Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa
File: uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa (raw, json)
Hash identifier: j0RS1RQJQSNrBv7ngDU2LKpRzV2MtQ6zJxmWtahtrSI=
Subject key identifier: B8:86:30:FF:C8:A2:65:3B:A9:C7:A1:50:F0:8D:BF:25:4E:14:E4:E5
Certificate issuer: /CN=a750263823402b83c11c5014d32666dcab111447
Certificate serial: 019E17A4CC73482A6FA253E6C7625B92BCC8
Authority key identifier: A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa
Signing time: Mon 11 May 2026 15:25:36 +0000
ROA not before: Mon 11 May 2026 15:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 89.28.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:a4:cc:73:48:2a:6f:a2:53:e6:c7:62:5b:92:bc:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a750263823402b83c11c5014d32666dcab111447
Validity
Not Before: May 11 15:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b88630ffc8a2653ba9c7a150f08dbf254e14e4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0b:d5:5c:4f:90:86:f1:32:0e:90:08:20:6d:
77:64:00:86:7e:29:17:f3:8e:3c:90:d1:fd:54:88:
f5:3f:ea:cf:6c:ef:72:61:18:ff:cf:7e:b0:c7:3b:
49:69:6b:b6:b0:79:48:d7:90:c5:28:b7:d1:a4:e3:
99:ea:3b:ed:29:87:e0:9d:ba:7f:4c:6b:c6:41:f6:
66:0d:e1:f3:75:7a:da:d7:07:f1:26:77:f8:33:49:
96:37:e6:6a:59:5e:ca:79:25:b3:b9:ba:98:fd:ab:
08:e7:a8:67:97:b8:b3:51:09:80:4d:61:7f:49:40:
67:7f:fb:5e:08:a7:f6:ca:d2:ea:5d:1f:d5:a0:bf:
c5:01:2b:d8:20:6f:ac:b6:43:f5:16:2e:84:98:13:
1f:bc:b4:b8:f3:cd:3d:b7:b7:b1:d1:21:55:24:ee:
59:c8:63:4d:56:f6:f6:21:88:95:7e:f9:00:fb:8f:
d2:24:aa:c1:2b:f5:1b:90:a4:54:0a:7c:72:d4:92:
74:7a:84:4e:8a:18:87:45:7e:15:43:c9:ca:80:62:
3a:08:35:1b:30:60:ff:9f:52:16:24:02:6a:c7:68:
4c:34:e6:1e:0d:29:18:d0:b2:31:dc:5c:79:6b:ec:
41:36:ab:99:24:cc:22:d9:bf:4d:fd:73:64:ff:d7:
3f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:30:FF:C8:A2:65:3B:A9:C7:A1:50:F0:8D:BF:25:4E:14:E4:E5
X509v3 Authority Key Identifier:
keyid:A7:50:26:38:23:40:2B:83:C1:1C:50:14:D3:26:66:DC:AB:11:14:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1AmOCNAK4PBHFAU0yZm3KsRFEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/uIYw_8iiZTupx6FQ8I2_JU4U5OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ccb4fd-fa67-48d6-a8fc-9a29f1f4081c/1/p1AmOCNAK4PBHFAU0yZm3KsRFEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.187.0/24
Signature Algorithm: sha256WithRSAEncryption
06:4f:1f:80:fb:b9:41:f6:a5:91:88:d8:b4:73:93:3b:fa:9f:
f9:7c:e7:f4:2e:9d:cb:0b:06:c6:c0:95:d0:3e:80:0d:a4:e3:
0a:86:fa:10:16:de:b2:33:7b:d8:fa:2e:d1:81:76:62:cb:4f:
42:8a:9a:38:c0:d0:35:5d:a9:b3:a6:3c:94:96:ea:e5:65:68:
1a:0e:43:d9:b2:a1:b3:ae:ab:c7:d6:29:e2:fb:a5:b5:13:31:
6f:13:10:36:c3:c3:38:eb:5c:1c:c8:81:0a:41:4f:01:0e:4a:
f7:50:5e:40:56:1a:8e:48:ca:4a:d6:37:42:54:c7:d6:16:dc:
c5:96:eb:10:41:56:02:3b:95:8b:88:4b:ae:87:85:92:5d:75:
35:01:b6:93:69:8e:61:1a:e5:4e:66:8a:23:ec:24:e8:49:e7:
a1:63:51:77:bc:54:d4:68:28:5a:40:53:1e:02:d2:bf:08:64:
32:94:8c:bd:cd:df:0a:3e:b5:b1:17:09:4c:23:0e:80:a5:57:
ce:5d:d1:ed:c3:c0:26:f9:ed:61:46:83:13:e2:d9:80:23:97:
c5:18:4d:c0:bd:6f:c7:2c:60:cb:05:85:10:bf:e1:30:97:63:
fc:2f:86:bb:99:09:2e:95:42:31:6a:03:76:7d:00:07:e8:5b:
41:0a:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:38:46 2026 by rpki-client