Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/1-uqAA49B-LNga8wL-Km6wovobcI.roa
File: 1-uqAA49B-LNga8wL-Km6wovobcI.roa (raw, json)
Hash identifier: kAUV5RbRLGHjSsvGuNU8jasfwM1rrJe2ngCkHs1tfUI=
Subject key identifier: FA:EA:80:03:8F:41:F8:B3:60:6B:CC:0B:F8:A9:BA:C2:8B:E8:6D:C2
Certificate issuer: /CN=d052bc250ff778b7279a4b18c126740d4ce86c95
Certificate serial: 01A0D2CB007BC246A8D4D572621E264A8D07
Authority key identifier: D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/1-uqAA49B-LNga8wL-Km6wovobcI.roa
Signing time: Thu 24 Sep 2026 09:41:54 +0000
ROA not before: Thu 24 Sep 2026 09:41:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41935
IP address blocks: 2a00:4b00:13d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:cb:00:7b:c2:46:a8:d4:d5:72:62:1e:26:4a:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d052bc250ff778b7279a4b18c126740d4ce86c95
Validity
Not Before: Sep 24 09:41:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faea80038f41f8b3606bcc0bf8a9bac28be86dc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:18:17:c2:02:0d:5e:82:7e:aa:24:62:eb:9a:
82:36:5f:05:85:d3:a9:61:d9:a0:ce:e0:f8:7f:58:
02:85:ea:3c:9a:36:3a:f1:54:ba:4e:2c:e2:0d:48:
af:d3:7d:83:c2:54:99:24:3c:c1:01:ef:c9:53:99:
de:01:e2:76:3b:92:73:0c:ba:d5:61:56:d2:43:1c:
d3:65:da:aa:d5:85:8f:03:6c:84:c1:b0:31:52:6f:
58:f8:63:5b:ff:c8:21:71:45:65:f2:55:52:e8:ec:
5a:3d:0c:a7:91:5c:fb:c2:6c:ee:55:b0:05:7f:40:
87:3f:28:22:1c:15:a1:16:b2:54:2f:91:fc:13:b4:
43:50:56:dc:c8:80:84:89:63:06:41:16:10:78:ec:
8a:6b:2c:4b:5b:92:75:43:94:15:47:d2:e8:5a:d1:
56:dd:3f:a1:a0:5c:05:a6:5d:ba:88:b4:29:d3:57:
0f:d9:bf:49:f4:c9:39:04:a4:2d:5b:7e:e8:7a:d6:
9f:9d:b6:c5:3e:58:1f:53:46:de:e0:34:06:b0:49:
0b:ad:8d:9c:fc:e2:a1:c2:4d:39:10:f9:0e:7a:b0:
1d:f0:75:15:30:ca:42:53:7c:11:db:98:19:1b:e0:
c7:19:3f:70:1e:17:91:cc:63:3a:95:a3:b8:98:91:
a9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EA:80:03:8F:41:F8:B3:60:6B:CC:0B:F8:A9:BA:C2:8B:E8:6D:C2
X509v3 Authority Key Identifier:
keyid:D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/1-uqAA49B-LNga8wL-Km6wovobcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4b00:13d::/48
Signature Algorithm: sha256WithRSAEncryption
45:16:06:0f:71:22:9a:cf:8e:c3:e9:22:eb:23:1b:7c:0e:cf:
87:30:6b:5f:b0:21:51:81:fd:e6:9c:63:af:bc:6d:8b:80:6a:
d7:b8:94:5e:a3:2e:9c:74:ca:56:c4:27:1e:ba:03:dc:bd:04:
8c:c1:1a:63:56:77:f1:31:99:dc:b4:96:8d:57:8c:8d:55:f3:
b8:a2:eb:b1:93:6b:95:d9:31:dd:b3:b7:88:ba:b9:77:76:17:
4f:fc:7c:10:5b:0b:aa:c6:ab:95:ef:45:42:db:f3:5c:00:5e:
fc:6c:2f:d9:5d:ff:e9:e8:15:ee:e1:88:b8:4a:a3:a3:e8:eb:
01:dd:49:22:ab:1e:4e:4d:4b:51:11:d0:9d:6e:af:28:f2:71:
f3:85:7e:04:c2:2d:c2:b6:49:28:08:08:e4:85:cb:fc:5b:50:
29:35:26:31:2d:93:f5:e3:bd:02:5c:77:30:7e:bb:ea:cf:d6:
93:0f:64:29:ab:94:5b:c4:4a:1a:97:47:6a:35:1f:6f:4d:25:
35:0e:2a:5e:50:04:f1:1a:cc:f2:13:ad:64:84:35:66:d2:28:
27:5b:d9:ed:02:9e:19:51:4e:24:d7:c6:45:0d:5b:02:8b:51:
e4:c5:b4:a4:89:f7:2c:eb:18:ba:e7:26:5d:bd:d5:0e:02:3b:
49:84:d7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:07:28 2026 by rpki-client