Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/uXZ8dSsTsYmlbRWOfALydunHyNo.roa
File: uXZ8dSsTsYmlbRWOfALydunHyNo.roa (raw, json)
Hash identifier: wurQLStm4I5TAyiJJe3yNdJRBsmFKQa1zBmRVmGZqvc=
Subject key identifier: B9:76:7C:75:2B:13:B1:89:A5:6D:15:8E:7C:02:F2:76:E9:C7:C8:DA
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 01A077C5B45FC6582653AF8488F2C86B5C29
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/uXZ8dSsTsYmlbRWOfALydunHyNo.roa
Signing time: Sun 06 Sep 2026 17:30:40 +0000
ROA not before: Sun 06 Sep 2026 17:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7018
IP address blocks: 170.100.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:c5:b4:5f:c6:58:26:53:af:84:88:f2:c8:6b:5c:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Sep 6 17:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9767c752b13b189a56d158e7c02f276e9c7c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3b:85:fa:00:3b:ca:f8:02:94:22:af:35:52:
82:18:0c:1e:24:e7:97:2e:47:06:4f:f9:e7:20:d0:
5a:14:a7:8d:7a:43:7d:eb:4b:1b:ca:51:64:e8:a4:
52:36:dc:d3:5f:a9:e3:9e:cc:03:8c:03:da:fb:0d:
73:d6:b7:62:36:b7:ae:c4:b0:1c:20:dd:16:49:40:
c1:d0:d2:ff:68:69:31:2c:f6:db:b4:ed:e3:50:d8:
4f:23:99:9a:0a:ac:72:34:5e:5a:33:b4:9a:76:46:
65:46:c0:26:8f:84:47:58:62:fe:d0:bc:a5:ca:cb:
c7:1b:15:da:d9:80:7c:3f:25:db:07:4f:32:f9:4c:
60:1d:e5:ee:f7:a9:c7:64:d6:3b:da:99:cc:b7:b5:
7f:6e:a7:1a:d3:29:3a:0f:78:d0:e5:dd:9f:ea:46:
c1:30:f9:18:6e:82:41:5d:49:28:98:85:48:ed:0b:
d1:5e:07:88:b3:79:46:dc:a9:f1:da:4b:de:b1:74:
d9:ee:e2:5a:50:b1:8b:42:bb:d2:88:fe:72:b5:a5:
1f:07:b4:c4:c7:d8:18:84:b8:d6:96:7b:06:11:88:
a3:08:83:f6:d5:25:87:68:e2:9e:b0:f9:e2:b1:f9:
2f:37:6c:35:0e:42:ce:97:d5:24:75:74:4d:98:02:
84:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:76:7C:75:2B:13:B1:89:A5:6D:15:8E:7C:02:F2:76:E9:C7:C8:DA
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/uXZ8dSsTsYmlbRWOfALydunHyNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.100.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:5e:60:da:8c:85:98:93:4c:6d:df:42:0e:ea:40:4b:d0:11:
db:7e:b5:b0:a1:c7:27:4b:57:f6:e7:fb:f9:db:bd:78:27:0c:
75:33:e7:a7:9c:87:2a:22:90:1e:1d:77:71:24:17:48:54:0c:
d8:d6:85:2b:2f:b5:92:cd:4d:ed:4f:c4:da:2c:b1:bd:11:e1:
f3:87:ee:c2:cb:00:1f:18:56:f0:4d:5f:5a:1c:4f:db:d4:1a:
98:8d:7c:e2:13:d6:24:31:8f:d3:8a:82:19:75:b3:f0:fc:57:
e6:55:7b:a2:3d:0b:8d:a9:74:9d:52:40:ea:f6:24:73:f5:b0:
c8:96:f6:97:22:0d:6d:7c:fe:b5:7b:3e:94:28:4d:0f:e6:88:
9c:2e:94:fc:94:9f:5a:e4:ba:53:e9:5d:cd:35:84:cf:6f:9d:
9d:3e:84:5e:b1:61:6f:80:76:ba:92:55:3b:dc:a1:c8:fb:d4:
81:bf:25:24:61:f2:c8:f5:38:8a:86:16:7c:ec:45:cd:82:0e:
ec:41:6c:76:a3:b1:78:76:24:bd:b0:7b:18:61:09:06:5a:05:
c9:c7:fd:84:bf:b4:a3:c1:35:61:e1:21:d5:3f:15:b5:0c:96:
1c:27:0b:04:01:4a:20:79:83:71:68:19:ea:16:1c:4d:73:e1:
ed:c8:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:21:03 2026 by rpki-client