Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/uF9rSt4YLADIctugT8aqzgVz2Jg.roa
File: uF9rSt4YLADIctugT8aqzgVz2Jg.roa (raw, json)
Hash identifier: vL8STBd6D719dl6NL0ZxkzrUFty3LALsIeV5PQKm6jI=
Subject key identifier: B8:5F:6B:4A:DE:18:2C:00:C8:72:DB:A0:4F:C6:AA:CE:05:73:D8:98
Certificate issuer: /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial: 01A060AC4FC9C3D787483863F6712FD1A319
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/uF9rSt4YLADIctugT8aqzgVz2Jg.roa
Signing time: Wed 02 Sep 2026 05:51:40 +0000
ROA not before: Wed 02 Sep 2026 05:51:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 194.143.217.0/24 maxlen: 24
213.220.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:60:ac:4f:c9:c3:d7:87:48:38:63:f6:71:2f:d1:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Validity
Not Before: Sep 2 05:51:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b85f6b4ade182c00c872dba04fc6aace0573d898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:f1:f2:45:c3:03:bf:b0:64:83:11:33:ed:
f7:c5:ce:4f:b5:a9:97:99:4f:65:af:2c:79:c0:36:
af:35:81:04:05:4b:b6:73:d6:17:3f:ec:db:a2:fa:
68:cd:3f:f3:d0:62:d3:a6:8c:61:33:5b:76:32:56:
63:d6:de:04:f6:75:3e:d4:5a:59:0b:8f:b4:53:86:
c5:34:b1:29:6f:9b:25:5e:b2:1b:5a:1f:98:a5:57:
e5:65:9f:5d:ab:bd:08:59:1f:c5:4f:30:74:d8:91:
52:d1:c5:be:53:59:b0:ae:8a:27:32:74:dc:79:6b:
eb:7e:31:f9:ce:16:8f:d1:7d:8c:fb:52:4c:fa:99:
e2:9b:f1:64:dc:b7:d3:90:1c:91:6e:ae:e0:e2:17:
e8:24:6d:8d:6e:b8:1f:48:97:53:3c:05:04:7e:cc:
3b:54:1c:39:a8:ab:18:fe:db:f1:59:d2:dc:5d:52:
db:e7:d5:51:26:e7:c0:b4:01:8f:db:f3:c7:49:41:
71:b0:08:0b:06:36:ec:a2:6e:39:91:ca:68:01:a5:
dc:9a:e4:b4:34:a7:75:0b:a5:9e:83:98:ca:01:0b:
5a:f7:5b:24:19:6a:69:c2:73:95:c8:24:1e:c2:65:
85:68:6a:21:35:62:fe:d8:93:e1:7d:3a:72:79:99:
2c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5F:6B:4A:DE:18:2C:00:C8:72:DB:A0:4F:C6:AA:CE:05:73:D8:98
X509v3 Authority Key Identifier:
keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/uF9rSt4YLADIctugT8aqzgVz2Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.143.217.0/24
213.220.41.0/24
Signature Algorithm: sha256WithRSAEncryption
63:04:b8:2a:a3:59:98:5f:81:fa:ff:a8:c7:44:f5:ba:87:e4:
9f:1d:4d:1b:6c:5e:35:dd:ee:6c:2b:9f:e3:19:80:d4:39:01:
c3:27:8c:72:ab:99:5a:7f:73:12:74:a9:a6:05:48:7c:59:21:
f2:95:7d:95:60:ee:29:4c:83:59:16:96:34:18:6b:3a:39:38:
6d:87:38:6f:62:e3:b9:7c:8b:e7:19:b0:cf:62:fb:46:05:e9:
b0:d9:41:8d:fd:b1:5c:8d:f1:41:09:ef:55:7d:c5:e9:7f:25:
42:b1:b4:84:5c:d3:29:3d:ba:88:a1:bb:f3:10:52:50:11:a1:
19:bc:c6:a7:f3:5d:36:be:e6:0b:ec:f9:7b:1a:d9:66:df:8a:
0b:1b:62:eb:31:97:df:86:f1:b5:83:cf:1f:97:29:d5:96:1c:
6d:25:c1:95:67:f2:32:b9:ed:cf:4d:40:82:f2:13:48:ff:7d:
79:fe:cb:5c:ae:e2:a2:39:63:84:96:ac:2b:54:79:ff:d3:5b:
fd:59:00:90:83:48:03:bd:e9:62:26:f1:d7:dc:99:0f:b4:84:
76:f5:74:21:6e:34:b7:47:b0:b8:5d:a1:73:e0:dd:3c:c7:8a:
34:ee:49:03:bb:ed:c1:1d:9d:88:8a:cf:03:8d:ae:8c:09:bf:
0d:77:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:14:22 2026 by rpki-client