Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/uUTNrQu_BtLtN3uQFamOOLU8OJ8.roa
File: uUTNrQu_BtLtN3uQFamOOLU8OJ8.roa (raw, json)
Hash identifier: wXM+i5rPx/8wkMZnjNqj0Ya8HA/4JPSEIDvTD/6DaAY=
Subject key identifier: B9:44:CD:AD:0B:BF:06:D2:ED:37:7B:90:15:A9:8E:38:B5:3C:38:9F
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0C447126EA3DE527640E57A16FA74E18F
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/uUTNrQu_BtLtN3uQFamOOLU8OJ8.roa
Signing time: Mon 21 Sep 2026 14:03:07 +0000
ROA not before: Mon 21 Sep 2026 14:03:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50599
IP address blocks: 83.150.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:47:12:6e:a3:de:52:76:40:e5:7a:16:fa:74:e1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 21 14:03:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b944cdad0bbf06d2ed377b9015a98e38b53c389f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:52:f6:0d:20:58:fe:b4:50:86:c9:c7:8a:
c9:7c:f8:8d:6b:75:f0:33:53:03:18:f0:03:89:e7:
5b:54:1f:47:3a:56:83:b8:7f:81:40:3a:b7:5e:cc:
eb:ea:7f:45:15:93:aa:b4:da:78:3d:64:0e:c0:ac:
d5:3b:00:38:72:2b:86:74:e6:87:13:f9:6e:68:41:
7e:f4:09:88:65:7e:61:00:b4:f1:1e:da:9e:e5:a0:
5d:a1:b0:b7:91:e8:4e:7f:b4:28:84:0d:09:a7:d1:
5a:85:8d:ff:b2:32:f4:d4:c0:af:c2:02:eb:fd:9f:
13:7b:3e:ef:72:83:d7:5f:58:45:6d:ab:82:1b:3c:
ae:32:db:1d:4d:7b:d9:7b:b7:79:44:e1:cd:b3:b7:
60:6a:99:8c:2d:09:47:ac:48:2d:07:e3:57:68:a5:
22:66:cf:06:29:42:79:ff:4e:ad:75:f7:a4:ba:ca:
47:17:61:b3:78:9b:3d:1c:d3:b5:9a:e1:6a:2a:c9:
8e:b2:1d:e0:25:c3:e1:f4:d2:47:e3:94:37:43:ca:
ef:9d:c6:c3:ed:ef:a1:e3:36:94:04:24:99:f2:69:
f5:e4:79:59:b9:76:d5:d8:3f:e1:e3:67:0f:b8:a1:
ca:22:9e:fc:51:0f:29:61:ab:21:04:17:ad:c6:00:
74:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:44:CD:AD:0B:BF:06:D2:ED:37:7B:90:15:A9:8E:38:B5:3C:38:9F
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/uUTNrQu_BtLtN3uQFamOOLU8OJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.236.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:50:cc:35:55:e9:6b:d6:18:5d:4e:19:ad:fa:62:18:8d:03:
c9:d2:ee:05:f3:b6:29:d0:52:5b:9a:06:8b:92:93:1f:93:82:
11:59:1f:14:c0:7c:ad:db:80:31:a8:04:c3:51:9e:84:f5:05:
60:6d:6b:b7:b0:87:ca:7c:98:13:4d:b0:ba:88:7c:a6:bf:92:
af:07:d9:73:5f:a8:60:68:88:96:03:8c:15:ea:93:c7:0f:b7:
15:19:f3:66:38:4f:19:2c:59:80:05:7e:a3:ea:24:61:2d:8f:
23:a9:9f:fe:f2:9c:b3:ab:1b:92:b6:34:6b:21:69:87:2e:65:
66:98:ef:45:0b:75:72:0c:07:35:14:66:f8:0b:b3:f1:c5:8c:
be:ba:35:eb:32:ae:f9:51:19:f3:03:37:ac:23:82:d3:84:9e:
12:13:87:c6:a5:41:56:1d:71:ce:20:10:20:e5:d0:4b:23:77:
15:4e:c3:a8:44:f2:59:ed:07:ab:99:de:32:41:62:fb:56:81:
59:9a:35:5b:4c:1f:5d:ee:3e:77:5b:06:b3:e1:7c:a8:74:4e:
3e:fd:e1:6a:4c:34:90:b5:fc:31:da:4e:d4:e1:08:61:00:b8:
8e:52:11:16:6c:d7:03:21:b7:cc:ac:8c:de:e5:d4:75:1b:bf:
21:dd:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:12 2026 by rpki-client