Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ipuMNUIFJfwrG69f0t1BcA9T-lo.roa
File: ipuMNUIFJfwrG69f0t1BcA9T-lo.roa (raw, json)
Hash identifier: E/49CgkatlS4HbWzI9f4jj29KOBht+FWKi5pYDsrCiU=
Subject key identifier: 8A:9B:8C:35:42:05:25:FC:2B:1B:AF:5F:D2:DD:41:70:0F:53:FA:5A
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 019CF670BDE4C0DDCB2D01D67F8664EB31E5
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ipuMNUIFJfwrG69f0t1BcA9T-lo.roa
Signing time: Mon 16 Mar 2026 11:38:29 +0000
ROA not before: Mon 16 Mar 2026 11:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50867
IP address blocks: 193.187.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f6:70:bd:e4:c0:dd:cb:2d:01:d6:7f:86:64:eb:31:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Mar 16 11:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a9b8c35420525fc2b1baf5fd2dd41700f53fa5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:80:fc:0f:0d:77:e3:50:1a:b3:8f:eb:b3:
52:ff:f0:5d:88:c8:95:ad:38:ea:72:d1:6c:9f:62:
1e:97:2a:b7:9f:a3:4e:53:a7:3b:fb:14:2b:a8:2c:
5d:34:96:59:0c:cf:07:9c:2a:79:8c:62:9c:c7:75:
4c:72:ff:46:df:40:f9:28:d7:9d:01:10:e4:61:da:
ce:3d:28:ae:43:11:72:13:04:29:03:30:04:49:db:
1d:5e:2c:fc:e7:64:07:0e:81:d7:72:36:95:28:a4:
30:ca:72:66:9a:01:01:92:9d:7f:30:02:8f:c6:6f:
7f:9e:46:26:98:75:3b:81:07:aa:f0:47:f0:f2:dc:
6d:2b:44:89:b1:09:1f:ee:9e:26:72:27:9f:e6:1a:
77:b2:dc:3e:2b:d6:9a:e9:3f:7a:8e:02:67:6e:ba:
5c:78:cd:90:fd:ff:7f:f7:9b:11:28:b5:fc:ee:b4:
2f:d8:48:e1:ce:1a:d0:8d:4b:cd:db:ed:7b:10:45:
3a:4a:38:83:0d:8c:ba:c6:bf:b3:b0:6a:e6:c1:77:
9b:35:ab:2c:23:ad:b0:db:84:14:3c:b2:af:12:6f:
be:0c:ee:4e:21:ad:cc:ef:df:e1:b3:f8:9e:80:de:
29:14:da:46:b0:4e:92:2b:db:84:62:b5:44:9c:c5:
d7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9B:8C:35:42:05:25:FC:2B:1B:AF:5F:D2:DD:41:70:0F:53:FA:5A
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/ipuMNUIFJfwrG69f0t1BcA9T-lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:28:f9:67:58:51:e8:73:99:ee:07:83:87:e2:83:1f:0b:99:
99:7f:f8:ff:83:10:09:42:d6:68:36:65:14:e9:6a:73:67:8d:
47:36:16:7f:4f:d4:f4:5b:b6:28:4f:9c:7d:b9:06:68:70:9d:
f8:ba:c6:cb:25:d6:b1:72:a6:b0:34:b4:fa:99:9b:90:cc:ee:
62:23:ec:7f:2d:6f:e0:3a:1f:09:3e:32:bc:bb:a7:88:ac:65:
21:0f:39:4f:52:a9:d4:c0:66:e9:f2:7c:1a:1b:cd:d1:e1:df:
fb:72:7a:74:e6:d7:60:a0:a3:a4:4e:67:86:82:84:51:fb:f7:
ea:57:f1:3b:36:ed:25:da:ec:26:cc:d3:6a:89:1e:b3:df:cf:
18:5d:18:3a:e2:4b:5c:28:98:b9:8c:f6:2f:1d:e3:c3:65:6e:
a7:2d:19:23:4e:38:70:e2:17:e9:29:e7:1f:0b:ff:9f:4a:0b:
35:2e:d1:a7:9d:bb:68:15:fc:02:ef:e4:be:3b:5c:27:f6:96:
a1:0e:13:06:70:6e:39:5e:f3:82:5d:41:87:89:67:e9:25:19:
47:56:e2:3d:84:20:97:ad:a7:cc:5d:5d:66:c4:93:26:87:fe:
0a:88:7e:2f:ea:5b:a3:8e:20:f6:06:bd:4b:f7:37:05:71:20:
db:ab:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:57 2026 by rpki-client