:f3:a8:fc:05:73:3f:f9:db:7b:28:ce:2e:8c:dd:38:
bb:89:c9:19:ae:bd:83:dd:65:22:7a:10:5a:2d:3e:ef:d7:3a:
42:db:fc:a4:0b:e3:3a:6e:1c:29:62:61:22:c2:62:e6:c7:e1:
96:58:38:a0:86:4e:ae:fc:ea:3e:20:b2:24:21:37:7f:90:86:
ec:6d:d4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:37:28 2026 by rpki-client