Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/nUgTJPU9nrCII2FLyU_H2qK_pP8.roa
File: nUgTJPU9nrCII2FLyU_H2qK_pP8.roa (raw, json)
Hash identifier: rmb104kxYDootOUIROMu6HqlCFZnw39MmdII1tj3p9Q=
Subject key identifier: 9D:48:13:24:F5:3D:9E:B0:88:23:61:4B:C9:4F:C7:DA:A2:BF:A4:FF
Certificate issuer: /CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Certificate serial: 019DD50B1F5EFFFE885ED107662F8BEFDC51
Authority key identifier: BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/nUgTJPU9nrCII2FLyU_H2qK_pP8.roa
Signing time: Tue 28 Apr 2026 17:02:49 +0000
ROA not before: Tue 28 Apr 2026 17:02:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198839
IP address blocks: 81.27.84.0/24 maxlen: 24
2a12:8ac0:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.mft
rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:0b:1f:5e:ff:fe:88:5e:d1:07:66:2f:8b:ef:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba67bff7bad1eb8384b585df7bef1206f7f19f7e
Validity
Not Before: Apr 28 17:02:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d481324f53d9eb08823614bc94fc7daa2bfa4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:89:37:10:48:5b:03:88:41:50:53:56:6e:d0:
0b:86:ae:ca:7d:5a:8b:3d:cd:37:cd:54:06:fe:97:
7a:10:51:4f:fe:b3:b6:5b:03:80:fb:d1:2d:3b:6c:
0a:bd:aa:6f:d2:dd:5b:0c:b6:24:8f:6d:a3:f8:a5:
f7:2b:9d:d4:7e:8d:61:02:1d:a9:9b:1c:8d:70:8c:
13:56:2c:84:39:e0:a3:2a:00:49:7a:e2:bb:57:b6:
8a:25:ba:c1:f8:29:8e:01:32:22:ee:49:15:99:89:
96:99:05:16:a9:67:b8:2d:21:f3:ec:05:09:32:6b:
c6:f9:13:36:0b:0b:49:0b:61:b3:f1:7a:36:0d:c0:
d4:3e:e0:b5:b6:79:4f:41:73:4b:47:93:c1:e4:63:
cb:8d:57:99:1c:12:b7:17:30:0a:fe:17:00:3a:61:
11:87:5c:30:1c:3b:3c:9f:77:a2:f2:d0:12:54:27:
98:6e:94:c2:17:2f:4f:08:56:82:06:91:b2:d7:2a:
e2:f7:7b:59:c8:d4:27:f1:ed:e2:3a:94:38:40:76:
01:fb:6a:48:b0:0d:66:7f:63:af:8a:51:b9:fa:ad:
3c:f4:53:07:cf:b1:2c:8e:a0:78:5a:ac:fd:7a:fd:
25:ad:7d:19:0a:e3:21:46:bf:0e:49:c6:53:bd:14:
0a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:48:13:24:F5:3D:9E:B0:88:23:61:4B:C9:4F:C7:DA:A2:BF:A4:FF
X509v3 Authority Key Identifier:
keyid:BA:67:BF:F7:BA:D1:EB:83:84:B5:85:DF:7B:EF:12:06:F7:F1:9F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ume_97rR64OEtYXfe-8SBvfxn34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/nUgTJPU9nrCII2FLyU_H2qK_pP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/4a244d-51d1-4143-b6af-da4538022ac7/1/ume_97rR64OEtYXfe-8SBvfxn34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.27.84.0/24
IPv6:
2a12:8ac0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
82:7c:a9:48:74:10:57:0a:1f:cf:9e:21:79:77:ea:6c:d0:28:
1f:42:95:4e:99:af:26:d3:c8:39:1b:3f:ea:56:77:3c:18:d6:
48:dd:c6:d6:4e:4c:85:a8:1b:ee:a8:cd:33:b1:64:19:8c:9c:
50:69:ba:46:a8:eb:2b:74:42:e5:11:1b:d4:c0:3d:f5:dc:99:
66:2e:da:77:f6:80:cf:f9:61:49:c6:34:4b:fd:97:f6:c5:65:
30:78:1b:9b:43:de:1b:12:1c:1e:10:2e:ea:9e:93:d7:3a:d8:
ab:c8:4f:ee:89:87:b6:da:6f:2c:cf:51:35:d9:1b:06:d0:8c:
ad:3e:d8:d8:cd:23:39:29:be:60:65:68:8b:31:d2:22:15:14:
68:a7:6a:1e:69:cd:52:55:b4:b1:fd:83:a3:a4:45:76:e6:d5:
16:cf:1e:65:63:a8:68:54:cd:2a:9f:4a:0c:eb:a4:29:da:61:
39:20:d7:6d:8e:f0:82:e9:1e:c0:b6:c6:90:3a:e3:d4:bf:3c:
6e:f9:7e:73:f5:b2:2b:9b:ce:d6:58:fe:9d:fa:90:3e:71:8b:
fe:5f:9a:dc:e5:67:c2:0d:0b:28:2b:de:51:e0:8a:23:4b:66:
f2:5c:b0:69:af:69:87:e2:16:23:07:0d:4d:fa:e5:2f:86:93:
5e:ad:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:46 2026 by rpki-client