Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/UWaCKuifSAXQ_q_qbqARMjeLkuk.roa
File: UWaCKuifSAXQ_q_qbqARMjeLkuk.roa (raw, json)
Hash identifier: xqvi3BTcN1RVOAgMAoZQMY8MT30m6KbWtN2qeSF/sR8=
Subject key identifier: 51:66:82:2A:E8:9F:48:05:D0:FE:AF:EA:6E:A0:11:32:37:8B:92:E9
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 019D2F854A3E5F4DF7FF909CA4CE1E93FF98
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/UWaCKuifSAXQ_q_qbqARMjeLkuk.roa
Signing time: Fri 27 Mar 2026 13:39:17 +0000
ROA not before: Fri 27 Mar 2026 13:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49988
IP address blocks: 2a04:ac00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:85:4a:3e:5f:4d:f7:ff:90:9c:a4:ce:1e:93:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Mar 27 13:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5166822ae89f4805d0feafea6ea01132378b92e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:e7:01:09:da:97:00:25:a9:92:a9:bc:cb:
74:0a:d4:1e:ec:87:18:35:3c:f4:e0:c2:00:ff:5e:
88:73:d6:5c:4f:e1:50:bd:f8:30:46:2d:19:25:f1:
8e:e8:cc:c5:e5:65:d0:13:94:0f:46:e0:bd:41:99:
f2:f4:9a:a2:7f:c8:b5:30:35:94:c4:28:06:66:bc:
c0:eb:c5:92:0a:95:85:29:20:02:bc:b6:e4:01:e9:
e6:f8:c7:79:ee:db:cf:3f:d0:3a:98:94:c5:43:9f:
cd:23:e9:28:71:67:3b:cc:0e:14:ac:48:d9:59:cd:
ea:53:af:68:a3:a4:4b:81:5c:0c:7b:93:35:23:66:
cf:17:44:fe:25:85:78:8a:13:a3:fc:a6:70:96:9f:
53:c8:6d:09:a2:37:2e:33:18:38:25:a7:af:c6:63:
2b:f5:bf:75:f9:bb:41:ac:97:12:79:b7:6d:44:71:
92:ae:c7:c5:cd:c0:a9:35:61:3e:7a:46:9f:57:b4:
b7:d6:07:5b:5f:8f:46:31:de:1b:45:f5:aa:30:b5:
15:6d:72:19:14:29:99:eb:ca:27:e1:aa:3b:74:25:
0b:6d:fd:6d:6b:0e:5e:23:eb:f5:5d:3d:f6:1a:b7:
4e:da:e3:92:da:86:a6:ff:93:bf:19:fa:b6:5d:b9:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:66:82:2A:E8:9F:48:05:D0:FE:AF:EA:6E:A0:11:32:37:8B:92:E9
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/UWaCKuifSAXQ_q_qbqARMjeLkuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac00:f::/48
Signature Algorithm: sha256WithRSAEncryption
9f:b0:4b:5d:a0:b8:b8:d7:51:02:95:e4:76:16:f3:53:59:bf:
40:1e:53:a6:41:33:85:80:59:f1:91:5c:79:24:4e:78:2f:d6:
f4:75:5a:46:84:e7:8f:45:13:aa:3a:48:ee:35:43:cb:9a:32:
54:0b:b0:de:ee:9d:22:49:a8:0b:6f:1a:01:e0:63:91:52:6f:
0e:8f:2f:a0:95:e8:ab:2c:9c:e0:35:4b:85:a0:79:62:d1:07:
63:77:61:67:63:b7:f4:b7:1b:0f:da:b6:b8:91:53:88:50:5a:
e6:fb:22:e1:4c:82:ef:94:f7:e8:e7:3a:2c:5b:61:a9:91:51:
c3:e3:3a:07:aa:26:56:cc:a7:24:3e:46:df:a7:ee:c2:bc:e8:
f1:72:8e:13:da:55:7b:aa:c0:16:bf:c4:b7:80:e9:3b:ea:4a:
19:8b:31:eb:eb:ee:8f:aa:21:d2:31:06:96:09:d1:58:a0:ed:
30:07:65:3a:cb:f6:db:ad:48:10:da:c1:68:9a:27:ef:cd:30:
bb:71:ef:21:8c:b7:d7:8c:cd:2e:54:de:98:eb:c8:1d:6c:3b:
03:24:3a:5e:75:48:4c:41:7b:c4:aa:a6:79:4c:45:72:6b:87:
59:94:78:71:6d:99:ac:68:27:ba:35:f0:39:70:75:5c:6f:ae:
48:cd:cf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:53 2026 by rpki-client