Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uQpELCnUjH10cgiEk-4GkGFTZgk.roa
File: uQpELCnUjH10cgiEk-4GkGFTZgk.roa (raw, json)
Hash identifier: xoIZEJUb6NmqWRGtAVMxqf47BIu3kOG4T6rCdP06FSo=
Subject key identifier: B9:0A:44:2C:29:D4:8C:7D:74:72:08:84:93:EE:06:90:61:53:66:09
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 01A1895CE9D656D953AEAB4DBFBE2D58ADBB
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uQpELCnUjH10cgiEk-4GkGFTZgk.roa
Signing time: Thu 29 Oct 2026 20:32:09 +0000
ROA not before: Thu 29 Oct 2026 20:32:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205290
IP address blocks: 77.83.20.0/24 maxlen: 24
176.113.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:5c:e9:d6:56:d9:53:ae:ab:4d:bf:be:2d:58:ad:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Oct 29 20:32:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b90a442c29d48c7d7472088493ee069061536609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:48:2a:0e:28:4d:f2:0c:df:0b:dd:2d:85:
6f:19:e4:4a:62:d8:e3:e8:60:d1:9a:5b:0e:89:bf:
22:c2:e1:f9:2d:3c:e0:ba:ce:f6:43:5f:a4:fd:33:
ff:29:28:45:81:41:8b:06:7f:6d:71:2f:3c:01:70:
35:92:ee:67:25:aa:25:3b:c8:02:ba:ee:64:9d:02:
77:7d:a6:02:2b:48:b5:da:9b:a9:76:65:ba:ce:e0:
36:a4:ab:c2:0c:3d:6e:6b:d5:f1:c1:6a:fa:1e:2e:
8b:1b:49:a8:02:62:d9:e1:60:32:38:40:7d:a4:a7:
46:1e:88:22:c2:ae:b1:d5:63:3a:b9:2f:db:53:82:
42:09:a7:18:c2:75:fc:2f:bd:40:a8:b7:96:ff:80:
31:f6:3a:ce:78:14:47:0f:d8:14:d4:cd:74:92:b8:
9a:80:d2:92:51:7d:4d:51:34:a9:a2:f7:43:0d:6d:
46:78:a9:82:d9:95:a1:e4:d4:fb:0d:d1:00:cd:3f:
64:c9:8b:f1:31:f3:91:02:77:25:e3:71:e2:e2:9c:
73:a6:0a:d4:e6:e9:1a:fa:bc:d7:be:64:64:77:24:
b2:13:22:0e:d0:8a:63:ca:0e:e3:c4:f9:ca:09:f9:
0b:20:5e:17:96:29:aa:84:3e:22:a7:5a:24:48:e3:
a9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:44:2C:29:D4:8C:7D:74:72:08:84:93:EE:06:90:61:53:66:09
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/uQpELCnUjH10cgiEk-4GkGFTZgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.20.0/24
176.113.43.0/24
Signature Algorithm: sha256WithRSAEncryption
08:26:59:81:2f:2c:93:a9:b3:ff:cc:1b:a2:dc:6c:4d:44:0d:
75:5c:a2:1e:b1:a5:1c:54:98:c8:af:c9:dc:77:d1:db:a6:0c:
79:a0:60:6d:0a:46:d1:e9:71:72:cd:b7:69:9c:d6:e6:20:ac:
5e:ad:52:22:84:14:86:19:90:74:c0:b8:7f:57:38:8f:63:cf:
3f:bb:90:6a:06:41:f7:71:f5:9e:87:f6:9a:8b:8b:d7:d7:d5:
9c:b9:78:b7:cd:b4:7e:e4:b6:c0:58:c7:58:c1:17:99:6b:cd:
1d:8d:5c:42:09:16:b5:ba:c0:c6:8b:b7:b7:eb:fc:99:1e:40:
ca:bd:df:0f:fa:a1:0c:3b:d4:fd:de:59:51:13:98:5f:84:7d:
a6:ac:79:45:05:42:1b:0d:14:17:4e:58:83:5b:15:a8:02:53:
6c:b4:31:cf:fd:62:bf:cf:de:b7:48:5e:ef:32:db:fd:7a:3f:
06:a4:be:30:79:61:a9:1e:b0:1b:ac:bd:a3:3e:d8:ca:36:61:
28:e7:40:4e:0b:34:69:de:23:ae:94:8c:c9:a5:c2:eb:df:98:
13:17:b7:fa:97:42:5c:04:8d:c3:43:94:fe:84:a6:49:2e:1e:
0d:85:b5:0e:cc:08:83:c7:35:c6:b3:fd:8b:ec:66:11:0a:02:
b1:40:e4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:47 2026 by rpki-client