Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/uOvkQDziXdl03ymVnX12k48lv30.roa
File: uOvkQDziXdl03ymVnX12k48lv30.roa (raw, json)
Hash identifier: uWfGX0PhnwLyUyMwAiEAkFFInh+eiuwv8GILWk97Ti0=
Subject key identifier: B8:EB:E4:40:3C:E2:5D:D9:74:DF:29:95:9D:7D:76:93:8F:25:BF:7D
Certificate issuer: /CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Certificate serial: 019C6534EBF48BB7C371AC40AE0FF8CF55BE
Authority key identifier: 15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/uOvkQDziXdl03ymVnX12k48lv30.roa
Signing time: Mon 16 Feb 2026 06:48:12 +0000
ROA not before: Mon 16 Feb 2026 06:48:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49051
IP address blocks: 91.247.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:34:eb:f4:8b:b7:c3:71:ac:40:ae:0f:f8:cf:55:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fd3804e00b9e06a82ced9f07b34fe3fd80394e
Validity
Not Before: Feb 16 06:48:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8ebe4403ce25dd974df29959d7d76938f25bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:50:40:8a:b0:3f:f3:28:5e:51:18:21:be:b3:
b9:b2:1e:c5:d1:54:42:4d:db:ad:69:0b:8f:06:14:
51:4e:3e:30:8a:b3:fa:f0:2b:b8:09:d2:f1:a8:cb:
04:bb:bc:a9:92:8f:75:8b:46:d3:79:f4:71:9f:5c:
09:e1:fc:a9:96:57:c1:44:43:24:0d:b1:8c:56:71:
8e:3f:04:7b:97:2e:fe:54:6f:0a:2a:7a:cb:83:59:
c3:d4:b8:cf:40:dc:7b:19:74:cf:3a:b9:4c:a8:6b:
74:c1:b8:55:79:55:8b:62:46:4d:ee:f3:b8:47:f6:
87:9a:96:59:fe:b0:fc:69:05:65:98:16:d2:71:86:
d0:f2:7a:0f:16:8a:0d:fc:69:5b:99:84:da:69:7a:
5a:c2:31:1c:77:53:ef:72:dc:4f:38:f5:eb:3c:e3:
3b:8e:e9:57:81:b6:45:c9:48:0f:07:75:a3:f9:e4:
d8:cb:12:5b:9c:d7:89:dd:3a:18:6e:7d:38:be:0c:
4e:0c:ff:41:53:80:45:77:9e:df:2f:e0:5a:a0:ac:
e4:b4:8c:28:6c:c6:a1:c8:31:c6:37:22:27:97:58:
9e:39:c2:bf:b7:0b:bb:10:6e:3d:ee:5a:74:c8:49:
47:c4:d9:f3:e6:84:0a:e5:62:ab:3e:2f:74:33:d2:
e8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EB:E4:40:3C:E2:5D:D9:74:DF:29:95:9D:7D:76:93:8F:25:BF:7D
X509v3 Authority Key Identifier:
keyid:15:FD:38:04:E0:0B:9E:06:A8:2C:ED:9F:07:B3:4F:E3:FD:80:39:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff04BOALngaoLO2fB7NP4_2AOU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/uOvkQDziXdl03ymVnX12k48lv30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/be3c40-1210-4272-a5ea-7835d3208396/1/Ff04BOALngaoLO2fB7NP4_2AOU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ec:a3:1f:f7:24:b9:5e:cf:43:67:37:de:18:3c:f9:4d:8a:
ed:86:17:ae:03:d3:b1:d8:fd:f0:e6:6d:35:ed:3b:49:01:ed:
3c:d9:c4:a6:d0:f7:86:ef:22:d2:b5:21:05:67:d9:99:ef:31:
1b:02:8f:c6:98:7b:93:70:3f:f3:0a:af:27:b7:17:b5:a8:ef:
80:1e:da:03:0c:6c:6a:27:e4:fa:0e:33:d6:90:0a:92:46:1a:
1c:fc:c6:81:85:26:e1:8f:c8:da:a0:fe:4d:10:ea:f7:2f:14:
ad:55:8f:80:1b:3e:42:f7:27:bc:c6:b4:7b:af:b4:49:c3:79:
b7:e1:3c:90:57:c8:41:ff:ad:ba:f2:cb:25:7d:ac:12:8e:8c:
aa:86:42:c9:8c:b0:c3:51:a3:b3:64:00:ca:08:b0:96:02:f8:
b7:fc:1e:bd:5e:e6:6c:48:0f:68:76:ce:44:3b:11:1c:cd:ab:
14:56:4d:2c:90:c2:d3:11:82:1f:85:5e:ae:b8:83:d7:18:d7:
82:78:9c:70:7b:35:43:41:26:51:b5:26:fd:c8:b2:88:ce:65:
51:51:07:e3:9a:1f:e0:13:df:09:ca:e5:42:54:34:6d:17:02:
75:cb:66:42:78:85:51:8d:ce:d4:74:ff:30:db:a0:9d:04:37:
0d:fd:28:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxlNOv0i7fDcaxArg/4z1W+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZmQzODA0ZTAwYjllMDZhODJjZWQ5ZjA3YjM0ZmUzZmQ4
MDM5NGUwHhcNMjYwMjE2MDY0ODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGViZTQ0MDNjZTI1ZGQ5NzRkZjI5OTU5ZDdkNzY5MzhmMjViZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFBAirA/8yheURghvrO5sh7F0VRC
TdutaQuPBhRRTj4wirP68Cu4CdLxqMsEu7ypko91i0bTefRxn1wJ4fypllfBREMk
DbGMVnGOPwR7ly7+VG8KKnrLg1nD1LjPQNx7GXTPOrlMqGt0wbhVeVWLYkZN7vO4
R/aHmpZZ/rD8aQVlmBbScYbQ8noPFooN/GlbmYTaaXpawjEcd1PvctxPOPXrPOM7
julXgbZFyUgPB3Wj+eTYyxJbnNeJ3ToYbn04vgxODP9BU4BFd57fL+BaoKzktIwo
bMahyDHGNyInl1ieOcK/twu7EG497lp0yElHxNnz5oQK5WKrPi90M9LoZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjr5EA84l3ZdN8plZ19dpOPJb99MB8GA1UdIwQY
MBaAFBX9OATgC54GqCztnwezT+P9gDlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEt
NzgzNWQzMjA4Mzk2LzEvdU92a1FEemlYZGwwM3ltVm5YMTJrNDhsdjMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9iZTNjNDAtMTIxMC00MjcyLWE1ZWEtNzgzNWQzMjA4Mzk2
LzEvRmYwNEJPQUxuZ2FvTE8yZkI3TlA0XzJBT1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/euMA0G
CSqGSIb3DQEBCwUAA4IBAQBu7KMf9yS5Xs9DZzfeGDz5TYrthheuA9Ox2P3w5m01
7TtJAe082cSm0PeG7yLStSEFZ9mZ7zEbAo/GmHuTcD/zCq8ntxe1qO+AHtoDDGxq
J+T6DjPWkAqSRhoc/MaBhSbhj8jaoP5NEOr3LxStVY+AGz5C9ye8xrR7r7RJw3m3
4TyQV8hB/6268sslfawSjoyqhkLJjLDDUaOzZADKCLCWAvi3/B69XuZsSA9ods5E
OxEczasUVk0skMLTEYIfhV6uuIPXGNeCeJxwezVDQSZRtSb9yLKIzmVRUQfjmh/g
E98JyuVCVDRtFwJ1y2ZCeIVRjc7UdP8w26CdBDcN/Sj6
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:20:32 2026 by rpki-client