Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/Um6n_idKHhLBJBBzUCl6l1HPrEI.roa
File: Um6n_idKHhLBJBBzUCl6l1HPrEI.roa (raw, json)
Hash identifier: SxF4T3uK56mVfgUvnXBquT7aoBlNGiQk5l7rUMHBbSk=
Subject key identifier: 52:6E:A7:FE:27:4A:1E:12:C1:24:10:73:50:29:7A:97:51:CF:AC:42
Certificate issuer: /CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Certificate serial: 019F2368DB61127DAC3972A817FFA2D899E8
Authority key identifier: 0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/Um6n_idKHhLBJBBzUCl6l1HPrEI.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 143.167.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:db:61:12:7d:ac:39:72:a8:17:ff:a2:d8:99:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f97e2ed1e927dbfd8de0d5e94a77d54c2dd0042
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=526ea7fe274a1e12c124107350297a9751cfac42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:8b:42:22:f2:4a:0e:25:94:64:59:f9:ea:
98:be:d6:a4:f0:eb:c3:42:4c:fe:08:ac:14:1b:06:
94:9c:60:44:69:f6:ae:ca:de:c1:5d:d0:f9:d6:35:
92:4a:f1:8e:27:ca:09:bb:b3:2b:7e:33:26:3f:48:
b2:d9:19:3f:2f:1a:33:8b:df:e9:4c:99:e6:27:c4:
4a:7d:6a:98:1f:7f:64:19:d6:77:de:24:06:ea:53:
24:90:63:98:30:db:d6:16:6d:b5:e5:47:7f:6b:68:
26:53:a4:3c:a5:8a:73:c9:1f:7e:d7:b7:79:cc:37:
8b:c2:9c:70:09:25:e9:90:96:bd:74:b0:5c:35:a9:
aa:83:60:80:ee:d6:3a:ab:46:6a:82:0d:c4:e1:88:
75:1f:ed:31:bb:8a:3c:01:b8:75:d2:f2:1d:e7:73:
72:a4:43:62:ac:a6:ca:da:7b:cc:c4:04:48:5a:4a:
c1:f4:25:cd:5c:10:04:fb:77:0f:d0:70:ac:17:ec:
ba:40:a3:8b:9e:7c:1e:bb:24:f7:16:d3:9f:33:1a:
68:69:43:8c:a4:d9:af:cc:0f:1f:88:b6:65:b8:31:
f5:0a:cf:50:3f:d3:c6:53:05:4e:3d:b7:2b:dc:ef:
1e:11:bf:6d:c4:6b:4e:67:cc:66:ae:c8:c1:16:5a:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6E:A7:FE:27:4A:1E:12:C1:24:10:73:50:29:7A:97:51:CF:AC:42
X509v3 Authority Key Identifier:
keyid:0F:97:E2:ED:1E:92:7D:BF:D8:DE:0D:5E:94:A7:7D:54:C2:DD:00:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/Um6n_idKHhLBJBBzUCl6l1HPrEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/090c7b-293e-49db-afb5-2905d21e3671/1/D5fi7R6Sfb_Y3g1elKd9VMLdAEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.167.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a2:69:8f:6d:8c:33:42:de:a2:01:6b:18:85:92:40:7e:a2:3c:
01:48:96:6e:69:f1:4e:eb:77:f8:77:5d:b8:88:fe:52:84:ac:
c4:d7:5d:78:fd:35:65:28:73:a5:f4:60:14:25:d7:78:fb:f4:
aa:11:ae:b4:49:e5:77:3d:1f:e2:d5:14:9c:72:62:7e:57:77:
b9:00:5f:c9:79:67:61:9f:c2:12:b1:7f:e7:08:44:f6:72:34:
a8:02:4e:a1:67:af:22:fc:f5:55:6c:9d:16:66:f9:96:03:93:
f4:cb:c1:b1:ea:20:2e:99:cd:9c:ca:4d:50:8c:ec:1c:cf:49:
15:6b:85:47:36:50:ba:d2:0a:8e:18:63:5c:8c:f8:58:d3:10:
41:99:66:54:9f:62:b6:d3:ae:c8:47:7f:9f:88:c4:f8:5b:30:
85:b8:ff:88:6f:00:6e:13:49:f2:e8:05:b8:eb:79:7d:a5:3c:
78:2c:0e:9c:b9:71:e4:58:75:e0:8e:5b:a4:f3:a3:ba:f7:12:
4f:55:47:72:49:36:3c:38:12:6d:f0:d7:7c:d6:7a:39:b4:a0:
2b:fc:13:aa:77:e3:11:d7:89:4c:e1:d4:ac:ea:79:af:f3:a4:
f4:e8:2f:3a:26:95:2b:a0:d5:1f:37:16:e5:bf:11:83:55:ee:
b6:1e:40:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:28 2026 by rpki-client