Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/s_UEAX16Mi_Zykw5NcLyTBLdjEY.roa
File: s_UEAX16Mi_Zykw5NcLyTBLdjEY.roa (raw, json)
Hash identifier: nIdgznH6yVWug9p8QR/ZsttEgrf8SsAXBR1vwxHjkjA=
Subject key identifier: B3:F5:04:01:7D:7A:32:2F:D9:CA:4C:39:35:C2:F2:4C:12:DD:8C:46
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019DD88F15F2EEA6110A6B17A476867456A4
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/s_UEAX16Mi_Zykw5NcLyTBLdjEY.roa
Signing time: Wed 29 Apr 2026 09:25:49 +0000
ROA not before: Wed 29 Apr 2026 09:25:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 81.29.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d8:8f:15:f2:ee:a6:11:0a:6b:17:a4:76:86:74:56:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 29 09:25:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3f504017d7a322fd9ca4c3935c2f24c12dd8c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:9c:96:ed:5a:43:0d:9b:fa:db:6c:22:c2:
42:44:73:7f:bc:fc:e5:a9:ab:ca:03:6e:8d:da:d6:
83:f0:40:b1:74:c4:0b:b5:7b:af:33:6a:a6:0e:fa:
58:08:6a:9f:8b:31:8d:19:04:5b:a4:8f:e0:66:fa:
88:1b:f5:65:2c:10:c3:af:81:14:78:b2:15:78:55:
13:b0:8e:28:24:38:8a:66:31:38:0a:4e:a5:d1:48:
56:c6:0b:bf:84:27:2e:fe:ce:2a:62:68:b4:20:ce:
7b:e6:83:86:11:61:48:8b:8f:96:98:28:88:21:b2:
02:d7:1f:69:fb:9a:f8:be:ce:d2:3e:53:66:e4:53:
ad:6d:19:63:a1:95:d4:57:45:33:c2:59:06:ee:08:
15:87:66:60:a3:79:53:da:48:4f:13:ff:68:9d:b0:
f6:cc:af:b0:19:c5:9f:92:20:76:d0:55:8b:71:4b:
0e:9a:4b:9b:39:4d:5d:40:e5:29:2d:49:52:c9:0e:
0a:e7:46:e1:d6:90:45:bc:84:8c:0d:ab:d0:6b:b7:
ec:18:75:7b:55:3c:34:03:a0:0e:98:17:55:8c:c7:
dc:5c:d2:ba:de:a6:86:ce:42:06:7a:cb:1f:a4:aa:
60:38:91:4f:d7:63:64:d2:18:2d:60:d5:95:14:2e:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F5:04:01:7D:7A:32:2F:D9:CA:4C:39:35:C2:F2:4C:12:DD:8C:46
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/s_UEAX16Mi_Zykw5NcLyTBLdjEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.147.0/24
Signature Algorithm: sha256WithRSAEncryption
09:81:d5:79:d1:3e:eb:e3:b7:e2:c5:d5:01:16:f8:a6:78:dd:
ca:c4:81:16:32:f5:a5:cf:c2:83:45:de:86:74:61:84:b6:2b:
24:43:fd:b8:3a:f3:0d:59:e5:b6:80:96:db:33:fd:75:b8:5c:
10:de:10:05:ec:e5:05:89:b0:9e:b0:df:7f:91:01:0f:cc:91:
8b:a8:f7:f9:7b:90:07:07:d2:92:ec:c6:3d:0f:8d:5b:cf:1e:
8c:c7:f8:33:50:cb:f7:fb:42:b1:ea:12:c0:c5:f2:d6:2f:e2:
dd:e4:5c:25:0e:6f:87:a2:90:c0:eb:ad:3e:9d:eb:e6:e2:db:
3a:54:d9:e3:76:85:b2:53:37:4c:22:97:e9:2a:06:74:30:f6:
c4:b2:28:f2:97:25:6f:41:2c:f6:ff:fe:2c:2e:71:bf:e9:d7:
d3:c1:eb:d9:0f:17:44:8b:cb:8f:39:be:51:4a:47:9e:f2:56:
24:01:4d:fd:fc:6d:5f:c7:15:6c:5b:31:27:4f:92:ba:33:ea:
f5:3c:21:f3:c2:94:18:91:0f:e8:72:9c:ad:47:e9:3b:fc:8a:
85:c9:7f:1a:d7:3a:48:60:ef:e4:f2:a6:ff:55:d6:e8:b8:c9:
d1:58:b6:97:95:9f:77:c0:ba:9c:e0:de:88:76:41:54:9f:2f:
16:d7:be:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:59:51 2026 by rpki-client