Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/uveeP90Ng8fiZXlzX-6ojy0jIqY.roa
File: uveeP90Ng8fiZXlzX-6ojy0jIqY.roa (raw, json)
Hash identifier: PfDd8d708uz6aVMC87b2047YaQ4t2uLKA5Y0H9BA2Lk=
Subject key identifier: BA:F7:9E:3F:DD:0D:83:C7:E2:65:79:73:5F:EE:A8:8F:2D:23:22:A6
Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial: 01A0A584EE5D18E27A56BD822BEA37645F2D
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/uveeP90Ng8fiZXlzX-6ojy0jIqY.roa
Signing time: Tue 15 Sep 2026 14:42:27 +0000
ROA not before: Tue 15 Sep 2026 14:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.30.0.0/16 maxlen: 16
141.76.0.0/16 maxlen: 16
141.76.202.0/24 maxlen: 24
2a13:dd80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:84:ee:5d:18:e2:7a:56:bd:82:2b:ea:37:64:5f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Validity
Not Before: Sep 15 14:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=baf79e3fdd0d83c7e26579735feea88f2d2322a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:24:93:a7:b9:32:7a:f8:b8:1d:85:2a:1d:
ac:0a:54:f0:cc:77:2c:c2:a5:f9:1a:30:59:c5:82:
a1:31:a3:a7:86:49:e5:49:a3:8b:a1:7a:82:82:17:
49:c4:64:8a:32:ba:9c:38:0c:23:a5:ff:4b:ba:17:
6e:0c:2a:bd:54:cd:ad:55:ec:47:33:d6:e0:4b:7a:
c7:57:47:76:de:cf:00:ce:fc:1f:be:b5:2c:92:b1:
51:73:ff:58:86:c9:c1:e7:ea:30:1b:26:5c:45:58:
2f:b3:e5:91:f4:c7:2c:49:50:84:38:da:13:62:2b:
fc:d4:7e:38:c1:d5:f7:89:e8:09:87:59:25:b5:97:
aa:49:4b:44:91:b2:f6:29:78:84:ab:96:f3:fe:f7:
05:aa:1f:e9:88:2b:9e:18:33:09:7f:90:37:99:ae:
4e:71:3c:7b:7c:01:c1:88:d9:9f:1c:01:b4:33:e3:
3d:41:01:a5:d3:6e:73:1e:ff:87:2f:c2:c4:d6:d8:
3d:5a:65:8f:c5:b7:7f:d3:7c:fc:c5:56:de:49:95:
38:22:15:14:a5:9e:0f:f6:de:c9:03:65:26:3e:b3:
a5:63:b5:f6:bb:4a:9a:fe:3d:93:c3:73:d3:6b:16:
fb:4f:0e:86:09:35:ff:2f:a8:d6:23:cf:71:2a:d8:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F7:9E:3F:DD:0D:83:C7:E2:65:79:73:5F:EE:A8:8F:2D:23:22:A6
X509v3 Authority Key Identifier:
keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/uveeP90Ng8fiZXlzX-6ojy0jIqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.30.0.0/16
141.76.0.0/16
IPv6:
2a13:dd80::/29
Signature Algorithm: sha256WithRSAEncryption
2e:ae:da:f3:7e:0a:75:52:88:c6:72:07:6b:62:73:02:65:dd:
2d:43:30:67:39:8a:52:c0:d3:c7:2d:41:0e:ab:69:54:13:54:
87:46:9a:43:a2:80:cc:d1:94:e3:d8:08:50:b8:bd:5c:29:ab:
bd:e2:ae:d7:11:6e:da:34:f9:6b:35:61:d5:41:a7:73:3b:c6:
a4:54:fb:88:1e:da:d2:4b:42:62:d1:bd:aa:b4:3c:d4:5d:17:
23:41:4b:38:5f:57:bc:18:f1:3f:43:87:bb:1c:ff:e2:5d:56:
88:60:4a:df:b1:62:76:74:01:a5:70:d8:9d:c5:ac:55:a0:4a:
63:c0:51:84:71:4b:a4:31:84:0e:11:77:fc:17:55:ad:3b:54:
25:3c:b3:f6:b5:19:ce:b6:2e:09:eb:3a:e5:2a:ca:8c:c3:8e:
db:bd:34:a0:72:c1:fa:ff:b4:c3:a6:51:5a:1e:fa:a3:3c:bd:
40:85:1d:b1:a4:bc:94:07:d6:7c:98:34:23:66:f0:df:5f:a3:
c2:5c:16:52:e8:d8:2a:98:c5:0b:45:c2:1d:44:a7:13:6c:78:
34:63:7e:3a:64:b4:75:57:43:3b:f4:31:a0:d0:da:81:92:c5:
22:11:c0:f5:1b:ea:ef:99:23:91:bd:2a:32:70:3b:87:6a:3d:
3d:c4:ef:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:55:15 2026 by rpki-client