Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa
File: uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa (raw, json)
Hash identifier: s4Q03IYP8nRfMJZytfhhkdjuwRkc+JRlSu6SQVdvSw4=
Subject key identifier: B9:EB:FF:09:D9:B8:23:76:EA:1C:7B:3C:34:95:7B:71:B2:48:97:94
Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial: 019C8FC6A7A024929BD978A17672A20063DE
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa
Signing time: Tue 24 Feb 2026 13:11:26 +0000
ROA not before: Tue 24 Feb 2026 13:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49608
IP address blocks: 86.109.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:c6:a7:a0:24:92:9b:d9:78:a1:76:72:a2:00:63:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Validity
Not Before: Feb 24 13:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9ebff09d9b82376ea1c7b3c34957b71b2489794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5b:0c:46:ea:03:15:ec:51:0d:f3:b9:f7:4e:
37:e0:ec:ba:61:64:85:92:f6:fe:e1:2f:13:36:fa:
ff:8b:cd:8c:82:c3:82:83:8d:67:59:0b:c6:47:fb:
b6:77:49:7a:05:2f:f8:2d:64:d9:0f:02:d2:4e:e5:
35:9d:13:51:df:29:98:02:78:e5:fd:e0:eb:6e:b8:
41:19:e2:74:0d:3c:ac:0d:72:dc:ce:83:91:dd:fa:
95:a1:ff:3e:e1:cb:a9:f2:e1:d7:45:2a:5b:c1:21:
cb:a4:c6:c1:b6:8b:dc:00:f9:ce:9f:aa:44:53:25:
1f:63:2a:8b:77:6f:02:21:f2:d7:36:ed:4d:81:08:
8f:e9:56:b7:7c:bb:2a:45:e0:85:85:13:83:8f:20:
a8:2e:8a:98:f3:b8:fc:5c:1b:73:64:5c:7f:88:3a:
0e:17:90:d1:c3:5d:27:b4:f6:49:67:7d:b6:3f:eb:
f7:71:9a:f2:ba:1a:3a:c4:ab:d5:77:cd:b6:24:e5:
31:ad:dc:05:60:ed:56:46:46:1f:af:97:c7:d9:1a:
62:e8:c5:36:50:58:c8:c7:13:e6:53:81:ec:87:39:
c7:37:4b:29:e7:2b:57:54:86:e8:05:eb:4a:75:71:
10:84:a1:d5:e1:64:ed:ef:7d:5e:9d:0d:e3:7a:08:
21:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:FF:09:D9:B8:23:76:EA:1C:7B:3C:34:95:7B:71:B2:48:97:94
X509v3 Authority Key Identifier:
keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/uev_Cdm4I3bqHHs8NJV7cbJIl5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.109.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:59:fc:2d:08:9b:f3:65:57:56:21:5d:98:ad:f9:24:7d:8b:
1c:0c:49:68:0b:05:08:6f:0f:e7:75:86:52:3e:24:99:21:83:
a9:00:16:37:cf:12:4c:c9:02:77:62:c5:2c:62:a0:6b:50:4b:
34:1a:bb:e2:94:9e:00:91:64:9e:74:a5:8d:54:53:79:39:fc:
c0:cc:c1:2d:ef:69:01:f5:43:27:06:c3:94:55:a2:88:97:74:
76:85:5c:65:9d:f8:4a:ed:0d:05:9e:f6:ea:f9:56:c5:d2:08:
72:ba:90:ee:34:c0:43:48:6f:f6:50:cb:01:84:1d:ed:9b:4b:
d3:82:54:b2:90:1b:03:57:09:75:2d:7e:de:08:f4:86:af:2d:
ec:1d:6d:f3:73:da:7d:90:5c:6b:b9:ab:45:ba:1a:f1:66:5c:
9d:4d:d6:ee:c1:4e:06:89:04:76:9f:de:8c:2c:01:fe:18:89:
32:66:2f:b4:c0:c4:a3:0a:e6:1b:a4:e5:4e:4c:49:fb:e8:23:
08:a3:ee:29:7d:0f:b1:91:03:b0:7d:7a:8b:53:86:6b:28:41:
6e:da:16:f3:7e:03:32:5c:7b:bc:6f:7c:51:d5:64:23:d1:21:
bc:f6:ae:83:cf:93:dc:f2:1b:01:31:93:0e:a3:30:3c:ab:50:
f4:b0:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:25:14 2026 by rpki-client