Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Uclczo4m3YFGZzaBjS7wUFsNjj4.roa
File: Uclczo4m3YFGZzaBjS7wUFsNjj4.roa (raw, json)
Hash identifier: RzME+AM4xoxLjN4Iilm7nRafVtW/4U1QaD/Olg4yRQM=
Subject key identifier: 51:C9:5C:CE:8E:26:DD:81:46:67:36:81:8D:2E:F0:50:5B:0D:8E:3E
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 01A0C88139E1B5DFEDCD99B2F48237BC0AE4
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Uclczo4m3YFGZzaBjS7wUFsNjj4.roa
Signing time: Tue 22 Sep 2026 09:45:07 +0000
ROA not before: Tue 22 Sep 2026 09:45:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62610
IP address blocks: 2a11:c40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:81:39:e1:b5:df:ed:cd:99:b2:f4:82:37:bc:0a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Sep 22 09:45:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51c95cce8e26dd81466736818d2ef0505b0d8e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:15:5d:94:e3:03:76:8a:f9:e8:63:c0:88:
13:25:70:22:5d:cf:79:aa:c6:2d:3c:d8:f8:2d:87:
ee:4f:cf:c8:3f:77:87:5e:f9:06:29:10:85:fd:5d:
c3:9d:7e:9f:7c:fe:9c:77:66:e0:a8:8c:54:2d:44:
5a:9f:37:30:f3:0f:c3:89:6b:d9:39:76:c3:58:c5:
9c:60:30:36:59:5c:d2:fd:14:9b:79:f5:66:e3:d5:
43:76:8e:49:9e:27:04:8e:1c:34:9a:50:4b:c0:b6:
51:87:37:f6:af:63:e7:28:93:83:c0:e9:37:f6:63:
f4:07:dc:46:b0:f5:09:b9:f3:90:d1:a5:5b:47:00:
ef:84:90:d3:32:78:68:d8:bf:47:da:57:e7:ef:7c:
c9:a6:28:5b:ac:13:0b:f8:94:51:8d:49:9a:90:77:
c8:86:83:76:e8:c1:04:63:08:7a:13:1e:03:e4:82:
a3:21:08:18:70:3e:61:f1:0e:0f:fe:9c:dc:5b:bd:
48:6e:2c:8b:3d:57:1f:ea:95:42:e8:c2:aa:e0:7d:
aa:a4:3c:ae:11:e8:30:6c:67:8c:20:1a:4c:3a:fc:
0f:ea:d9:e5:89:54:f7:db:ad:59:7d:d8:7d:fe:1b:
00:31:ce:df:f3:c2:45:9b:fe:97:eb:87:44:3b:35:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C9:5C:CE:8E:26:DD:81:46:67:36:81:8D:2E:F0:50:5B:0D:8E:3E
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/Uclczo4m3YFGZzaBjS7wUFsNjj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c40::/29
Signature Algorithm: sha256WithRSAEncryption
2b:8d:95:c3:0c:aa:f1:8c:37:83:d9:7e:26:99:ac:f0:67:a2:
26:d4:c0:80:4e:46:f6:34:06:08:9f:3b:d2:cf:45:9d:bf:6f:
03:b4:e6:e6:14:f2:01:de:a9:86:3d:a5:67:70:a6:c6:0e:ec:
7b:61:ce:df:03:a8:14:ed:86:71:4f:4a:7d:b3:88:8e:13:12:
4c:2d:80:f1:2f:61:dd:f5:e2:1b:b1:30:02:31:a8:86:96:55:
da:fc:ed:88:ab:9e:e3:22:75:b0:5b:82:c2:75:bd:b4:2a:92:
dd:7b:0d:6f:90:c9:8a:a2:b1:56:2d:b6:85:47:0e:3b:48:bd:
f6:9b:be:da:78:83:70:8c:10:9c:c0:d1:d6:bd:d1:9f:3f:1d:
06:06:fd:98:b5:97:a2:6f:8c:67:cc:6a:cf:97:db:4e:38:6e:
a7:8a:ea:c9:54:7d:0c:e4:29:b3:d6:2a:22:17:38:92:69:7b:
77:aa:d7:c3:f1:0c:70:81:2c:4a:61:17:80:21:0b:79:eb:cc:
b7:14:9f:b0:35:a0:e5:58:31:50:c5:4e:cb:af:04:4e:4d:2e:
1d:21:29:ed:9b:18:3e:35:03:78:1c:75:93:41:35:53:4c:1c:
0e:fa:58:26:79:2c:25:7e:c0:52:50:b4:80:f5:c3:05:6e:2b:
eb:61:c0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:22:15 2026 by rpki-client