Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/UCnDSTgchyE1qeXLpPxJeB9D6a8.roa
File: UCnDSTgchyE1qeXLpPxJeB9D6a8.roa (raw, json)
Hash identifier: 9gREJPHHNeNj4a7K+bK2FHfoOR8Wo3wM4kVwG6ZeXw0=
Subject key identifier: 50:29:C3:49:38:1C:87:21:35:A9:E5:CB:A4:FC:49:78:1F:43:E9:AF
Certificate issuer: /CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Certificate serial: 01A04ACD6F2C61A247BEAF821D75F95B9846
Authority key identifier: A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/UCnDSTgchyE1qeXLpPxJeB9D6a8.roa
Signing time: Fri 28 Aug 2026 23:56:12 +0000
ROA not before: Fri 28 Aug 2026 23:56:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215666
IP address blocks: 2001:678:130c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:cd:6f:2c:61:a2:47:be:af:82:1d:75:f9:5b:98:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7b159c4d3d51f5a00329621a46460ed8ee1e376
Validity
Not Before: Aug 28 23:56:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5029c349381c872135a9e5cba4fc49781f43e9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:a7:1a:f1:5e:a7:3a:14:63:fe:e5:b5:e8:
bb:6f:80:a2:8c:ae:5a:3b:0c:9a:71:46:63:5b:2a:
0e:c7:30:ab:d5:f8:55:d0:f6:64:ea:04:13:43:bd:
10:3a:b3:63:42:f5:d4:fe:75:c5:b5:ff:49:b3:ac:
fa:96:bf:ba:07:9a:bf:f3:aa:a9:0d:60:8a:f1:ad:
6d:98:76:dd:a3:b4:19:fa:87:42:21:f2:84:2e:2f:
ae:4a:83:f8:84:56:91:2c:a0:c8:2a:49:c5:10:b6:
8b:0a:32:d8:81:1a:4a:14:a8:4d:f9:b4:e4:ad:16:
ec:20:d7:24:23:f7:33:69:33:ca:03:7e:1d:ba:3a:
5e:6d:f4:76:4b:f0:22:ac:56:bc:f2:a5:f8:8d:93:
33:1c:27:df:a1:41:0f:20:5d:2d:0f:34:6e:98:50:
02:9d:66:be:2b:0e:f5:81:70:d1:c0:66:9e:a7:85:
74:29:86:ee:8e:46:42:ce:bb:5e:df:a3:99:c4:e2:
70:80:10:84:c4:80:29:b4:e2:e2:e7:32:04:8c:4a:
7a:67:db:62:3e:03:2f:0b:85:4e:a1:77:ec:61:ef:
00:ba:e4:48:7b:d0:70:b6:43:10:aa:c5:7f:77:4b:
3b:35:99:de:47:54:f5:c0:77:09:ca:4f:61:f9:03:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:29:C3:49:38:1C:87:21:35:A9:E5:CB:A4:FC:49:78:1F:43:E9:AF
X509v3 Authority Key Identifier:
keyid:A7:B1:59:C4:D3:D5:1F:5A:00:32:96:21:A4:64:60:ED:8E:E1:E3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/UCnDSTgchyE1qeXLpPxJeB9D6a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e3e6e6-5791-4990-ba58-c95c6a00586a/1/p7FZxNPVH1oAMpYhpGRg7Y7h43Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:130c::/48
Signature Algorithm: sha256WithRSAEncryption
a1:42:cb:98:a3:a9:73:89:18:52:5e:68:cf:50:d0:ec:1e:e2:
8d:98:c9:65:79:1b:65:1c:6d:5f:2d:ea:35:04:dd:59:55:fe:
4f:19:a2:86:3d:6a:be:9c:74:6e:45:a5:6b:fb:6a:b3:aa:f8:
8c:76:6d:81:93:f7:a1:92:8e:81:36:5d:26:8c:a9:11:fb:99:
44:5d:37:d9:24:4d:ed:2c:c6:cc:70:0a:3a:73:78:73:3f:48:
44:de:6f:7d:e3:83:eb:24:0b:90:93:16:c4:90:8e:64:45:f4:
36:27:14:cd:76:43:e5:8a:ce:26:8c:6e:f3:70:5f:0e:6b:c7:
d8:a6:dd:f7:cb:f6:99:d5:a8:ae:97:f9:97:83:31:1d:bd:f4:
2c:1e:d3:04:33:bb:55:de:ca:08:8f:a8:83:6c:08:cd:35:de:
15:24:7d:e4:5b:5c:f6:f9:e5:7f:b3:55:ab:dd:8c:22:66:a9:
84:fa:f8:7e:42:d1:28:05:49:74:f2:b2:08:d6:15:7f:1f:f4:
9c:ad:bb:65:d1:9d:a9:80:fc:31:e4:0b:43:33:e4:76:fc:68:
76:cc:b1:f3:23:20:84:46:0e:97:bb:f7:74:7f:4d:b9:76:96:
54:84:5c:c6:4e:10:8c:50:a3:00:fb:7f:85:76:81:70:98:eb:
b1:ad:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:38 2026 by rpki-client