Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/uLM3f7HSG9AA8Kez3Ls8FtMS4xc.roa
File: uLM3f7HSG9AA8Kez3Ls8FtMS4xc.roa (raw, json)
Hash identifier: LLuimPad5IeKzA+MoXTS04RIeRK494d6cMv+Lw+IoNI=
Subject key identifier: B8:B3:37:7F:B1:D2:1B:D0:00:F0:A7:B3:DC:BB:3C:16:D3:12:E3:17
Certificate issuer: /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial: 01A09B51D7FFC5B7EA5F14BB98CFFC50877A
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/uLM3f7HSG9AA8Kez3Ls8FtMS4xc.roa
Signing time: Sun 13 Sep 2026 15:10:27 +0000
ROA not before: Sun 13 Sep 2026 15:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 812
IP address blocks: 91.202.215.0/24 maxlen: 24
91.244.119.0/24 maxlen: 24
91.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:51:d7:ff:c5:b7:ea:5f:14:bb:98:cf:fc:50:87:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Validity
Not Before: Sep 13 15:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8b3377fb1d21bd000f0a7b3dcbb3c16d312e317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:fe:c9:8b:e8:54:cf:82:e5:a5:d2:a4:6f:
3a:fa:d5:0c:40:02:59:20:90:ee:8a:00:db:0d:a9:
d1:e1:df:06:c6:04:a3:9d:c7:9d:f8:31:68:33:30:
c3:15:22:9b:7e:9f:ce:57:8f:81:89:82:0c:d2:aa:
16:0a:00:17:ee:37:48:d7:a6:81:e4:86:87:6b:a8:
3e:51:e2:cc:f3:f7:c5:19:3c:6a:31:ad:55:48:78:
bb:f5:63:f0:23:16:c2:ee:4d:e4:61:cd:70:cf:37:
0b:22:23:4d:27:c0:02:b9:fb:55:a4:fe:19:71:f5:
2e:13:33:c9:ca:68:37:c9:0d:2b:94:56:49:4d:20:
a6:f7:2d:e2:2b:76:39:2a:6b:f6:b2:c2:c4:16:b0:
65:e6:f5:8b:38:60:2d:95:10:09:8b:16:fc:c8:65:
9c:dd:bf:a0:4a:17:11:66:f2:66:1c:79:b1:98:c2:
b3:27:ee:5f:26:a1:17:a0:12:ab:7a:e4:b6:99:46:
78:7e:5c:ff:04:5e:3e:dd:13:5d:eb:69:b0:78:87:
1a:81:39:07:af:19:a4:e3:4c:27:05:fc:b7:ea:e6:
9c:d8:ca:4e:b7:5b:7a:cd:3e:a8:aa:91:8d:ac:84:
14:97:76:70:49:89:59:8e:82:7e:f3:73:df:a5:7f:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B3:37:7F:B1:D2:1B:D0:00:F0:A7:B3:DC:BB:3C:16:D3:12:E3:17
X509v3 Authority Key Identifier:
keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/uLM3f7HSG9AA8Kez3Ls8FtMS4xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.215.0/24
91.244.119.0/24
91.244.133.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5e:1c:e2:e4:4c:78:83:e2:aa:5b:98:d4:86:07:1d:65:4b:
d4:87:91:3f:a3:59:ca:16:3a:fd:13:61:d0:1f:73:98:8a:2d:
64:dd:5f:80:7b:0d:f4:19:c6:fa:bc:fd:4d:8f:d9:31:e9:ab:
d3:d0:8b:bc:bc:1d:fc:a9:ff:a5:b8:b9:2e:42:52:ea:1c:b2:
21:00:0b:3d:73:d5:cc:8c:60:13:cd:46:05:9c:d4:42:94:bd:
d2:85:01:4a:46:86:65:53:20:ed:4e:cd:fc:a9:ea:22:7e:1b:
0c:74:c3:5d:4c:e1:11:43:5c:18:f4:33:02:5f:f8:79:ee:b1:
bc:03:9a:7f:3a:3a:a9:17:24:c6:88:48:17:e5:21:a2:49:8e:
e6:e7:f1:61:2a:79:98:d7:84:76:ac:1f:39:0e:79:63:d7:cd:
79:1b:3e:0c:c2:ec:9a:df:e2:7c:0d:ee:28:13:23:ee:c7:9b:
5c:62:90:03:bf:b0:34:50:a5:15:5b:48:ec:4a:34:da:81:b7:
a4:a1:bd:66:ad:ac:c9:96:90:a1:79:e0:aa:dd:da:96:24:05:
b8:60:e9:23:fe:44:0a:97:2f:59:3e:8e:32:49:4b:66:8b:6c:
08:62:0c:0b:c2:74:65:9e:51:36:1a:a2:49:7b:f1:ea:af:81:
4e:3f:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:22 2026 by rpki-client