Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uiuUSEFnCEhOziScraGLdTdzZmI.roa
File: uiuUSEFnCEhOziScraGLdTdzZmI.roa (raw, json)
Hash identifier: CvBwS1aJzgP5CzD8l7T+hfOwA4oNiyg3CjUPSimNDjc=
Subject key identifier: BA:2B:94:48:41:67:08:48:4E:CE:24:9C:AD:A1:8B:75:37:73:66:62
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A0EC178474430A949BACBBCEAD0248FF95
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uiuUSEFnCEhOziScraGLdTdzZmI.roa
Signing time: Tue 29 Sep 2026 07:35:59 +0000
ROA not before: Tue 29 Sep 2026 07:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219047
IP address blocks: 212.189.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:17:84:74:43:0a:94:9b:ac:bb:ce:ad:02:48:ff:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Sep 29 07:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba2b9448416708484ece249cada18b7537736662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:e2:d6:93:8e:50:aa:3c:d9:03:4a:d0:80:
32:87:6c:0e:7c:54:90:31:23:0f:a8:65:9f:88:fc:
c3:31:2a:81:fd:a1:4e:e0:0c:31:e3:d4:4d:79:66:
b9:bc:c2:58:46:a6:35:fd:3e:e7:e3:eb:16:44:54:
10:71:88:5a:23:22:ee:f1:52:dd:00:62:29:2b:a0:
88:6c:b8:2e:8a:b8:cc:3d:9f:51:1a:3e:77:89:71:
4a:50:76:47:ec:21:12:83:61:aa:73:c9:72:f1:df:
19:df:74:0b:dd:ac:f1:c5:89:6d:40:75:7f:7a:9e:
0b:11:38:a0:d4:92:67:5b:ae:b7:1f:89:7e:f0:cb:
70:5f:09:f1:82:9f:ea:71:c5:8e:61:94:26:5c:df:
40:1e:1a:94:9d:c4:6d:49:f1:46:16:8e:a5:5f:01:
a7:51:10:05:b1:e1:a6:14:af:53:65:75:87:45:d6:
71:bc:4b:2a:03:59:08:c8:a4:fc:88:7a:ba:5f:b9:
3d:14:98:60:6a:44:b2:1e:e4:ae:c0:92:f9:f5:c1:
d8:23:8f:9f:c0:dd:bd:4c:0c:10:9b:e7:4e:85:7a:
7a:d0:f2:aa:f1:cf:6a:56:77:34:81:29:f7:72:fd:
83:61:08:c1:0b:3e:c3:70:51:88:2f:5e:2e:ab:63:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2B:94:48:41:67:08:48:4E:CE:24:9C:AD:A1:8B:75:37:73:66:62
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/uiuUSEFnCEhOziScraGLdTdzZmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.23.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3e:b5:cb:bc:34:c6:e5:cd:4c:2d:51:40:61:f0:9a:cc:c0:
a7:29:27:2f:7e:d6:60:66:0c:77:2f:62:4d:93:ba:8d:a2:fa:
ac:5b:a2:d5:39:43:9d:f3:fd:0a:53:b0:40:26:7f:e4:fd:ae:
0d:f7:c2:1d:88:95:e0:11:d1:5b:05:0f:ce:8b:ba:ab:c3:20:
21:f9:ad:0b:5f:d1:e3:ee:26:80:46:8f:4b:8a:98:3e:e4:d3:
2f:56:7a:df:5c:86:8b:b9:7a:7c:a8:3d:25:85:47:cd:ab:de:
80:13:68:42:50:01:d7:cd:11:66:8b:16:44:8d:fb:3e:2b:4f:
26:8e:cb:a1:aa:a4:05:d4:2a:62:80:fd:98:98:9b:bb:0b:78:
1e:05:09:c1:f0:e1:bd:38:f1:4d:bc:3b:ec:aa:db:d2:d1:79:
7b:4e:b9:c7:7b:dc:bb:39:70:82:ae:7f:40:38:70:10:33:17:
36:09:7d:b5:6c:d1:af:d3:fd:3d:9b:8e:96:25:47:51:89:21:
e9:57:73:1a:49:50:e1:a1:9e:3a:7e:87:01:17:c3:d8:a8:94:
1a:29:0e:61:27:ba:d7:b0:ce:6e:e5:23:f6:50:f2:65:77:8c:
8b:7c:fb:5a:21:15:af:ac:db:1a:fd:f9:ff:6b:0e:66:1c:0d:
ff:25:de:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:10 2026 by rpki-client