Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/Uqn6iMFS0A-L6D9kMDDjbMCbWuM.roa
File: Uqn6iMFS0A-L6D9kMDDjbMCbWuM.roa (raw, json)
Hash identifier: TeSeZwoDHMz9koxsVTB//jq8uP6vjAXuwnX8VHNH6GY=
Subject key identifier: 52:A9:FA:88:C1:52:D0:0F:8B:E8:3F:64:30:30:E3:6C:C0:9B:5A:E3
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 019B78A3073F7B430E85EA5771A18C43717E
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/Uqn6iMFS0A-L6D9kMDDjbMCbWuM.roa
Signing time: Thu 01 Jan 2026 08:18:28 +0000
ROA not before: Thu 01 Jan 2026 08:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44879
IP address blocks: 193.47.168.0/21 maxlen: 24
193.47.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:a3:07:3f:7b:43:0e:85:ea:57:71:a1:8c:43:71:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Jan 1 08:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52a9fa88c152d00f8be83f643030e36cc09b5ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:55:13:d6:f7:2c:26:ce:8b:6d:ab:3a:84:c2:
ff:73:11:92:fb:bb:1f:fb:04:88:8d:8d:a4:8c:e7:
ed:00:fe:bf:22:06:46:de:97:8e:11:5f:2b:42:af:
bd:6e:1d:5f:f0:ca:8d:f4:b6:29:80:a3:37:af:a9:
ac:e4:a8:ad:af:4a:a9:18:39:94:9f:25:b3:7b:47:
f5:a9:94:7d:17:e0:01:a3:bf:4b:aa:28:0c:f8:24:
26:4a:06:0e:c5:96:07:f1:3d:b7:7f:f4:ad:ed:7c:
b4:4f:a8:c4:05:20:3a:ca:98:bf:92:61:86:a5:76:
95:89:f9:2f:df:7d:84:02:3b:e8:d7:9b:d6:0a:4f:
68:d8:28:6a:75:8a:2b:d1:29:96:9d:89:ee:97:fe:
51:63:b1:95:46:ca:e3:58:fd:83:a0:04:62:b8:75:
9f:1c:29:84:d1:f8:ba:0c:96:c1:97:1c:ce:b3:3c:
e5:a1:f2:48:88:bc:d8:30:e9:3c:2e:b5:32:ad:04:
9f:2e:5f:b0:80:29:03:6a:04:18:2e:26:63:37:c7:
12:0a:0c:f0:b3:fb:80:c5:5d:c5:82:b8:b9:d2:e9:
bf:65:52:28:ef:bf:09:26:28:54:11:ae:a3:58:e1:
81:80:c3:91:84:f5:ae:46:a7:80:2d:62:07:4f:90:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A9:FA:88:C1:52:D0:0F:8B:E8:3F:64:30:30:E3:6C:C0:9B:5A:E3
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/Uqn6iMFS0A-L6D9kMDDjbMCbWuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.168.0-193.47.183.255
Signature Algorithm: sha256WithRSAEncryption
c6:52:a7:f4:8a:9b:d0:5d:a3:38:6d:3b:bb:40:f5:48:f3:0b:
e2:62:33:69:26:69:df:53:5f:a2:16:ea:76:8a:10:91:3b:d2:
aa:44:22:a3:13:01:cc:6e:b6:4a:f1:a4:6a:62:9d:3a:63:36:
a0:48:0f:17:6e:7d:fe:76:07:84:65:74:d6:de:ed:7c:c2:9a:
12:f6:ee:a4:da:7d:7e:64:08:00:d9:6b:8a:c2:e1:42:73:79:
e2:6d:f5:3d:2c:b6:e7:5d:67:0d:37:40:89:a7:37:6c:ea:6b:
74:49:9e:7b:86:ca:cd:95:41:ea:db:53:30:b5:d6:76:ba:77:
07:28:d5:74:ab:2b:26:30:3b:9a:dc:24:a6:f4:22:96:cc:19:
fc:38:df:8c:20:fc:ce:b0:e4:38:d5:87:5c:94:6a:d4:4a:59:
f5:cf:9c:42:99:41:d2:d4:00:93:5a:1b:5e:44:fe:28:82:5d:
3e:2c:99:17:bb:16:81:ba:db:f3:26:5d:de:56:ce:0a:02:e0:
cf:5a:9d:3e:85:04:7f:4a:f8:96:04:58:f8:bd:19:ec:8b:0f:
bc:e7:ec:d3:75:11:8c:11:f7:a7:7d:12:d8:62:c2:37:c4:a5:
4c:d1:8a:05:a8:91:71:82:12:1a:ef:c6:2f:19:84:e6:c0:d8:
2d:c4:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:28:12 2026 by rpki-client