Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/uHtev5eSqC8WE6ycypYpvyTzkPE.roa
File: uHtev5eSqC8WE6ycypYpvyTzkPE.roa (raw, json)
Hash identifier: tOHZcVwKgbX/CIyGzALYSP5QrShCApH/2VThn/R79QA=
Subject key identifier: B8:7B:5E:BF:97:92:A8:2F:16:13:AC:9C:CA:96:29:BF:24:F3:90:F1
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019CA9B43C2A9D0B6F5F7521EF79E8263E13
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/uHtev5eSqC8WE6ycypYpvyTzkPE.roa
Signing time: Sun 01 Mar 2026 14:01:27 +0000
ROA not before: Sun 01 Mar 2026 14:01:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38324
IP address blocks: 209.33.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b4:3c:2a:9d:0b:6f:5f:75:21:ef:79:e8:26:3e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Mar 1 14:01:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b87b5ebf9792a82f1613ac9cca9629bf24f390f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:5c:6a:e9:07:02:fe:d3:db:d1:c6:16:df:
6a:3e:b7:e4:83:bb:f5:55:31:e2:cf:fe:56:55:8e:
47:24:f2:33:c7:58:0f:5d:07:97:d6:16:4a:67:a9:
14:20:79:00:85:a2:2a:8b:bb:00:06:4e:8b:d7:e0:
92:44:34:5d:b9:c8:c5:e4:cd:12:62:0d:12:1d:a2:
a5:f7:a1:92:7b:b6:b5:30:ec:d1:45:2f:2f:bb:7d:
6b:eb:38:05:67:c2:cd:c6:cd:c3:1b:b4:4a:f5:79:
f7:33:97:7e:ac:6f:8b:cc:4d:f1:2a:c6:f7:97:47:
eb:90:7b:51:7d:73:2d:a3:0a:af:c6:8c:a6:8c:fd:
fb:c9:ca:9a:83:0c:67:0d:db:8a:7d:ac:5e:04:b0:
90:34:6a:07:67:87:ce:e6:9a:35:af:01:20:76:ad:
7d:e6:45:00:20:bb:96:a2:94:95:06:83:04:a5:71:
a7:46:a1:ad:6c:3b:2c:e7:29:12:c9:7e:20:8d:b2:
23:7a:49:a3:73:0b:93:d0:fc:81:cf:0c:a9:07:7e:
cf:b6:78:f5:b4:fa:3c:ce:be:32:a0:db:5f:9e:f9:
69:4b:89:d0:49:97:b0:f4:c6:e9:26:6b:c6:dc:e3:
2b:85:33:fa:7e:3c:2c:49:60:b8:dd:49:fc:ee:49:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7B:5E:BF:97:92:A8:2F:16:13:AC:9C:CA:96:29:BF:24:F3:90:F1
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/uHtev5eSqC8WE6ycypYpvyTzkPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.33.176.0/20
Signature Algorithm: sha256WithRSAEncryption
e4:e8:21:7a:8a:5f:28:67:ed:41:0b:e7:74:59:48:47:7e:09:
ec:d2:35:45:46:1a:e5:d4:20:5d:a5:b5:8e:79:f4:4d:29:ba:
fe:73:c6:da:6a:a5:2e:14:0c:60:96:32:71:bc:c3:52:8c:10:
6e:ee:c6:f7:2d:3c:61:3d:68:76:69:9a:00:b8:c5:8e:e4:d1:
f2:dc:ee:c9:33:a7:59:a6:6d:ab:1d:c5:b7:df:53:75:5f:03:
a5:2c:c7:3e:f9:7e:c4:32:64:2c:f0:cc:9d:32:bf:97:2e:cc:
6d:0e:0c:e6:56:8e:07:29:99:62:d0:1f:b8:38:96:a6:3c:5b:
35:3a:a7:ba:1d:01:0a:fa:4d:13:8a:e4:71:86:c2:48:2a:c7:
51:57:48:12:76:6e:a9:f9:05:fe:41:01:31:9a:30:df:18:91:
af:29:dd:db:a6:24:96:4e:9f:ea:8b:82:65:e5:81:fc:77:2e:
c4:9f:0d:ad:ca:19:a0:c9:29:ca:17:26:38:a6:30:a0:45:12:
86:91:78:33:17:54:f5:73:66:90:7e:47:70:ea:7f:da:4a:82:
42:01:75:95:26:11:71:06:cc:e7:5f:04:61:1c:09:c5:94:82:
71:e3:d6:ce:7e:48:c6:a8:da:64:de:6c:8d:a4:c4:75:4c:2c:
fd:ac:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:31:44 2026 by rpki-client