Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ucdt-9U9uLgFKY9KoDahOi5EY1o.roa
File: ucdt-9U9uLgFKY9KoDahOi5EY1o.roa (raw, json)
Hash identifier: 4MR+A0UJDoXwvizY/3LZE7fqk6s46995FJs3DydY+O0=
Subject key identifier: B9:C7:6D:FB:D5:3D:B8:B8:05:29:8F:4A:A0:36:A1:3A:2E:44:63:5A
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019CAA0DF3F7129097B34B0CC4C3C83CAC2E
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ucdt-9U9uLgFKY9KoDahOi5EY1o.roa
Signing time: Sun 01 Mar 2026 15:39:26 +0000
ROA not before: Sun 01 Mar 2026 15:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 78.108.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:0d:f3:f7:12:90:97:b3:4b:0c:c4:c3:c8:3c:ac:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Mar 1 15:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9c76dfbd53db8b805298f4aa036a13a2e44635a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:47:72:d2:2c:9e:f9:a7:b6:0a:9c:8b:f3:
59:46:84:27:f9:b3:82:da:ca:51:90:9a:e7:b8:79:
14:2c:88:88:8b:a2:63:42:c6:be:2f:8f:60:d1:55:
87:59:4c:fd:67:24:87:ff:5f:23:4e:2a:af:2d:88:
54:71:48:ff:51:4c:ff:cf:b1:6e:59:50:d9:26:4b:
5e:23:01:06:63:31:d6:3c:e3:06:50:5b:9f:bb:b7:
9c:43:b6:9f:f9:5b:3c:e3:87:2c:60:c0:16:a0:9f:
26:f5:72:2e:90:70:5e:80:83:bb:dd:83:94:1f:ba:
cd:cd:b8:11:92:73:7d:90:3a:d4:72:14:ef:44:24:
e8:eb:89:80:c1:dc:81:40:af:02:52:c1:fb:8f:84:
e3:5d:1c:cc:4e:66:07:3d:64:21:a9:24:17:3a:a4:
ba:f8:95:19:b2:9b:f9:f9:4a:5f:09:a7:fb:56:09:
1b:a8:02:17:36:cc:44:d8:1b:40:fc:06:a2:16:5a:
8e:70:b3:c6:b6:19:4b:26:f8:b6:15:38:31:2f:87:
7d:79:ef:e5:e3:e3:1d:b7:e2:cb:79:29:ca:87:0d:
a9:6d:99:95:22:36:ca:19:61:55:7a:88:17:bd:d7:
e2:2f:c0:5b:57:58:ed:bc:fc:49:3e:0d:5b:79:11:
34:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C7:6D:FB:D5:3D:B8:B8:05:29:8F:4A:A0:36:A1:3A:2E:44:63:5A
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ucdt-9U9uLgFKY9KoDahOi5EY1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ba:ca:57:2a:bb:a7:a2:7f:72:c5:88:8e:c7:a9:16:49:d3:
2d:03:e2:56:e8:ac:76:6c:3a:30:a4:7f:53:94:1d:45:d3:15:
ed:b4:58:b2:09:33:21:a0:94:e4:dc:4e:f4:76:22:2e:ee:e3:
82:68:fe:a3:d3:b1:06:66:56:f6:14:69:bc:db:26:65:b4:42:
11:ad:50:81:00:d3:24:77:bf:4b:ea:b5:a2:5f:6a:3b:e4:84:
5d:89:79:3e:4d:42:f3:24:59:da:cc:60:f9:01:bf:1e:85:bd:
dd:b5:08:60:88:8c:9c:bd:1c:a0:86:3d:d1:92:f8:3e:35:0d:
e5:92:f3:9a:d3:3e:29:98:e9:94:63:aa:c2:ae:91:36:cc:ec:
3f:38:18:4e:68:69:91:a6:b4:a7:aa:c4:78:f2:22:11:92:54:
01:24:b4:21:a7:7e:92:be:0c:2d:d6:29:87:bd:42:a7:2e:3e:
eb:b4:e0:10:b4:ee:73:45:64:d8:4d:88:24:bc:1e:2f:7f:b5:
01:d3:09:b6:9b:97:9c:cc:bf:3a:10:6d:b9:10:22:8b:53:5c:
e3:9f:3c:51:5a:71:ab:c2:d8:80:1f:6a:2d:5e:17:2e:21:3d:
b8:39:27:1b:1b:23:fd:63:3f:72:1c:33:34:72:92:1e:f6:1e:
d2:bf:2d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:33 2026 by rpki-client