Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Udbfecd9OCCIBZn1ZpoY9Waxspc.roa
File: Udbfecd9OCCIBZn1ZpoY9Waxspc.roa (raw, json)
Hash identifier: xbUJKuEDdKtNd3Br7CaZ0f5SjgbV6Mekx30bWNFgp2Q=
Subject key identifier: 51:D6:DF:79:C7:7D:38:20:88:05:99:F5:66:9A:18:F5:66:B1:B2:97
Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial: 019C521B16E5342DCDFB58BC0744C171AF5E
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Udbfecd9OCCIBZn1ZpoY9Waxspc.roa
Signing time: Thu 12 Feb 2026 13:47:12 +0000
ROA not before: Thu 12 Feb 2026 13:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201662
IP address blocks: 95.181.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:52:1b:16:e5:34:2d:cd:fb:58:bc:07:44:c1:71:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Validity
Not Before: Feb 12 13:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51d6df79c77d3820880599f5669a18f566b1b297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:e8:bf:a8:a4:80:4a:63:09:9c:1e:1e:36:
27:c2:03:23:95:d6:e9:5f:ac:dd:4f:5b:a9:2a:65:
a3:f5:7b:55:d1:b6:d4:30:52:31:9d:66:25:4a:d7:
eb:b2:92:20:e0:0c:b8:ba:a2:68:8c:64:4f:e9:d8:
e3:3c:c1:b8:59:56:78:f6:13:3d:ba:c6:82:39:f1:
67:cc:6c:1f:f1:8d:96:b7:21:5b:87:6b:64:ba:92:
47:1c:15:d4:ad:30:44:e7:39:d0:69:43:14:28:31:
5f:91:15:34:1e:a3:80:ae:e6:a8:89:fb:d2:ae:21:
a6:e0:79:c5:23:6f:3a:d6:d0:99:2a:97:e7:01:ef:
9f:60:a6:5a:18:e8:9e:ab:44:45:b0:f9:dd:e8:ce:
0b:99:99:7b:97:01:35:37:cd:eb:67:fc:36:ad:06:
f1:f4:28:84:9d:95:9b:98:70:19:15:ba:c7:41:23:
97:46:82:18:c6:90:25:a4:3b:80:ae:76:29:cc:bc:
6d:e0:33:ab:47:14:f7:88:04:61:4b:6a:bc:21:6c:
dc:07:64:3b:e5:77:42:e1:f9:c9:a1:99:b5:89:6d:
0d:a1:ab:75:57:91:31:fa:25:ba:bd:9d:7c:ed:37:
6c:d5:fd:bf:e5:4a:90:cc:13:94:32:d7:97:a9:53:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D6:DF:79:C7:7D:38:20:88:05:99:F5:66:9A:18:F5:66:B1:B2:97
X509v3 Authority Key Identifier:
keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Udbfecd9OCCIBZn1ZpoY9Waxspc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.181.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:36:09:2d:82:f4:1a:ba:08:23:52:45:ea:41:ab:3f:46:83:
52:c7:2e:7f:62:5b:26:6d:66:e7:4c:13:db:49:50:d7:7e:2b:
2f:00:15:ae:18:24:5f:9e:64:28:c1:28:d1:a4:05:c1:27:9d:
eb:ee:52:ef:a2:8f:f8:51:75:c3:93:08:28:b7:39:bb:28:e6:
85:7e:0b:ca:25:a7:3a:bc:d1:f4:cf:bf:7a:6d:56:e3:ab:1d:
26:b6:08:1e:ba:45:1e:4e:9b:86:f6:cd:57:58:9a:34:eb:93:
15:36:0c:5a:38:b2:7a:79:c1:cd:34:a8:9e:00:cb:17:b0:18:
60:2d:7e:f1:8a:7a:f4:5a:57:fe:9f:9f:a0:6c:dc:c8:fc:74:
01:84:39:35:b0:d0:7d:14:42:2f:dd:47:e3:59:9b:b3:1e:e4:
c6:72:ab:f5:0f:05:de:d6:83:8c:26:b2:35:6f:43:90:ea:da:
12:02:57:ec:12:e8:28:d2:2d:20:ba:73:c9:83:07:e9:31:60:
92:3a:43:3a:a2:ac:96:8e:b0:31:62:1e:cb:f1:25:81:2a:fb:
5b:a8:9b:50:bf:4f:a5:7e:b5:c8:6b:01:7b:19:63:d1:85:95:
fa:e8:dd:48:d8:1f:0f:fa:93:9b:04:22:41:0a:7e:34:8b:57:
cb:e7:c0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:46:25 2026 by rpki-client