Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/uhPXDNK9DwvaVzBP6prWtUmbJDw.roa
File: uhPXDNK9DwvaVzBP6prWtUmbJDw.roa (raw, json)
Hash identifier: DW1tiuzv/wvBgNUqtlXS5C2dFHnxlOJB3QKVHksHsN0=
Subject key identifier: BA:13:D7:0C:D2:BD:0F:0B:DA:57:30:4F:EA:9A:D6:B5:49:9B:24:3C
Certificate issuer: /CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Certificate serial: 019B7AC86F6CE19A674F9133D27CBC49C6E3
Authority key identifier: 5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/uhPXDNK9DwvaVzBP6prWtUmbJDw.roa
Signing time: Thu 01 Jan 2026 18:18:34 +0000
ROA not before: Thu 01 Jan 2026 18:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60585
IP address blocks: 185.28.124.0/22 maxlen: 22
2a00:9ee0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:6f:6c:e1:9a:67:4f:91:33:d2:7c:bc:49:c6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef1315c3c9239e8e1f4aa0c5b0743c3da5d77e3
Validity
Not Before: Jan 1 18:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba13d70cd2bd0f0bda57304fea9ad6b5499b243c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:72:ca:75:d1:1b:cc:f5:f8:40:f9:0b:e4:
91:d6:af:3b:10:ea:6b:4d:ec:31:fd:3e:8a:23:47:
e7:9b:0c:66:5b:3f:91:59:f0:49:be:c2:3c:a3:52:
10:7a:d5:29:22:f4:30:bc:aa:7b:e2:42:a0:bc:20:
27:b8:42:c3:a1:c7:df:e8:de:11:5f:98:ee:84:2a:
c6:88:5b:77:b5:82:43:e6:e1:90:1e:a4:fd:4e:59:
72:98:d2:98:1a:73:f6:00:6d:2c:74:ea:1d:98:d3:
f2:79:b8:5a:c1:75:b1:31:37:4c:d6:fc:95:21:fb:
44:49:0f:fe:a0:fb:cb:26:6b:ff:9b:8c:fe:53:ca:
73:aa:c0:b0:08:dc:b6:26:7b:87:31:7e:f1:ff:00:
da:1e:e2:4e:c5:51:ee:aa:0a:b7:5a:8e:86:6f:e0:
1f:80:d1:92:13:c2:83:30:ff:12:06:c2:e7:ad:54:
e1:22:c1:f0:a0:86:97:2e:db:5d:4f:4f:0c:b9:c1:
34:15:af:05:bc:03:44:76:f8:5f:01:c5:c3:07:5d:
88:83:10:cd:7f:aa:a4:86:ab:9d:38:38:c3:2a:82:
cb:73:c2:3d:87:8e:e4:46:12:2e:bc:cb:33:9c:52:
6c:01:a6:22:d0:25:b1:f6:9e:d7:9b:f8:a5:b6:96:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:13:D7:0C:D2:BD:0F:0B:DA:57:30:4F:EA:9A:D6:B5:49:9B:24:3C
X509v3 Authority Key Identifier:
keyid:5E:F1:31:5C:3C:92:39:E8:E1:F4:AA:0C:5B:07:43:C3:DA:5D:77:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvExXDySOejh9KoMWwdDw9pdd-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/uhPXDNK9DwvaVzBP6prWtUmbJDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/67c3ea-ed6a-4c29-a1ac-8a8a7ffdd9fd/1/XvExXDySOejh9KoMWwdDw9pdd-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.124.0/22
IPv6:
2a00:9ee0::/32
Signature Algorithm: sha256WithRSAEncryption
17:37:27:87:09:88:b2:c6:ae:fc:d9:b4:97:0c:7c:f4:0a:ea:
bd:b6:07:5e:c4:14:50:d0:1e:ab:72:53:a5:f0:66:69:7f:dc:
a0:4c:e6:42:45:57:f5:d8:d4:13:a7:c6:b1:75:5a:05:1a:5e:
20:6a:b9:27:2b:a1:21:eb:bd:2e:c2:cc:68:bb:fb:c0:d4:1e:
ac:99:bd:bd:55:85:ad:cc:e5:8e:3d:b3:8f:5c:f2:be:58:32:
b9:41:b6:30:87:ef:d0:8d:11:8f:78:8f:e1:de:96:3d:1e:33:
b5:33:81:bd:62:43:76:cb:d4:55:13:1d:57:85:ac:17:2c:95:
2f:78:98:8c:11:8b:19:1c:5a:45:52:54:80:fd:bb:6e:ff:4b:
a8:d2:a6:c2:55:75:52:ca:e5:fb:97:ea:af:4f:74:43:b2:f2:
db:60:78:25:29:78:df:d4:db:39:eb:88:4a:b8:95:4e:d6:04:
43:f2:d8:67:ee:40:db:d9:fd:a6:3d:b5:5a:63:c4:56:95:e7:
eb:ce:3b:3a:3e:2c:92:dd:71:18:3c:37:7d:cc:e2:b6:f5:26:
33:f9:10:ad:67:b9:9d:90:92:ba:92:e2:d7:6b:e7:b8:2b:3f:
07:76:ac:77:0a:2d:61:0a:ea:40:af:7c:39:b8:f7:63:2e:9c:
e6:ba:48:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:07:39 2026 by rpki-client