Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/_uELF3uAGWWWU-RJRHYGaIoW8U4.roa
File: _uELF3uAGWWWU-RJRHYGaIoW8U4.roa (raw, json)
Hash identifier: U5mRlj1KFH4M3tby5YOjE/zPfPpRLKSqjkUhZ3s2pw8=
Subject key identifier: FE:E1:0B:17:7B:80:19:65:96:53:E4:49:44:76:06:68:8A:16:F1:4E
Certificate issuer: /CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Certificate serial: 019F236862CDB5EF38AD77C6EFF530690DE1
Authority key identifier: 67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/_uELF3uAGWWWU-RJRHYGaIoW8U4.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 138.248.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:62:cd:b5:ef:38:ad:77:c6:ef:f5:30:69:0d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=675b511bea7f18070b1a77261c1acd4a03c61b77
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fee10b177b8019659653e449447606688a16f14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:03:13:12:2d:fe:cb:3e:3c:f7:81:3b:de:31:
37:65:b0:43:4d:2c:e8:0c:91:db:d5:4f:e7:59:80:
f0:74:b0:3a:18:bb:9f:93:fd:6b:3e:d0:31:41:df:
42:55:1d:dc:11:ff:6b:5c:7e:51:eb:5b:8a:72:c4:
01:9b:4e:1a:50:0a:52:63:c7:b0:2f:1e:2c:84:d5:
d7:d1:f8:dc:79:97:5d:01:4f:6e:0e:c8:61:04:72:
fd:39:10:fe:d1:90:48:18:ea:c1:d4:af:38:67:29:
84:2b:7f:c8:36:62:8c:c9:f4:49:c7:25:8b:65:14:
6e:bd:16:fa:f4:41:a6:fb:77:13:53:10:a3:7a:de:
71:47:a5:4b:ff:ac:b2:88:8e:7e:be:3f:e5:14:ba:
82:8b:30:30:c3:a4:c0:bd:23:3f:2b:ca:4e:ad:45:
57:97:95:d5:e7:98:8d:84:16:2e:db:a2:0f:66:94:
22:3c:a7:df:b9:33:13:fe:5c:f2:94:7f:e3:d1:a2:
72:60:c7:6e:c5:b0:bf:c9:12:93:5c:32:5d:5d:c5:
60:43:c1:2e:45:7a:9b:95:9b:34:5e:5b:b9:b9:15:
83:1b:dc:c2:c4:9e:b9:98:b2:11:c3:04:c2:c8:ef:
10:f6:03:b5:69:79:cf:4b:c7:dc:18:86:a3:92:3d:
70:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:0B:17:7B:80:19:65:96:53:E4:49:44:76:06:68:8A:16:F1:4E
X509v3 Authority Key Identifier:
keyid:67:5B:51:1B:EA:7F:18:07:0B:1A:77:26:1C:1A:CD:4A:03:C6:1B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z1tRG-p_GAcLGncmHBrNSgPGG3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/_uELF3uAGWWWU-RJRHYGaIoW8U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/887e94-eb97-4109-9da8-cbf18d2d66c3/1/Z1tRG-p_GAcLGncmHBrNSgPGG3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.248.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:89:cd:20:c2:0d:01:fb:f2:96:38:88:8c:ed:72:ab:74:ee:
4e:f2:80:af:b9:ec:90:c2:74:cb:8a:11:06:d9:5b:48:67:80:
34:c4:f7:d7:da:ef:59:31:53:90:d2:ad:3b:ab:91:ef:93:62:
12:9b:51:61:a8:03:43:b5:4b:ed:2c:7d:8d:8d:42:2a:67:07:
08:64:66:2d:42:bd:9c:b1:04:b7:86:69:a1:b6:bd:77:9d:18:
d0:ec:3f:07:49:39:b0:a8:4a:6e:fe:d6:71:ae:15:29:80:e4:
cf:20:4a:5c:b6:52:fc:a3:2c:8d:e0:35:8e:11:18:7e:2e:7f:
51:f4:8b:bf:b3:f1:cd:9d:71:39:29:c6:9e:a9:71:77:db:bb:
4b:bc:b6:42:18:0c:d7:8a:bb:3e:c2:1b:12:c0:26:47:eb:b4:
b7:52:d6:86:f2:17:bf:6a:91:00:21:80:7c:cb:76:a3:59:bf:
12:59:85:3d:b1:9a:c3:c6:d6:fe:0a:ee:bc:96:b1:ad:12:86:
f0:40:b5:86:22:c6:7c:a4:45:eb:3a:11:ac:65:c3:43:ba:b4:
a2:c8:12:93:27:8b:62:97:ff:42:cc:24:11:12:47:26:7c:a6:
c3:d0:9e:4c:eb:09:39:aa:43:aa:a2:70:c7:6e:9c:9b:3d:6e:
db:00:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:51:51 2026 by rpki-client