Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uEWUS7pWWi-cd8gF9GErw1SWtAs.roa
File: uEWUS7pWWi-cd8gF9GErw1SWtAs.roa (raw, json)
Hash identifier: zQ1QCqL2Uuj8af943sGDHirdDoR9T0EhY8a7sL3U4Rc=
Subject key identifier: B8:45:94:4B:BA:56:5A:2F:9C:77:C8:05:F4:61:2B:C3:54:96:B4:0B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0B5D9DC29FF171B61EEA2F33EB1690105
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uEWUS7pWWi-cd8gF9GErw1SWtAs.roa
Signing time: Fri 18 Sep 2026 18:49:08 +0000
ROA not before: Fri 18 Sep 2026 18:49:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199592
IP address blocks: 194.242.130.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:d9:dc:29:ff:17:1b:61:ee:a2:f3:3e:b1:69:01:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 18 18:49:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b845944bba565a2f9c77c805f4612bc35496b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:d1:54:55:74:cc:79:ea:2d:29:4f:fb:46:
aa:82:49:07:8a:91:b2:55:98:2c:ac:56:50:33:53:
4e:6f:76:0b:d5:b5:c3:9a:0b:2a:e7:4b:be:52:1c:
88:f9:e6:70:d3:38:be:9d:d4:c3:63:d8:91:68:02:
f8:28:36:f3:09:42:c3:62:d0:62:98:3d:70:97:93:
b7:08:38:5e:f5:5d:50:ff:af:a5:fa:ab:02:7d:14:
ec:46:1e:ac:96:51:87:1c:99:6f:a1:ce:1f:49:1a:
ea:28:d5:1b:28:ed:a0:3d:87:cd:49:78:87:46:7d:
7e:b5:bc:c1:78:a4:ac:9f:1c:ee:14:e2:f7:16:39:
72:d9:0f:42:60:ce:cd:c7:f5:04:e4:f3:93:34:d1:
e9:1b:17:c0:11:70:93:46:6e:ad:7e:0f:f6:2e:bb:
a2:4c:8b:c6:75:4a:d6:30:b3:f4:1d:35:f0:89:fe:
54:d2:df:ec:13:25:21:a7:d8:55:21:e2:a2:b2:f1:
20:fd:e5:ff:b8:81:d5:63:33:30:06:8d:aa:a5:1b:
eb:45:94:81:b5:e6:52:52:65:51:db:bb:7f:9a:ad:
0b:83:a3:32:1d:83:34:a2:28:cc:71:05:b2:b4:71:
04:2a:05:bf:8b:c8:ad:cf:b3:b0:6e:89:67:78:53:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:94:4B:BA:56:5A:2F:9C:77:C8:05:F4:61:2B:C3:54:96:B4:0B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/uEWUS7pWWi-cd8gF9GErw1SWtAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.130.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:fc:4f:6a:60:87:e1:25:63:d0:c0:2e:a7:09:db:98:94:ad:
a2:d0:01:78:02:9f:32:d8:fb:c2:a7:38:cd:ea:12:fe:26:c1:
b7:03:22:08:d1:b0:f7:b5:cf:86:c3:73:ae:eb:76:8e:b6:94:
43:55:f9:ed:0d:9e:52:3f:10:1b:b2:67:7b:0f:04:65:fb:a9:
2c:51:d8:a2:e3:26:d1:83:37:69:f5:b9:da:42:86:6c:6c:2c:
33:0d:fa:19:89:e6:9b:6f:14:65:68:f4:a2:04:ce:d9:26:ae:
2d:7f:0c:76:77:d1:10:d8:ca:7f:71:ba:bd:d0:a5:09:c6:8e:
b1:22:94:60:5e:0e:7d:69:32:43:0c:5b:83:10:dd:72:b2:c9:
b4:12:e1:87:96:0d:bb:f8:fb:6b:66:ce:0d:b9:b0:42:37:68:
fe:b8:86:d3:3c:c0:88:03:d3:0b:f9:a2:17:af:a9:ed:2e:d5:
ed:38:60:e8:d5:a9:4e:00:51:2a:bf:eb:64:28:86:21:fc:37:
13:cb:e3:3c:ad:e3:59:b1:ef:f0:43:b6:45:a0:8c:7d:c1:39:
c0:f5:05:d0:18:9f:39:28:45:88:24:47:ac:1d:fb:b0:fa:27:
52:0d:00:f1:2e:a8:6e:7b:80:66:2b:b4:55:bd:d8:c8:5f:2b:
4c:de:d5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:57:13 2026 by rpki-client