Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/UUSl-upjZ4K5Bbte1_rrw3EJRKw.roa
File: UUSl-upjZ4K5Bbte1_rrw3EJRKw.roa (raw, json)
Hash identifier: cJIo5ws9df1iKQzDghFzKIpx79qvvlsQXIfxJYZdrmQ=
Subject key identifier: 51:44:A5:FA:EA:63:67:82:B9:05:BB:5E:D7:FA:EB:C3:71:09:44:AC
Certificate issuer: /CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Certificate serial: 01A0AE5DF241ADA345E62241DA0D9F3A899F
Authority key identifier: 72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/UUSl-upjZ4K5Bbte1_rrw3EJRKw.roa
Signing time: Thu 17 Sep 2026 07:56:27 +0000
ROA not before: Thu 17 Sep 2026 07:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24976
IP address blocks: 80.70.216.0/23 maxlen: 23
80.70.216.0/24 maxlen: 24
80.70.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:5d:f2:41:ad:a3:45:e6:22:41:da:0d:9f:3a:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7247ba43e270c98bdc642a9e3c218ca524eb0f53
Validity
Not Before: Sep 17 07:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5144a5faea636782b905bb5ed7faebc3710944ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:7a:be:c8:40:3a:3e:c1:f5:8b:69:0b:96:
c2:61:2e:57:e0:27:33:e4:ea:85:97:8e:26:fb:9c:
0e:34:e3:e8:a6:85:14:bf:74:6f:97:1c:c9:65:80:
4c:77:3c:9b:df:fd:4a:97:3c:28:87:9f:d9:68:76:
c2:b0:93:04:c2:ac:22:b7:5a:c7:2b:fe:03:de:bc:
f8:6e:2f:8f:e0:be:9e:2d:29:f3:cb:ee:05:62:91:
a8:ec:1c:bb:a0:bf:af:78:72:4d:89:80:8a:ab:c2:
8a:88:a5:1c:c0:36:39:ec:9a:54:fa:a0:60:7b:6d:
4e:4c:2b:f6:5a:22:4f:95:58:96:ba:fd:70:f9:e0:
48:f8:d0:3d:71:03:d4:f6:a6:c4:98:d0:6c:1d:7e:
3b:e2:1d:5f:05:0b:25:20:38:f1:0d:f4:65:82:8a:
ca:da:c3:f6:13:50:5d:2f:93:98:c3:50:d8:7b:64:
87:87:2c:de:44:95:ac:f4:41:ac:6a:9a:6f:00:5f:
65:7b:d0:74:bd:3e:83:96:be:5c:90:8d:b7:b0:b2:
47:26:73:fd:55:04:e2:dd:e8:e5:ac:2d:a3:fa:9c:
57:76:bc:61:d9:64:ff:2d:2f:0b:fe:a1:18:c6:01:
78:47:e0:6a:d5:77:93:42:0f:86:bd:70:30:86:bb:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:A5:FA:EA:63:67:82:B9:05:BB:5E:D7:FA:EB:C3:71:09:44:AC
X509v3 Authority Key Identifier:
keyid:72:47:BA:43:E2:70:C9:8B:DC:64:2A:9E:3C:21:8C:A5:24:EB:0F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cke6Q-JwyYvcZCqePCGMpSTrD1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/UUSl-upjZ4K5Bbte1_rrw3EJRKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/341068-28f6-4f81-993f-279203b1d92c/1/cke6Q-JwyYvcZCqePCGMpSTrD1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.216.0/23
Signature Algorithm: sha256WithRSAEncryption
72:c9:2c:28:bf:e8:51:82:38:1d:14:2b:7c:ce:a2:cf:fa:25:
b8:7c:cf:5a:16:50:d0:95:53:4c:e3:d2:60:95:f2:2e:90:5f:
79:4c:9e:ca:7a:49:53:4d:83:42:10:c9:19:b9:4e:39:c5:39:
e8:e6:42:37:40:23:66:88:09:0c:28:b6:dc:68:9f:5e:b3:ed:
89:0a:3d:59:3a:3c:c7:5e:cd:66:d2:a3:ee:d7:e7:17:92:35:
e7:39:f6:35:0f:76:00:74:9b:18:1a:17:2e:aa:6f:17:87:7c:
26:8a:d4:79:b8:28:5c:8a:85:ab:89:05:cc:9d:e4:b1:94:11:
2f:27:ab:80:59:c1:f1:af:32:a1:9a:22:6d:02:26:13:7f:e9:
00:d2:f2:e8:ea:c5:bb:79:1d:46:3b:56:bd:40:5f:42:45:d0:
e1:ac:bf:27:d3:36:1a:0a:87:f1:7d:ad:6a:91:9f:ae:dc:32:
74:01:8f:50:83:d5:84:a9:95:df:fd:00:0b:39:59:1f:4e:db:
52:56:da:56:c6:36:f0:cf:06:74:e5:08:67:c1:f8:c6:30:7f:
9c:22:8d:f1:fa:96:49:f2:db:e3:0c:90:a8:c6:54:6c:c7:71:
2d:a1:26:b2:d5:9a:70:12:5c:56:81:a8:d6:1b:24:26:f2:22:
0e:20:52:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:30:57 2026 by rpki-client