Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/UD_UfIwnl4qo5veFnawz_Py7oWs.roa
File: UD_UfIwnl4qo5veFnawz_Py7oWs.roa (raw, json)
Hash identifier: u88NE0IUz/QnbzvXpzch8LU+f6UUm6bGqPLgZP1ycBs=
Subject key identifier: 50:3F:D4:7C:8C:27:97:8A:A8:E6:F7:85:9D:AC:33:FC:FC:BB:A1:6B
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 019E98225FB6C8BE825E2C17CD71943B37AA
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/UD_UfIwnl4qo5veFnawz_Py7oWs.roa
Signing time: Fri 05 Jun 2026 14:14:09 +0000
ROA not before: Fri 05 Jun 2026 14:14:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 194.104.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:98:22:5f:b6:c8:be:82:5e:2c:17:cd:71:94:3b:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Jun 5 14:14:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=503fd47c8c27978aa8e6f7859dac33fcfcbba16b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:2b:9d:5b:94:a6:bf:ef:02:16:67:63:91:
45:17:88:8a:ff:99:31:b7:9d:f4:d4:e7:89:b8:99:
64:96:22:b7:1a:74:84:81:57:25:c3:43:21:87:2d:
f1:78:6d:56:06:c2:eb:7a:ce:ec:96:c4:f4:06:52:
35:db:03:b1:ed:a2:c2:f5:f2:66:02:7b:ff:9a:09:
93:47:2c:d1:87:87:be:b3:ef:7a:35:f5:1b:11:ea:
d1:82:8b:73:50:c1:6a:8d:9d:cd:ed:db:42:45:6c:
41:56:f5:30:7d:af:78:f7:59:e6:d0:44:3a:f2:d6:
77:dc:4a:31:d4:b4:26:71:6d:99:61:b6:34:61:02:
3e:08:29:b7:93:f9:fa:5a:63:16:eb:de:91:66:67:
e5:6b:42:3d:31:d9:6f:16:90:e1:13:ef:3f:12:bc:
54:85:69:7b:d8:af:7d:27:96:5d:ab:ad:64:e3:67:
88:f6:f0:91:8f:23:95:50:69:84:0b:69:eb:16:f2:
c6:81:83:9a:36:ae:9f:2c:f1:65:d4:47:4a:a8:82:
80:01:bf:dc:6f:f0:fe:44:ba:d0:db:fe:0a:3a:ca:
d2:da:bc:73:29:c6:5e:46:55:64:5a:eb:06:dd:4b:
a8:a7:fa:e0:cc:b9:f3:57:fa:9a:1b:4e:7c:08:34:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3F:D4:7C:8C:27:97:8A:A8:E6:F7:85:9D:AC:33:FC:FC:BB:A1:6B
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/UD_UfIwnl4qo5veFnawz_Py7oWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.138.0/24
Signature Algorithm: sha256WithRSAEncryption
90:2d:03:b4:4c:33:ec:66:b3:ed:c6:ca:f0:93:bb:55:e7:8e:
4d:d8:7b:44:43:3c:61:7b:11:32:2f:6e:82:06:be:9e:bd:46:
54:84:fd:3d:5a:66:2d:0f:42:ff:42:4d:d4:12:78:e3:ef:9e:
fe:4f:09:75:f5:f7:e9:a4:29:fd:99:8f:a9:37:4b:5b:1b:c6:
dc:2e:e2:42:9e:d4:03:d7:6e:1f:bb:07:e8:ea:ea:96:93:8e:
06:8d:f9:f4:11:fe:f7:31:06:f4:b2:df:93:9c:64:7a:a9:38:
4d:b1:2f:bc:ab:61:93:b1:cc:81:23:40:6d:31:26:95:3f:cc:
e5:eb:a9:6d:96:06:97:08:60:e3:6d:a3:0b:99:e6:ee:d1:78:
fb:90:7d:bc:6d:1a:03:58:18:7f:f2:f8:2e:53:6b:6b:fd:0e:
eb:80:9f:99:bd:92:fa:37:83:0a:a7:b7:b1:84:b0:ee:e2:78:
ee:6f:73:05:b0:ad:d2:8f:f0:82:51:29:32:b6:a1:71:51:de:
7e:94:88:71:08:63:80:f1:06:b9:c4:43:2f:ed:e3:14:3a:ca:
e9:49:52:27:64:fb:8d:b9:27:23:b7:05:ea:e8:50:94:3a:ce:
86:12:c6:c9:cc:1a:5b:92:7a:d5:35:4a:90:36:48:53:2f:bc:
fd:3c:88:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:45 2026 by rpki-client