Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa
File: uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa (raw, json)
Hash identifier: R9P1gLfYpBnWPKUfugfKeag1ecJmDwTXW1CEll0445Y=
Subject key identifier: B9:52:D6:2D:56:7F:91:CC:45:5A:6F:19:CE:05:7C:0E:80:54:75:C6
Certificate issuer: /CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Certificate serial: 019F2368C12AD9402771C74FAC1A91D37916
Authority key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 193.105.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c1:2a:d9:40:27:71:c7:4f:ac:1a:91:d3:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b952d62d567f91cc455a6f19ce057c0e805475c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:aa:1c:13:43:5d:84:0b:9d:6a:c4:66:b9:
ae:b4:6c:f7:c6:20:30:51:b9:a0:b0:62:90:4f:02:
b7:21:36:5e:16:d8:18:8d:2f:06:e0:96:1c:d8:70:
9a:3b:91:ea:0b:5f:36:c2:4b:e0:4f:13:a1:3e:c6:
45:73:8b:41:df:f9:73:bd:88:5f:76:d2:01:d2:0e:
88:95:04:50:44:1f:2d:6d:47:85:6d:5e:c8:10:97:
c3:57:de:df:de:c4:74:b3:ef:56:5f:ae:ce:67:4b:
d2:3a:df:f8:76:81:92:87:b5:77:de:fa:27:7c:bd:
68:de:f7:d9:93:df:b3:e5:d4:7e:26:75:1c:63:f2:
b2:73:c8:bb:05:d6:a0:0f:4e:76:fd:b1:0f:7e:62:
bc:fd:9d:65:76:ea:06:0d:a7:a6:5b:4b:17:f1:b4:
52:01:0e:68:9d:9b:63:44:b4:a9:f4:b0:e5:d6:8a:
67:b7:69:29:33:c1:0e:8b:59:d9:a1:11:01:cf:bb:
f8:66:50:03:62:9d:70:9f:8f:5f:38:07:78:36:30:
2b:56:7f:e4:39:19:c2:6c:55:05:80:53:4e:53:d7:
90:92:50:66:20:19:0c:e7:bc:be:0d:21:c8:f7:3d:
03:03:21:2c:c1:10:1d:b5:f0:eb:fe:b1:b3:d4:10:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:52:D6:2D:56:7F:91:CC:45:5A:6F:19:CE:05:7C:0E:80:54:75:C6
X509v3 Authority Key Identifier:
keyid:28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:be:e2:ad:57:f8:08:5b:27:03:8d:2b:41:7f:02:6d:82:b2:
ea:aa:6c:10:5e:4e:62:bb:c8:9e:c5:50:1a:7a:ba:35:0d:92:
e4:4d:31:3b:ce:55:3a:24:18:15:4a:15:ce:84:72:b0:34:e4:
42:a3:0a:36:cd:31:df:55:13:cc:16:08:18:43:88:b2:5a:d7:
a4:84:4a:ce:16:5c:bf:f9:27:e4:6b:a2:bb:21:25:4c:12:48:
5b:03:c0:1d:cc:01:96:e4:34:0f:4f:ff:cb:5e:ac:bc:51:42:
cf:11:ff:69:be:30:a4:8a:2d:c2:9f:f9:34:0f:12:2b:dc:63:
9b:6e:80:59:e6:c1:e2:de:82:ad:f2:6e:69:dc:5f:7e:45:ec:
d9:96:a6:4d:5b:12:4b:57:8a:f4:17:93:0c:3c:e9:ca:33:08:
b2:3d:7a:fe:e8:73:b4:bd:18:41:06:ea:f6:1a:68:87:fc:1b:
e1:ed:fb:37:36:44:56:c7:92:89:a1:6b:f9:e0:ed:52:dd:c9:
08:ab:c5:5c:e7:a3:7b:1f:cf:8b:d6:04:63:94:8f:a5:53:46:
44:f4:58:1f:2e:55:92:ed:c1:6d:c2:74:72:a6:1f:81:86:ca:
84:f8:23:8a:2e:bd:cd:c5:c9:ed:97:2a:6a:18:3f:f7:52:68:
ba:23:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:01:51 2026 by rpki-client