Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/uYGcHhhFPe7VLGSrKRieQheWk-s.roa
File: uYGcHhhFPe7VLGSrKRieQheWk-s.roa (raw, json)
Hash identifier: B+/rEvInmdSaETNcMmHgQnukRKOmNnE7CTKIUtJ66/U=
Subject key identifier: B9:81:9C:1E:18:45:3D:EE:D5:2C:64:AB:29:18:9E:42:17:96:93:EB
Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial: 019CC8302F13F4BFB0D7623C0C7F0E668E96
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/uYGcHhhFPe7VLGSrKRieQheWk-s.roa
Signing time: Sat 07 Mar 2026 12:05:26 +0000
ROA not before: Sat 07 Mar 2026 12:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26548
IP address blocks: 2a14:dc81:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:30:2f:13:f4:bf:b0:d7:62:3c:0c:7f:0e:66:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
Validity
Not Before: Mar 7 12:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9819c1e18453deed52c64ab29189e42179693eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:50:26:37:1a:40:d8:d8:84:7e:22:3e:c1:
29:fd:4d:61:3d:3a:6a:31:b4:e7:88:b6:17:7d:2e:
9e:be:09:0c:6e:8c:38:6b:f8:5c:58:fa:2b:d1:fd:
fe:ea:2a:a3:d8:ba:b0:72:6e:70:b0:ab:2d:c3:82:
55:6a:a7:3d:4c:9d:9e:ea:78:c1:1a:2e:4b:c4:3e:
bc:92:aa:cb:74:25:27:66:97:6e:b3:60:fb:9b:91:
5e:75:d3:b7:38:30:cb:74:13:41:68:e7:d2:56:2f:
36:a5:41:e5:6e:ae:de:a2:7e:43:f3:5f:41:55:7d:
8b:79:7d:08:59:4d:cc:42:43:95:7b:e6:30:8b:e8:
38:44:1a:03:aa:d8:56:45:d2:89:10:a6:b0:58:06:
00:33:bb:d6:e4:18:51:8f:16:a1:59:78:ab:e2:0e:
31:d4:11:66:29:7f:4a:7a:23:c3:98:d0:69:1c:39:
ff:52:6d:b9:38:1a:21:4d:19:6a:41:79:5e:54:41:
b7:20:a0:18:2e:a8:b2:62:ec:c6:aa:48:de:0c:c6:
84:69:87:0f:75:fa:18:53:c4:df:1d:94:6e:cd:8e:
7b:54:32:11:b3:de:c0:10:c1:36:a9:3e:d9:53:73:
ea:c9:7c:12:3b:92:86:e4:4b:87:e6:87:72:0e:09:
d1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:81:9C:1E:18:45:3D:EE:D5:2C:64:AB:29:18:9E:42:17:96:93:EB
X509v3 Authority Key Identifier:
keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/uYGcHhhFPe7VLGSrKRieQheWk-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:dc81:5000::/36
Signature Algorithm: sha256WithRSAEncryption
93:0b:fe:6b:0d:3a:51:d9:d2:6c:60:7d:54:c9:1a:70:d6:8e:
2b:16:e8:9b:61:29:85:44:c7:71:35:18:9d:5a:bb:48:68:df:
fc:46:0b:a1:db:1c:18:01:dc:48:50:09:f2:d1:e9:bf:36:26:
eb:57:cc:30:7b:f9:fd:93:f2:83:9a:10:92:00:e1:35:46:32:
58:8a:ae:08:74:f3:cc:9b:6c:a6:b1:a7:1e:53:2c:6b:79:08:
2c:87:f4:01:27:63:b7:f7:58:13:b2:a2:b2:4f:53:c3:cb:76:
56:96:37:4a:ca:7f:aa:49:4f:5e:2f:4b:ca:a2:26:c1:e6:38:
de:82:6f:bd:ac:c8:32:6b:7e:f3:a1:a0:8c:cd:c7:b8:80:f8:
f1:2d:2d:69:96:b9:03:63:28:64:5a:3e:00:ae:da:74:32:18:
8d:14:46:2f:e0:20:03:b3:58:85:7f:2d:f8:cc:60:b9:2c:34:
ce:c7:9e:00:5c:fa:64:d6:9c:8d:ad:cd:5b:25:03:e3:6d:be:
c0:85:4a:d0:cf:67:d8:18:c7:54:cb:38:01:14:56:fc:fb:43:
1a:e8:31:88:76:cc:53:7b:4a:1d:42:2f:34:c2:d3:92:fc:53:
72:71:0a:f6:d6:bd:4b:e7:11:4a:43:5a:a9:78:65:9c:6c:78:
57:1a:1f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:21 2026 by rpki-client