Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/umm8jYZzs32u6T4t_TOtFpUpXN8.roa
File: umm8jYZzs32u6T4t_TOtFpUpXN8.roa (raw, json)
Hash identifier: JdQ299lrpsgrvqTI2JbvUoM5YIFFil8glltBLw9mYAI=
Subject key identifier: BA:69:BC:8D:86:73:B3:7D:AE:E9:3E:2D:FD:33:AD:16:95:29:5C:DF
Certificate issuer: /CN=ef0782137197d1fef84d02e581b25d863ede6842
Certificate serial: 01A159B14CEAD718CD9B32E9CB516AF95A74
Authority key identifier: EF:07:82:13:71:97:D1:FE:F8:4D:02:E5:81:B2:5D:86:3E:DE:68:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7weCE3GX0f74TQLlgbJdhj7eaEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/umm8jYZzs32u6T4t_TOtFpUpXN8.roa
Signing time: Tue 20 Oct 2026 14:22:34 +0000
ROA not before: Tue 20 Oct 2026 14:22:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197182
IP address blocks: 45.9.23.0/24 maxlen: 24
2a01:b00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/7weCE3GX0f74TQLlgbJdhj7eaEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/7weCE3GX0f74TQLlgbJdhj7eaEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/7weCE3GX0f74TQLlgbJdhj7eaEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:b1:4c:ea:d7:18:cd:9b:32:e9:cb:51:6a:f9:5a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0782137197d1fef84d02e581b25d863ede6842
Validity
Not Before: Oct 20 14:22:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba69bc8d8673b37daee93e2dfd33ad1695295cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:f0:0f:97:c5:c9:a1:df:ee:ec:c3:85:bc:
23:15:6d:4e:4a:37:c2:46:47:26:0b:22:af:ff:63:
65:8a:b7:c3:86:b6:f4:f0:ee:06:c0:60:04:36:59:
17:6d:84:7a:b6:2b:ba:ca:dc:1c:e9:c3:7e:9e:32:
79:2c:f9:d3:db:c9:5a:14:79:c5:b1:0d:c9:64:ac:
c3:9a:34:04:92:4f:3f:e1:a0:20:65:bb:cc:f1:a4:
31:b7:cb:c7:89:34:ed:e8:6b:f4:15:a7:b4:7c:f2:
f2:b3:32:19:98:6a:c7:af:b1:54:b0:74:03:d3:17:
f9:75:aa:8e:f5:e0:0d:a8:09:de:df:0e:0b:07:23:
fa:9f:be:7c:6a:36:05:16:87:3e:a5:97:43:a1:47:
1c:94:d9:65:0a:36:cf:fd:6d:15:f4:d8:09:11:62:
2b:c1:33:ec:ae:7c:cc:93:fe:e0:74:01:64:0a:8d:
4c:91:8c:c6:f5:9e:9d:8e:6d:e7:e1:4d:d4:a7:cb:
84:36:cd:20:88:61:4e:ed:a7:37:71:c0:69:41:d8:
d6:3e:80:9a:56:66:98:22:1b:7e:8d:71:d0:9d:d2:
28:43:9c:35:3d:d3:2a:3a:86:b7:da:74:98:9d:35:
5d:35:9e:fe:70:c3:98:63:74:39:b0:6e:54:7a:93:
a7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:69:BC:8D:86:73:B3:7D:AE:E9:3E:2D:FD:33:AD:16:95:29:5C:DF
X509v3 Authority Key Identifier:
keyid:EF:07:82:13:71:97:D1:FE:F8:4D:02:E5:81:B2:5D:86:3E:DE:68:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7weCE3GX0f74TQLlgbJdhj7eaEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/umm8jYZzs32u6T4t_TOtFpUpXN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ef021d-8232-4e86-901e-2eaed37483eb/1/7weCE3GX0f74TQLlgbJdhj7eaEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.23.0/24
IPv6:
2a01:b00::/29
Signature Algorithm: sha256WithRSAEncryption
36:5e:fb:95:fe:7d:d6:65:82:71:22:5c:76:93:af:42:6f:6c:
d8:0f:4e:34:f5:5b:a7:34:0d:b9:81:dd:49:bf:bb:16:25:39:
6c:a9:26:4a:11:91:96:49:f5:a3:f2:55:28:d2:05:7a:98:c9:
a0:ad:70:a5:27:2d:33:4d:de:2d:23:c3:d5:8a:ac:f2:eb:13:
23:1f:3d:86:59:99:30:28:57:c4:bc:7f:83:e6:d9:23:ba:b3:
f5:4e:9f:94:b4:e7:4b:3e:66:d4:ef:5c:37:02:36:1d:f6:78:
f0:41:70:28:27:75:c2:5b:4c:0e:6e:26:22:03:12:8c:f2:41:
38:9e:5b:5e:41:6d:84:da:c8:f5:e9:08:e6:6a:74:62:5e:72:
5b:fc:6e:dc:8b:2f:e0:f1:11:82:2c:39:88:d3:e2:72:db:31:
25:18:2b:9c:11:6b:9a:b6:65:0f:d7:e9:4f:02:43:bc:93:e5:
57:cc:b3:9a:37:ce:16:8a:94:46:6a:bf:e2:34:17:d6:bb:ae:
5f:d5:a0:ee:c2:e9:2e:c7:50:0c:60:cb:14:c0:6c:d4:7d:6f:
76:9f:62:30:d7:c7:45:16:75:62:b1:38:28:90:06:61:94:88:
a5:bc:59:b0:10:08:11:4b:f0:bd:cc:50:f3:17:0e:f9:3b:30:
6c:11:a6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:39 2026 by rpki-client