Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uhd_f2yMZlz05uG88ckUwL7tI6k.roa
File: uhd_f2yMZlz05uG88ckUwL7tI6k.roa (raw, json)
Hash identifier: H4gWGJRqEWLihvFRtq4hgy2BLdapho2Ye5XQEvGqjyk=
Subject key identifier: BA:17:7F:7F:6C:8C:66:5C:F4:E6:E1:BC:F1:C9:14:C0:BE:ED:23:A9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019FA79C231CF170D3DFE605BA4532AD381D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uhd_f2yMZlz05uG88ckUwL7tI6k.roa
Signing time: Tue 28 Jul 2026 07:24:15 +0000
ROA not before: Tue 28 Jul 2026 07:24:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34385
IP address blocks: 194.14.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9c:23:1c:f1:70:d3:df:e6:05:ba:45:32:ad:38:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 28 07:24:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba177f7f6c8c665cf4e6e1bcf1c914c0beed23a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:5f:12:07:16:92:ac:03:6e:70:c8:27:01:
8e:89:74:37:77:ef:c5:c3:ba:04:a1:69:a2:cb:ef:
5d:46:72:d2:5a:31:4c:90:57:2a:56:a0:b0:23:3a:
c6:7f:0f:e3:f3:da:7c:0a:c8:65:89:db:ce:a4:74:
d5:10:97:5e:ee:75:bb:08:d2:f2:1b:08:4f:d3:9f:
7f:1f:c8:97:72:78:65:1a:9e:06:cc:3e:e1:dc:79:
0a:8e:17:6d:16:59:f3:9b:45:fe:74:be:a2:06:39:
4d:07:89:67:54:b4:09:e6:30:75:a2:68:2f:43:60:
f2:42:0f:dc:01:2d:57:0f:6c:35:88:e2:1b:0a:01:
ce:cf:6c:63:b5:f1:32:a4:ba:13:e0:3f:35:5d:ea:
ed:87:08:db:47:14:ee:57:2c:03:ab:73:04:bf:d4:
ee:08:ed:6f:1d:f3:ea:18:9a:04:05:21:16:49:c7:
15:b6:d0:16:ae:a1:9b:05:f1:00:d5:1e:56:7a:3c:
63:50:94:ea:84:91:35:a2:76:a1:39:6f:b5:d6:1b:
33:0d:8c:a3:7c:86:74:6f:f1:9b:05:41:a5:02:8e:
48:82:00:c7:43:45:da:9c:06:00:e7:d4:e6:04:35:
d5:cb:3c:77:ca:4c:17:80:b8:44:cb:98:a2:10:93:
78:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:17:7F:7F:6C:8C:66:5C:F4:E6:E1:BC:F1:C9:14:C0:BE:ED:23:A9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uhd_f2yMZlz05uG88ckUwL7tI6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.11.0/24
Signature Algorithm: sha256WithRSAEncryption
56:be:43:86:4e:02:b3:7d:89:2d:cc:23:86:5a:df:f2:32:55:
bf:55:c8:91:4a:da:cd:75:67:ca:0e:b3:d7:f5:fa:f1:1b:6f:
83:f3:42:bc:ba:b8:79:f0:b6:f3:6c:54:40:15:d6:be:94:76:
f7:ca:03:09:72:0a:e2:c1:ea:ca:70:c4:4d:ba:ee:45:7b:3f:
3b:32:1e:f2:b4:d5:41:a2:3b:3d:1d:74:c1:ed:01:77:03:39:
69:1a:86:8e:78:c7:d1:28:de:f5:0c:ae:25:4b:7d:f4:28:72:
f3:66:76:a3:69:96:37:bc:ab:3e:27:dc:04:7e:b7:60:bc:26:
92:f7:be:be:b7:9e:04:0d:af:94:40:3b:10:8b:f1:a5:47:33:
97:98:06:11:12:2d:ca:4f:6d:bd:df:ac:9d:70:28:90:0f:0e:
e1:d6:ae:26:0c:36:b5:f4:e1:e1:56:c0:d0:a4:38:73:f1:f5:
94:d5:a9:34:00:85:4a:b5:a7:3f:dc:f7:ac:79:60:dc:36:44:
07:42:aa:15:34:68:f8:7f:7f:8c:fe:61:67:6d:db:bd:b7:e2:
c5:65:83:e5:84:eb:df:58:1e:35:75:40:a0:3f:ca:9a:c2:ff:
54:e4:0a:7f:4b:d3:05:ad:96:12:5a:6f:3d:a7:55:e8:6e:82:
d8:4b:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:25:15 2026 by rpki-client