Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1uVhjwRSh9C9UN9zou-J_49QroY.roa
File: 1uVhjwRSh9C9UN9zou-J_49QroY.roa (raw, json)
Hash identifier: hV9qkQ7ywz8bW/WmGxowQKu9EUkx7AbC+vJ4lhL/aaE=
Subject key identifier: D6:E5:61:8F:04:52:87:D0:BD:50:DF:73:A2:EF:89:FF:8F:50:AE:86
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C447FE04EE8759A5007816140B6C6099
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1uVhjwRSh9C9UN9zou-J_49QroY.roa
Signing time: Mon 21 Sep 2026 14:04:07 +0000
ROA not before: Mon 21 Sep 2026 14:04:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209201
IP address blocks: 83.150.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:fe:04:ee:87:59:a5:00:78:16:14:0b:6c:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:04:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6e5618f045287d0bd50df73a2ef89ff8f50ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f7:d8:c9:55:7d:6c:12:c3:c0:d8:cc:fb:fc:
50:ca:8a:64:41:7c:3e:d0:b2:f3:58:58:85:5a:ce:
47:d5:98:42:99:ae:06:e5:92:ff:71:45:e2:01:33:
b7:11:50:23:b2:de:ba:d9:1c:6e:35:ba:fc:77:80:
96:78:f7:7e:b3:06:fe:31:ce:31:fb:b5:59:28:a8:
fb:e8:a2:4b:06:d6:0a:6a:1a:8b:e6:6b:05:71:6a:
a9:c3:01:43:f5:13:26:48:d6:d1:1e:c8:6f:78:c1:
5b:fd:31:40:f0:27:91:0d:10:9c:25:11:da:df:14:
fb:34:c9:9d:3c:0f:53:e6:8c:a6:c2:25:c7:c8:c1:
a0:56:3a:07:2a:4c:69:47:a7:97:75:71:29:c1:cf:
5c:93:3c:34:77:b9:eb:98:f1:1d:11:5c:8c:e6:fb:
ca:a8:a2:6a:ea:b4:3c:16:31:41:cd:f1:4b:0a:f7:
b8:f3:b6:64:d8:b7:70:94:31:23:4f:76:3a:cc:b4:
57:0c:a9:2b:48:74:44:3e:f5:73:bc:45:21:38:1a:
17:d8:47:86:09:bb:9d:2d:f9:ee:ae:b3:c8:21:26:
dc:a0:37:70:96:5b:30:d5:96:fc:da:73:80:de:ce:
80:fa:4e:5f:8e:72:e8:0c:8a:79:1e:c8:c6:d4:63:
37:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:61:8F:04:52:87:D0:BD:50:DF:73:A2:EF:89:FF:8F:50:AE:86
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/1uVhjwRSh9C9UN9zou-J_49QroY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:4c:53:c2:f6:ec:38:25:bf:8d:1c:ca:ae:4c:c9:f9:6b:06:
1f:41:55:f1:ca:33:ff:84:73:03:32:fc:ff:5b:1e:40:67:1d:
bd:41:30:f6:0f:ce:10:20:92:bf:b1:4d:65:48:c2:64:24:d4:
24:e6:da:d0:c3:04:6d:f6:62:62:4e:b2:b9:d5:d1:1b:6d:d2:
f2:c1:8a:50:6f:a6:48:52:6e:d2:69:59:b9:53:2e:02:fb:e3:
83:ea:ce:b3:c5:ae:84:48:53:8e:1c:4d:fe:cb:1f:a0:69:0b:
09:f2:63:0e:1d:84:4e:6e:4a:34:5b:37:5d:be:9e:c8:97:fc:
ac:b0:aa:ef:5a:85:4d:8e:c8:f3:46:12:ca:6c:24:94:80:ef:
a2:d2:6a:95:8b:5a:4a:25:f1:28:9f:26:2f:0b:41:8d:ed:a3:
65:c1:3a:b1:9b:65:a5:f8:11:4c:ea:97:b2:ca:49:4a:c3:a8:
9e:b2:a2:18:fb:c0:e5:25:5c:ec:89:a5:62:b4:69:66:69:83:
6d:a3:c5:75:ac:eb:6c:c7:f4:16:15:30:4c:de:6b:fc:1d:52:
ad:db:63:78:08:3c:65:38:78:82:0f:cc:20:e0:7d:23:43:2f:
b5:cb:7d:01:f7:62:97:83:c1:b1:71:1b:0a:6a:cd:3b:cd:f1:
02:52:39:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:20 2026 by rpki-client