Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/uEqxyS_Z6CD4ga3QenDz-xQtzRs.roa
File: uEqxyS_Z6CD4ga3QenDz-xQtzRs.roa (raw, json)
Hash identifier: cZVI9tUEYNEfl0cyEalypCg6wqkUJ2Ynk/3s857D/qg=
Subject key identifier: B8:4A:B1:C9:2F:D9:E8:20:F8:81:AD:D0:7A:70:F3:FB:14:2D:CD:1B
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 01A0A40256CF7358FCF4F0562ABB293D7340
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/uEqxyS_Z6CD4ga3QenDz-xQtzRs.roa
Signing time: Tue 15 Sep 2026 07:40:11 +0000
ROA not before: Tue 15 Sep 2026 07:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 202.50.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:02:56:cf:73:58:fc:f4:f0:56:2a:bb:29:3d:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Sep 15 07:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84ab1c92fd9e820f881add07a70f3fb142dcd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:3f:ad:7c:70:58:d3:42:2e:1a:65:99:9f:
85:82:02:95:60:4e:79:07:1f:a7:2a:ca:e2:f6:cb:
a4:01:b9:40:66:91:d4:f2:93:f6:ce:d5:cb:f6:70:
5e:63:bb:9b:fb:a8:13:e7:f7:de:36:72:10:f1:e5:
79:3f:6a:62:2e:eb:37:0a:42:75:d9:75:b0:4d:23:
c6:9f:22:6d:5c:cd:74:c3:3a:a4:1f:1d:6d:69:55:
4b:a5:04:00:b3:8d:11:a2:02:63:ab:a7:22:17:f5:
1c:02:57:53:21:73:9f:94:56:80:06:81:a5:40:e2:
a3:58:67:4a:09:c4:cb:f5:e5:2d:99:23:6d:28:b4:
df:b8:08:af:a3:89:f9:71:d5:4c:f1:d2:f6:54:b2:
16:cb:99:aa:e3:49:7c:fa:d1:7a:86:9b:61:6b:f8:
58:7c:69:ac:1f:ee:09:35:0f:96:7b:d9:0b:1a:a8:
1e:96:0f:f2:63:5f:f9:fe:67:d4:16:3c:35:d6:cc:
26:c9:77:ad:9b:d3:1f:5f:db:f5:cb:44:cb:d9:9b:
2f:1f:4f:4d:be:6c:da:14:3f:78:e9:78:20:68:1a:
d2:df:a0:ca:ad:1a:f6:65:0f:88:20:20:d0:2d:88:
4a:cd:4e:cb:a7:c4:1a:6a:eb:f3:7e:f5:0f:21:04:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4A:B1:C9:2F:D9:E8:20:F8:81:AD:D0:7A:70:F3:FB:14:2D:CD:1B
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/uEqxyS_Z6CD4ga3QenDz-xQtzRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.50.253.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d9:b8:02:b7:e7:af:c7:d4:9a:77:58:ce:bd:71:d9:04:b7:
7a:00:a4:cd:b3:e5:88:bc:25:9b:9e:75:2c:0a:0c:6f:bd:67:
1c:d8:39:5e:76:68:6b:a2:c6:8c:03:40:fe:36:10:9d:74:07:
6d:ed:93:c5:08:e8:ea:33:c8:74:8d:50:51:1d:a4:78:7b:43:
f8:ba:c7:93:5b:c7:28:92:a7:bc:19:f0:f1:03:8d:23:47:7d:
27:9f:70:03:0f:51:d3:ec:c7:38:48:c7:af:ff:70:d8:7f:5f:
eb:cb:b4:35:95:0a:74:c1:72:bc:d6:11:66:a5:a6:b1:d5:90:
95:48:9a:d9:da:55:f0:8b:d9:43:c9:a7:6f:58:f3:dd:c9:a0:
53:ad:ee:9b:b4:f8:a0:68:d6:6b:a2:d9:5a:75:3d:38:ee:35:
bc:b6:d9:bd:79:b0:04:df:ac:77:26:99:a3:56:c0:9d:ed:33:
65:c1:13:63:07:8d:01:3d:5d:fd:df:a5:81:05:46:0b:33:d2:
04:16:3b:ad:a1:1e:a1:4e:3a:5d:8f:19:c8:21:06:40:17:10:
42:0d:3f:23:90:c7:d1:de:aa:55:96:07:4a:25:c1:e2:7c:9d:
92:c2:ba:bb:f6:66:a2:65:e9:30:31:ff:84:28:63:00:8a:bc:
48:b0:e5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:38 2026 by rpki-client