Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1--UUXOdRKB18yPKkRgefGGQahe4.roa
File: 1--UUXOdRKB18yPKkRgefGGQahe4.roa (raw, json)
Hash identifier: U8qM/SfyUWcN2YzIKFQLLy28wcf0V2Gyw3yRSpXQfDs=
Subject key identifier: FB:E5:14:5C:E7:51:28:1D:7C:C8:F2:A4:46:07:9F:18:64:1A:85:EE
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 019C5765299EAFE552E98FC82CE5708E6E5C
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1--UUXOdRKB18yPKkRgefGGQahe4.roa
Signing time: Fri 13 Feb 2026 14:26:13 +0000
ROA not before: Fri 13 Feb 2026 14:26:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209732
IP address blocks: 185.96.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:57:65:29:9e:af:e5:52:e9:8f:c8:2c:e5:70:8e:6e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Feb 13 14:26:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fbe5145ce751281d7cc8f2a446079f18641a85ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:a4:b3:f6:ad:4d:d4:e3:a3:1a:6b:16:30:
f2:d1:1d:c5:9e:63:4a:aa:99:74:b2:ec:83:34:80:
60:72:5b:6b:e9:c6:0b:86:98:16:0a:8f:02:18:e1:
00:9a:da:8d:41:0a:04:fd:66:ae:5b:67:41:f0:5c:
6d:81:4c:fa:28:a1:df:93:31:8d:2e:d0:73:ba:2f:
3c:10:c9:5a:6a:83:4c:d7:f8:a0:c5:43:4d:6a:c2:
b5:8f:f6:d0:e5:57:af:9d:30:0e:d1:f9:4f:15:2c:
8b:ee:58:40:6a:41:fc:40:d2:33:73:4f:ef:9e:7b:
d8:2b:3f:82:a3:1c:40:b7:e7:0f:34:ff:73:19:5c:
5e:c6:c9:5e:33:f5:22:6c:3e:4c:67:86:da:cc:ac:
65:75:07:75:68:3a:a6:de:ca:7e:a3:b5:24:2d:01:
b7:1d:f8:87:61:1e:a5:88:41:cc:2e:54:c7:63:f4:
44:ff:0b:ac:82:2c:b0:a6:48:4a:0f:88:93:f1:00:
db:95:03:57:d8:4e:83:67:a9:e5:69:e6:dc:59:95:
d2:09:c1:97:74:16:b8:05:24:04:e4:61:3b:8d:f4:
61:a4:ae:7b:b7:0b:93:9d:59:f9:59:37:7f:05:80:
90:14:85:00:4e:91:84:e5:8a:c3:6b:5d:4d:30:63:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E5:14:5C:E7:51:28:1D:7C:C8:F2:A4:46:07:9F:18:64:1A:85:EE
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/1--UUXOdRKB18yPKkRgefGGQahe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:67:25:90:c3:00:59:b8:27:30:49:41:f1:76:b6:8c:2c:43:
bb:66:07:92:b8:ed:65:63:ee:a6:57:82:0e:83:2f:47:6f:cb:
b8:45:0a:a2:48:6c:f9:f6:68:06:56:92:c1:08:c7:5b:c1:f5:
c1:54:06:2e:38:31:ac:1d:85:ed:dc:b0:1c:28:8b:6a:3b:be:
4d:96:b1:47:90:87:1c:f6:7a:b9:7b:1a:02:6c:3b:e1:06:d6:
08:cd:31:1e:ad:f2:34:ae:f5:df:12:e6:96:ee:6b:ed:10:95:
a7:95:38:86:b3:93:05:e8:8a:ed:ad:6f:87:05:c5:1b:2c:bb:
3f:68:a5:6d:6b:60:64:83:4d:af:8b:cf:4d:a0:e1:9b:29:63:
d6:c1:9a:c4:9f:fe:ea:eb:a1:b3:5d:cc:91:fc:97:95:de:62:
e8:7d:84:e7:7e:8f:32:40:81:d4:23:45:df:a5:17:f4:0b:38:
c2:d2:c8:e1:3a:6c:70:5e:cc:32:c5:aa:03:64:43:d4:8d:3e:
d4:b2:99:22:1f:45:10:c0:05:3c:89:3d:4a:8b:1f:16:e0:69:
7c:9e:9e:58:eb:e1:fa:7d:5b:af:a2:a1:9c:01:dc:d7:9c:35:
47:28:22:ca:35:0a:ca:c6:73:61:a7:ab:7e:6b:28:fa:b0:d9:
9c:67:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:43 2026 by rpki-client