Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/U0EReD-V8KE0gBPfwv47LuWsTdo.roa
File: U0EReD-V8KE0gBPfwv47LuWsTdo.roa (raw, json)
Hash identifier: 5+Ykz2XuDOuKIp6U4q+kGLqLusgQzdBy7kQJCeyoBHI=
Subject key identifier: 53:41:11:78:3F:95:F0:A1:34:80:13:DF:C2:FE:3B:2E:E5:AC:4D:DA
Certificate issuer: /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial: 01A0B03523452ED21F58BE540B7F4596ADC1
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/U0EReD-V8KE0gBPfwv47LuWsTdo.roa
Signing time: Thu 17 Sep 2026 16:31:07 +0000
ROA not before: Thu 17 Sep 2026 16:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205927
IP address blocks: 2a0a:68c0:203::/48 maxlen: 48
2a0a:68c0:204::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:35:23:45:2e:d2:1f:58:be:54:0b:7f:45:96:ad:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
Validity
Not Before: Sep 17 16:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=534111783f95f0a1348013dfc2fe3b2ee5ac4dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:73:82:2c:78:f2:8a:1e:e3:24:2c:9e:c0:
cd:db:ac:ae:e0:3a:d3:74:df:10:d5:f2:19:32:fd:
08:bc:74:b4:f0:a4:48:03:4a:48:73:80:2b:e0:ae:
86:a3:c1:fc:7f:d3:ca:fb:4d:47:91:e7:3b:2f:c7:
da:b3:e3:6a:d0:c8:55:b3:38:1d:98:1f:a5:d5:4a:
4d:6d:c8:0d:61:06:0c:00:55:a9:71:9b:83:c9:a7:
96:c6:0a:90:d4:40:aa:cd:0e:f7:df:5d:78:c5:98:
f6:ac:ec:c4:05:3d:c0:f3:c5:24:c6:c7:67:08:74:
99:69:a7:2f:70:6a:96:7a:b6:78:0a:e2:a0:09:4e:
db:af:1d:e2:8e:33:6b:76:91:ea:cb:c2:6d:0e:41:
60:e3:ed:59:38:31:09:f9:8f:5b:74:fa:e5:19:3c:
0e:f3:8e:72:b9:28:b1:37:b9:3c:32:2c:0e:cb:76:
f8:05:5e:d4:a6:39:d9:f1:fd:24:e6:02:9a:86:2d:
be:6b:61:c4:19:e6:41:cd:33:ff:81:e8:f7:d4:a0:
af:ed:2e:47:42:44:0b:3f:ef:58:c4:36:72:bf:4e:
04:4e:34:a4:d6:09:15:c0:fd:ef:66:54:24:e4:5f:
ce:21:47:b3:d3:5f:5f:a5:5c:ea:0d:17:e2:96:3e:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:41:11:78:3F:95:F0:A1:34:80:13:DF:C2:FE:3B:2E:E5:AC:4D:DA
X509v3 Authority Key Identifier:
keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/U0EReD-V8KE0gBPfwv47LuWsTdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:68c0:203::-2a0a:68c0:204:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
11:5d:f1:e8:c6:8d:b0:76:60:0d:b3:41:14:ff:3f:bc:bd:34:
73:ef:d4:8d:4b:bb:71:25:76:9e:e8:d3:9e:38:3e:0f:4e:9c:
24:22:aa:e1:25:17:c7:46:fc:92:60:f2:63:6b:8a:82:08:b5:
58:10:cd:9c:a6:41:a3:78:4f:fa:cd:ad:0d:ca:39:86:d2:93:
0c:12:04:50:97:93:31:5c:5f:1e:e1:d3:ff:fe:9f:a9:da:1d:
17:fa:61:8c:60:2f:04:2a:23:78:29:5d:d6:11:c4:05:bb:ae:
1e:70:81:7b:b5:94:0d:c1:cc:0b:58:ef:bc:73:04:c6:3c:de:
ba:4d:1f:e8:0b:c3:4a:98:f9:8b:29:f8:78:4c:9f:1d:a5:12:
ed:31:9a:cd:96:1c:8c:e9:75:b6:17:8d:5e:ca:c1:03:a0:39:
bd:d8:6a:29:24:98:a1:16:01:68:ac:4f:64:f2:98:4e:c6:1c:
a1:9a:85:26:53:7c:15:ae:08:23:85:cc:92:a0:83:c3:88:8b:
63:69:2e:bc:71:3f:a8:67:79:bc:d6:5e:2f:57:35:0c:0b:2e:
b7:38:60:fb:61:64:db:3c:3d:57:ca:fa:61:82:0e:f5:df:17:
62:3d:d8:fd:af:e1:f9:4a:7c:82:69:8b:a9:d3:3b:0d:3e:08:
23:07:75:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:29 2026 by rpki-client