Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UAFI_t269CaLYHZg0AMK-0oXz1w.roa
File: UAFI_t269CaLYHZg0AMK-0oXz1w.roa (raw, json)
Hash identifier: VjjDftsdTHRYN/8NGP+hFyLv+pjRElI/7wacx8C0vnc=
Subject key identifier: 50:01:48:FE:DD:BA:F4:26:8B:60:76:60:D0:03:0A:FB:4A:17:CF:5C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F37652884870C5079003F16370035BF56
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UAFI_t269CaLYHZg0AMK-0oXz1w.roa
Signing time: Mon 06 Jul 2026 12:26:44 +0000
ROA not before: Mon 06 Jul 2026 12:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219272
IP address blocks: 2a06:9801:7d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:65:28:84:87:0c:50:79:00:3f:16:37:00:35:bf:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 6 12:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=500148feddbaf4268b607660d0030afb4a17cf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:f0:6d:34:8c:69:25:0a:b4:6e:16:3f:a1:
e6:75:2e:01:c4:08:d1:b6:7f:7f:e8:4f:63:a6:63:
4e:fb:b3:57:71:f5:52:73:51:b2:93:73:83:f1:dc:
9f:e6:05:4c:e8:fe:05:5c:10:77:c8:38:ce:18:c6:
83:37:4d:5e:6b:e4:ed:4d:90:f3:e2:ce:5f:7f:32:
a9:af:7f:9d:80:18:47:bd:22:b4:d0:60:7c:e7:b9:
2e:ca:85:8a:4d:be:83:e2:58:5d:aa:52:11:33:bf:
fd:3e:49:c1:5a:ed:b0:df:f0:2c:42:00:db:00:39:
67:63:db:37:f0:19:08:16:92:70:80:de:63:c0:37:
c8:0c:bc:d8:60:26:4a:9b:65:9e:fd:45:39:9a:16:
47:dc:41:26:63:4d:4e:80:21:ed:98:16:0e:fc:38:
1f:cc:cd:8e:e4:97:c9:f9:be:47:93:40:14:28:15:
3b:0d:18:17:aa:28:9a:88:c8:2f:79:55:ea:48:d8:
64:f7:54:6b:81:a7:e2:c7:b3:91:fa:36:ad:51:96:
44:ef:1f:bb:d5:70:6f:7c:15:78:ba:49:74:aa:31:
35:86:21:d5:34:55:b6:da:e3:ba:b4:9d:c7:23:66:
6e:51:c9:48:be:99:64:bd:1d:10:fc:9e:ac:36:a4:
c2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:48:FE:DD:BA:F4:26:8B:60:76:60:D0:03:0A:FB:4A:17:CF:5C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UAFI_t269CaLYHZg0AMK-0oXz1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7d4::/48
Signature Algorithm: sha256WithRSAEncryption
3f:84:62:73:ef:11:0f:b7:87:f9:f9:f6:17:2c:b6:6e:7b:66:
5a:9c:cf:25:96:ee:f3:ca:38:57:6b:64:37:39:77:b2:eb:e7:
0e:d5:35:49:59:c5:b9:49:a4:ba:6e:c5:17:50:82:a1:68:90:
db:4b:ad:31:99:3b:0e:8e:5f:59:c0:ce:34:c1:c0:17:26:60:
90:6c:c9:95:c7:00:c9:90:74:eb:7f:55:d1:e0:2f:1a:58:dc:
d5:51:36:7a:0f:6d:0c:59:ac:17:a4:63:94:ed:79:48:86:6c:
fb:7b:ad:f8:46:a3:91:97:65:94:85:48:2a:c5:84:68:5f:75:
91:0c:c5:79:b5:1d:a2:9e:86:f5:c7:16:17:1f:77:c4:41:80:
e3:4c:3c:1f:06:2e:71:5a:01:0a:f9:60:b4:a6:9a:76:41:4d:
7a:62:fa:6f:c7:ca:83:65:8d:89:3b:87:2d:cd:af:53:66:d9:
6b:01:7b:26:68:ec:a2:94:87:fd:ae:7d:26:c4:43:99:81:28:
80:e9:96:68:d5:49:88:0d:cb:35:48:e3:74:9a:10:9a:c1:a4:
6d:a6:06:e0:0e:1e:13:4f:6b:ea:72:79:c9:fa:94:e1:8e:91:
c6:28:58:68:93:70:4a:3b:b2:0d:68:80:17:50:58:8f:bb:b8:
f5:87:e1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:35 2026 by rpki-client