Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/uHI7c1lxQG_MT9KOHTDNSrPpJX8.roa
File: uHI7c1lxQG_MT9KOHTDNSrPpJX8.roa (raw, json)
Hash identifier: R1Pw1llMZGhkTopwsbaboewxn+ec/eSdwTYfu1/Mfvs=
Subject key identifier: B8:72:3B:73:59:71:40:6F:CC:4F:D2:8E:1D:30:CD:4A:B3:E9:25:7F
Certificate issuer: /CN=a949f915604029bebc004dead72d11bc0715dfbb
Certificate serial: 01A018CF826F5D984BAAED1F87B5A4BD6ED1
Authority key identifier: A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/uHI7c1lxQG_MT9KOHTDNSrPpJX8.roa
Signing time: Wed 19 Aug 2026 06:57:27 +0000
ROA not before: Wed 19 Aug 2026 06:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 163.117.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:cf:82:6f:5d:98:4b:aa:ed:1f:87:b5:a4:bd:6e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a949f915604029bebc004dead72d11bc0715dfbb
Validity
Not Before: Aug 19 06:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8723b735971406fcc4fd28e1d30cd4ab3e9257f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b8:06:45:2e:f3:b2:e8:36:ed:ad:2f:94:3f:
61:e7:9d:d3:2a:b4:38:82:d5:e3:d0:a3:ee:27:ae:
96:71:4b:7b:15:08:14:b1:08:83:ad:cd:9b:44:84:
69:21:5b:c4:6b:09:75:64:6e:b9:99:c8:21:f1:62:
90:58:6e:bb:4b:9e:21:13:15:54:b6:42:00:f6:b3:
85:2e:3c:14:be:99:b5:d4:d8:9c:d1:54:4c:0f:b2:
16:13:a6:07:bb:85:b1:a7:4c:ae:b4:09:d8:6d:73:
01:94:71:f4:f0:b8:90:24:2c:3e:ee:75:b8:ed:3b:
f9:af:2f:b8:ed:d6:4d:70:25:9a:3a:51:84:1e:b9:
5c:dc:96:c1:27:3c:ba:d8:b5:bb:d1:c5:dd:a8:94:
59:cb:97:94:74:22:b7:60:84:a9:f5:71:82:03:e8:
3d:c8:75:3c:f9:ae:2c:fd:3e:f9:7f:11:c6:6c:6e:
12:77:14:b5:97:2c:0a:39:94:e6:43:79:14:a4:c0:
4d:e1:5b:d1:4d:f6:de:fb:50:3d:c6:db:ac:0f:bb:
eb:6b:4b:db:00:07:1e:fa:28:f1:f7:58:b0:d7:f6:
cc:85:5c:3b:af:61:7c:41:d3:dc:cb:c0:70:ca:44:
6f:69:8b:e2:16:f5:c8:16:d0:d7:74:57:cf:e2:1f:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:72:3B:73:59:71:40:6F:CC:4F:D2:8E:1D:30:CD:4A:B3:E9:25:7F
X509v3 Authority Key Identifier:
keyid:A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/uHI7c1lxQG_MT9KOHTDNSrPpJX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:bc:8f:e2:d8:15:1a:61:28:20:86:79:f7:78:a4:78:7d:f2:
a0:02:3c:39:02:8f:89:cc:c0:12:c0:b9:02:11:1b:61:4a:92:
2c:6a:bd:f0:93:ac:f7:58:81:49:62:13:70:eb:e2:26:6b:f1:
39:af:37:06:3b:ef:57:de:7c:13:43:08:88:9c:83:76:bb:29:
da:a3:10:fc:b9:ea:39:92:1c:3d:d6:ee:f9:cc:16:55:91:7a:
fc:ea:88:e6:08:cd:2d:e0:9a:48:67:44:c8:c3:01:94:61:c1:
8f:0e:b4:ae:e6:a1:2b:d1:2c:2b:56:59:9f:34:cb:03:3c:e5:
65:43:44:7d:f7:aa:09:50:c9:6e:45:3a:73:d8:02:2f:16:79:
7f:55:4c:23:48:a5:4d:d6:b9:6c:f1:d9:e0:74:5e:1a:42:3b:
12:7b:5d:27:56:f7:09:9c:f1:ca:38:21:65:60:fe:7f:bf:9d:
34:6c:9d:eb:51:7b:ed:fd:5e:c1:79:1d:e9:31:c7:fe:62:29:
d5:68:88:bf:64:f6:7a:c2:09:70:b5:54:94:57:a9:7d:1e:9e:
7e:34:db:ff:84:5b:d1:53:d2:96:2b:81:23:3c:a6:17:ee:ae:
23:6c:3b:e4:a7:01:ed:ad:50:90:1a:d6:c4:5e:34:e5:dd:6d:
60:6d:7e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:06:23 2026 by rpki-client