Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uIT7Ee6nm5-5yZ2fMfu3EUs1Q6g.roa
File: uIT7Ee6nm5-5yZ2fMfu3EUs1Q6g.roa (raw, json)
Hash identifier: gR0370SdPXT3CRbDkJY4d3M4vETj+KfYToXTlVNoeKI=
Subject key identifier: B8:84:FB:11:EE:A7:9B:9F:B9:C9:9D:9F:31:FB:B7:11:4B:35:43:A8
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0A9CAFC29BB82AC6BAF77CDE39316C4FE
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uIT7Ee6nm5-5yZ2fMfu3EUs1Q6g.roa
Signing time: Wed 16 Sep 2026 10:37:27 +0000
ROA not before: Wed 16 Sep 2026 10:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60631
IP address blocks: 94.184.36.0/24 maxlen: 24
94.184.41.0/24 maxlen: 24
94.184.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:ca:fc:29:bb:82:ac:6b:af:77:cd:e3:93:16:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 16 10:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b884fb11eea79b9fb9c99d9f31fbb7114b3543a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:5f:dd:a1:25:18:fe:2a:92:ec:d6:22:5a:
2e:7a:cf:9d:3a:9a:44:b0:d6:e9:4e:d3:e8:dd:ed:
6b:0d:aa:08:95:c9:b6:0f:c4:ac:cc:b1:1c:70:03:
6e:39:f2:55:ae:fc:7e:bf:ea:b0:da:ae:89:0c:28:
8f:33:4e:11:92:9c:ab:3d:98:f8:f6:e2:eb:92:57:
b7:08:93:55:4d:bc:e2:59:d7:2f:44:91:cd:43:8d:
e9:ec:9c:e9:01:13:82:39:1b:45:81:6e:d4:f2:e9:
ec:d6:7e:94:18:7a:9a:7a:a7:59:40:4d:9a:b8:5b:
37:5d:51:ef:86:4a:64:dc:8a:62:86:47:d7:03:0d:
7e:f5:da:27:53:06:ee:18:da:70:47:a7:d0:f9:59:
4c:f5:75:7b:20:b2:86:78:cf:ae:c6:ec:81:16:73:
82:b6:b7:58:96:0b:ff:43:d8:a6:c9:dc:6f:42:fd:
1b:82:4c:26:b4:fe:bc:82:ab:66:b1:f7:1e:da:93:
b3:a1:4e:bc:39:f8:a6:04:09:85:6f:bf:06:c9:97:
98:9e:65:d4:54:43:95:8c:29:a4:c2:36:69:c7:21:
f2:22:06:41:38:a7:20:87:a1:c7:c9:c1:3a:39:60:
35:84:10:09:60:0c:3e:24:a7:05:61:92:d0:5b:07:
ba:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:84:FB:11:EE:A7:9B:9F:B9:C9:9D:9F:31:FB:B7:11:4B:35:43:A8
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/uIT7Ee6nm5-5yZ2fMfu3EUs1Q6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.36.0/24
94.184.41.0/24
94.184.43.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:cd:b1:bd:f3:42:15:9e:5b:63:b4:fe:97:17:01:5d:29:73:
55:4a:aa:49:11:9f:94:47:7a:ce:9d:10:2e:58:1f:ec:3e:4c:
62:90:5f:94:53:89:2d:36:3d:0d:c8:af:25:ee:c0:e5:46:5c:
d1:00:d8:20:f7:d3:e7:b9:c9:b8:68:6f:98:d6:1b:dd:20:e6:
7a:a3:dc:b5:6a:0c:85:da:ed:9a:5f:f3:46:94:f0:22:ba:39:
28:21:5a:93:5f:22:ea:1f:3f:a2:d6:8e:39:c8:29:ce:1b:2b:
95:90:47:2f:63:81:18:aa:c8:37:c7:79:f3:02:4e:ef:7f:b1:
1a:c8:e2:38:07:b1:2a:54:3d:60:ac:20:99:13:b9:ec:f5:cb:
88:1d:e2:bb:72:f0:50:c0:4e:58:77:5a:f5:73:fa:91:ae:7b:
38:72:d2:17:f9:4e:8f:b2:f1:c5:dd:6e:73:43:01:56:02:5d:
c0:8e:cc:bc:8a:0e:f2:24:0f:29:47:ba:36:6e:db:92:e7:f9:
03:6d:e9:32:67:77:ce:5f:47:25:4a:fb:ed:f3:27:d6:30:44:
75:08:69:9f:15:b2:c9:72:18:2d:34:10:ab:00:ee:02:42:da:
40:1b:00:a0:33:5c:5b:8d:a1:61:c8:40:aa:83:32:57:4e:e4:
17:19:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:13:10 2026 by rpki-client