Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uDw0rIKYBOx60EUxRIcMiaeKsJo.roa
File: uDw0rIKYBOx60EUxRIcMiaeKsJo.roa (raw, json)
Hash identifier: zahcWL3ML4CUHJjptOOi/MNlqNW9d0jIfXCj5lVj77A=
Subject key identifier: B8:3C:34:AC:82:98:04:EC:7A:D0:45:31:44:87:0C:89:A7:8A:B0:9A
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019C5BE5CEA475EC272E6D17A0A79A4BF6D5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uDw0rIKYBOx60EUxRIcMiaeKsJo.roa
Signing time: Sat 14 Feb 2026 11:25:13 +0000
ROA not before: Sat 14 Feb 2026 11:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 46.249.110.0/24 maxlen: 24
185.215.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5b:e5:ce:a4:75:ec:27:2e:6d:17:a0:a7:9a:4b:f6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 14 11:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b83c34ac829804ec7ad0453144870c89a78ab09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e2:08:92:d8:d0:00:a9:bb:50:0f:3a:61:27:
61:37:50:df:c2:5e:e7:0a:a3:9b:af:eb:47:33:78:
4f:41:e8:95:11:79:15:da:58:76:86:05:b9:d0:1b:
88:14:c8:0b:49:07:83:67:16:96:a1:98:40:71:bd:
b0:c1:62:e2:93:35:cd:b0:90:d3:3e:71:b9:64:74:
28:61:a3:31:20:87:7b:62:2c:b1:9d:93:d0:a2:b5:
1f:dd:65:c4:85:42:7a:c4:62:93:d6:b7:4f:eb:5e:
6d:94:1c:25:a4:53:4e:67:5f:a6:1b:bd:37:f9:3c:
8e:f9:04:5d:18:29:c8:3a:f5:07:d1:fd:f6:95:d3:
d3:cd:25:1e:e4:9d:29:68:d3:dd:a2:a9:a0:e2:2d:
28:97:66:eb:29:16:74:9c:22:62:37:ca:cc:f3:71:
91:99:41:12:ad:33:cc:4d:f2:9d:0a:fe:04:07:b3:
42:4e:fe:d4:93:21:b8:99:cb:71:2f:5e:dc:13:da:
ff:6a:92:52:ee:58:fe:cf:b0:ea:d5:37:4e:bc:77:
b1:70:96:f5:26:e6:1f:af:cb:16:26:a2:4f:16:0f:
0d:c6:3d:9d:0c:10:e4:47:5c:e2:2a:ba:99:33:f4:
d8:ed:5f:f4:ff:c5:08:8e:f6:80:41:c3:28:66:8d:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:34:AC:82:98:04:EC:7A:D0:45:31:44:87:0C:89:A7:8A:B0:9A
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/uDw0rIKYBOx60EUxRIcMiaeKsJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.249.110.0/24
185.215.247.0/24
Signature Algorithm: sha256WithRSAEncryption
42:66:93:cc:86:3d:6c:b7:d8:41:56:4f:fc:86:32:a0:35:7c:
40:63:76:c4:92:26:eb:f8:5e:cb:5b:1d:65:2b:5b:86:67:ce:
97:ed:37:e5:4f:8b:ec:a2:34:30:94:8d:5c:8b:a5:42:52:94:
df:76:70:d9:6d:3d:f8:4b:5e:2a:8a:ce:14:ed:f3:98:2c:7d:
98:f3:ce:de:6a:41:5e:a8:c7:23:db:91:8b:ef:64:d2:59:48:
85:d5:81:1d:78:a9:d0:1b:3f:11:07:b3:a1:ba:97:33:61:13:
61:67:8b:70:44:14:87:01:ee:95:34:35:f6:9f:cb:ec:f6:df:
ea:7d:29:9a:0e:60:c9:94:13:13:58:17:6a:02:fe:40:b9:03:
ee:b3:18:7f:f1:73:62:58:79:7e:b7:e4:ed:b0:f6:12:11:fd:
7d:7d:5e:8a:17:60:c4:22:32:df:40:5e:d5:86:05:8a:5c:ff:
62:60:bb:a4:9d:25:4e:c9:a5:a3:95:a5:46:19:86:64:9c:2d:
94:14:75:09:25:2a:88:21:61:8a:42:90:71:b2:9c:4f:e9:94:
03:41:c6:52:c4:97:df:fd:2b:54:8b:95:f7:97:8c:ff:b2:9b:
70:54:a3:20:18:25:07:7f:36:62:5f:7e:dd:4f:3e:8e:26:35:
48:59:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:19:03 2026 by rpki-client