Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uEWEk4aXaWtv-0QLBeFUTZug7Nc.roa
File: uEWEk4aXaWtv-0QLBeFUTZug7Nc.roa (raw, json)
Hash identifier: 14MMsSiOvD2NQhiDCrlezw1z0jQxoudqbLlraSTHFJg=
Subject key identifier: B8:45:84:93:86:97:69:6B:6F:FB:44:0B:05:E1:54:4D:9B:A0:EC:D7
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E0663A694C5805D7D1FB09207D6C8402C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uEWEk4aXaWtv-0QLBeFUTZug7Nc.roa
Signing time: Fri 08 May 2026 07:00:54 +0000
ROA not before: Fri 08 May 2026 07:00:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53808
IP address blocks: 109.176.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:63:a6:94:c5:80:5d:7d:1f:b0:92:07:d6:c8:40:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 8 07:00:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b84584938697696b6ffb440b05e1544d9ba0ecd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:b7:f9:f0:c3:d3:5f:a7:a4:68:76:5e:1c:
51:63:1f:8d:ef:12:ff:ae:d5:74:8d:91:6f:68:7d:
07:16:5e:75:6a:2f:2a:4a:d3:5f:28:03:f0:e2:0c:
ed:b9:b1:8c:ce:60:ca:82:fa:1c:b3:11:d1:29:34:
dc:fd:0f:77:09:2e:3e:7f:c6:51:9a:1e:ae:5c:ef:
2e:b8:45:d8:94:b3:eb:33:de:41:13:83:5f:b4:50:
f7:90:cb:ea:1a:17:03:71:f5:56:0c:8d:d9:b1:1d:
29:2f:71:6b:02:45:51:4d:09:3c:01:70:61:27:c1:
3d:bb:ac:7f:d8:06:a7:2b:21:34:f0:63:71:ef:9e:
21:39:d5:49:c3:ac:3c:2d:f8:09:f5:3b:3c:d4:77:
05:a6:81:ad:82:0c:4b:d3:fb:9f:27:d0:e1:27:86:
99:d6:bd:4b:9f:c1:10:13:7a:22:b0:3d:8c:d8:b2:
d0:97:da:0f:46:5c:65:78:f6:f8:81:83:43:c1:4f:
d2:13:d5:4c:be:09:fc:b4:6b:39:95:0c:53:5b:6b:
39:d8:90:40:8b:e8:5b:b1:aa:5c:b4:d9:f4:40:ff:
a8:11:36:b7:e8:ab:4b:64:ac:fa:78:4a:aa:df:d2:
45:29:93:a3:be:b0:c1:d8:d4:a9:d1:e0:a6:9e:0d:
1d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:45:84:93:86:97:69:6B:6F:FB:44:0B:05:E1:54:4D:9B:A0:EC:D7
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uEWEk4aXaWtv-0QLBeFUTZug7Nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.214.0/24
Signature Algorithm: sha256WithRSAEncryption
87:4d:39:6e:dd:b0:e5:be:10:10:10:bf:b1:a4:41:a9:28:8e:
92:05:fb:98:5a:c9:d9:80:eb:c2:35:13:1f:47:60:11:e0:b8:
ca:3c:ff:1a:6e:77:50:b0:a4:a8:e5:a2:e9:aa:68:a3:05:f0:
19:e0:af:c0:65:2b:4a:e4:1d:e9:dc:2a:5d:d8:6e:17:69:a7:
e7:93:53:08:99:aa:ea:01:af:79:2b:2e:6a:a8:0d:df:e0:2d:
ac:76:c2:52:3e:a0:94:0f:bf:1f:53:24:c7:f2:ef:6d:b9:c5:
a7:c1:9e:cd:6c:55:6e:8d:49:c3:e8:22:4d:1b:e7:d9:de:96:
7b:83:7f:b1:62:78:b8:39:2e:55:82:1c:ed:fe:57:71:09:36:
33:da:c3:1b:da:be:af:19:37:e5:0a:62:cb:23:a3:5a:06:5d:
48:c3:46:1f:e6:76:2b:d7:b7:51:1f:5a:51:16:4f:23:87:8a:
7a:44:06:96:8a:50:99:e4:97:d6:da:fc:f8:cb:72:05:e8:41:
ed:2e:32:dd:13:6d:e4:21:08:af:f9:c8:e8:6f:36:03:8a:7d:
52:28:e2:b6:62:16:39:7f:78:53:b6:bc:30:ad:2d:e1:97:62:
2c:22:79:10:4f:a6:6b:46:ac:3c:72:46:08:d1:8f:05:80:11:
16:1a:eb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:02:34 2026 by rpki-client