Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UU9AIiwTXHVhtczS-3lIdYB4oTM.roa
File: UU9AIiwTXHVhtczS-3lIdYB4oTM.roa (raw, json)
Hash identifier: q2xfQmUqjh5AEC/ZaqF14S0bLlgIvq2G+pJpF2iGmQ4=
Subject key identifier: 51:4F:40:22:2C:13:5C:75:61:B5:CC:D2:FB:79:48:75:80:78:A1:33
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0BDD637359A73A90039CF51D473D6D1C7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UU9AIiwTXHVhtczS-3lIdYB4oTM.roa
Signing time: Sun 20 Sep 2026 08:02:07 +0000
ROA not before: Sun 20 Sep 2026 08:02:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402866
IP address blocks: 195.162.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d6:37:35:9a:73:a9:00:39:cf:51:d4:73:d6:d1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 20 08:02:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=514f40222c135c7561b5ccd2fb7948758078a133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b6:c3:81:3e:17:dd:98:68:15:02:f1:34:3f:
c6:8d:e2:3f:33:38:7d:79:6c:e6:62:82:03:6a:b3:
cb:55:d3:77:44:d3:e0:b9:2f:91:97:5f:8f:6d:f8:
05:b7:07:52:77:bf:fe:0a:ef:bc:ed:2a:61:27:ba:
d5:d5:92:bb:fd:a9:79:cd:01:4f:25:9d:ed:87:4d:
80:25:75:ee:1b:08:a5:4e:7c:27:2e:25:a1:e0:82:
10:d7:47:32:b6:44:7b:dd:1c:6b:ac:8c:03:4c:a3:
ce:64:41:2e:eb:0e:19:f9:38:8b:98:ad:d6:6c:0d:
5f:1a:9c:ba:fc:87:c6:ce:48:bd:4e:b5:89:a7:a3:
41:15:84:4d:16:70:3b:66:b2:5d:c0:11:7f:80:13:
13:0e:4c:23:eb:93:0c:9a:a0:9e:21:c0:54:0f:72:
56:10:1d:53:b6:5f:5e:26:7a:11:73:92:13:1b:af:
95:38:b5:da:fe:36:49:71:10:93:4c:4e:72:b0:60:
74:c8:1b:97:fc:87:24:89:5d:4d:37:b1:48:58:aa:
ce:d6:ef:29:a2:9a:57:5f:7c:35:6d:d8:7e:31:01:
95:0f:14:a4:d9:4e:74:f4:08:8b:6e:34:cb:97:91:
43:11:95:ad:f9:b1:3e:d9:65:50:de:93:dd:f4:5c:
8e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:4F:40:22:2C:13:5C:75:61:B5:CC:D2:FB:79:48:75:80:78:A1:33
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/UU9AIiwTXHVhtczS-3lIdYB4oTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.162.254.0/24
Signature Algorithm: sha256WithRSAEncryption
53:7e:11:61:96:5a:7e:a0:bc:45:27:35:bb:98:da:4c:bb:f3:
b2:48:71:c1:77:af:82:09:84:7e:c0:8e:52:9e:5c:d0:bc:cf:
c1:1c:ac:78:e4:a3:40:36:11:0e:7a:7c:47:e2:c0:4f:ed:af:
5c:cb:61:58:d8:1b:30:c5:e2:66:c1:c0:48:b8:5e:aa:88:1e:
83:6c:6a:cc:87:21:52:e3:bb:bd:70:b8:3d:8b:e4:ec:b4:3a:
23:c2:2e:d6:bc:01:68:24:7e:23:ed:60:71:0f:6d:23:5f:de:
45:04:09:3a:7d:30:70:35:fb:cd:a4:cc:b1:60:12:b4:b2:99:
47:e5:7b:38:f0:b4:a0:ff:68:0b:f1:48:c5:d1:14:f7:9c:f5:
d0:99:12:53:af:f6:0f:53:c3:f3:8c:8a:a4:81:f6:df:39:8b:
b3:98:cb:7c:cb:71:51:33:1e:8a:d4:5a:06:2e:3d:92:f7:81:
0a:19:4a:a0:42:10:af:e1:3c:85:65:a5:2e:26:42:3d:f4:7d:
5e:98:41:e8:d5:04:0d:fb:11:d4:2b:5a:70:27:62:a6:97:1f:
46:18:c0:9a:9e:96:42:ba:63:47:cf:82:d3:8a:1f:0a:91:87:
74:74:ca:87:b9:97:32:24:02:77:b6:33:df:e1:d4:a8:49:bd:
76:c0:20:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:03:01 2026 by rpki-client