Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/UQwijTTDKbfsJZWKMY6xFKq52Ww.roa
File: UQwijTTDKbfsJZWKMY6xFKq52Ww.roa (raw, json)
Hash identifier: yyHR+9xpLGlaichAp86CMAnywJHr3C7oHvjKLNA6OvE=
Subject key identifier: 51:0C:22:8D:34:C3:29:B7:EC:25:95:8A:31:8E:B1:14:AA:B9:D9:6C
Certificate issuer: /CN=d39a1b358580c82fcdb33bf92a79610a25db6e5b
Certificate serial: 019EE15A8BF6A335E0D71D3C4A99F30AF881
Authority key identifier: D3:9A:1B:35:85:80:C8:2F:CD:B3:3B:F9:2A:79:61:0A:25:DB:6E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/05obNYWAyC_Nszv5KnlhCiXbbls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/UQwijTTDKbfsJZWKMY6xFKq52Ww.roa
Signing time: Fri 19 Jun 2026 19:27:48 +0000
ROA not before: Fri 19 Jun 2026 19:27:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219419
IP address blocks: 2a04:2a00::/32 maxlen: 32
2a04:2a01::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.mft
rsync://rpki.ripe.net/repository/DEFAULT/05obNYWAyC_Nszv5KnlhCiXbbls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e1:5a:8b:f6:a3:35:e0:d7:1d:3c:4a:99:f3:0a:f8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d39a1b358580c82fcdb33bf92a79610a25db6e5b
Validity
Not Before: Jun 19 19:27:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=510c228d34c329b7ec25958a318eb114aab9d96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:f7:c8:02:8c:46:2a:13:6c:3d:a3:17:64:
20:f2:aa:14:81:b0:18:45:63:07:db:9d:ab:c6:15:
29:93:b0:a6:f4:be:46:50:0d:c7:4a:3b:df:7c:53:
bf:7e:5a:98:93:a5:a5:a3:cd:42:ca:02:e0:ff:0c:
8e:21:66:42:43:6d:7d:11:a2:91:cd:67:81:58:5a:
8f:33:d9:a9:f5:59:2f:aa:d0:83:ec:e2:16:3a:c5:
1b:98:d3:31:79:3d:f2:4c:c1:c3:2f:67:20:7e:11:
5e:41:5b:8c:83:13:51:9e:15:53:3e:8a:0d:6f:2a:
7c:16:b2:e6:68:ae:8d:e4:ed:34:4d:c7:ea:75:ff:
39:90:37:6a:73:f7:85:f6:ed:86:38:01:0b:46:9a:
a6:96:d7:04:45:54:2e:93:15:a6:83:1a:21:59:37:
e9:be:eb:d0:29:97:3c:cf:82:d2:6e:c9:58:dd:81:
cd:81:7d:c7:a5:2f:fa:86:6e:4a:65:02:8e:92:7e:
e1:41:22:cc:05:f6:b6:6b:d2:d1:ca:a1:91:32:61:
84:65:55:ac:87:16:65:bc:3f:f5:9c:7c:08:a3:d7:
40:d5:de:41:02:31:8e:dd:08:59:03:f4:56:cf:e9:
fd:a4:fa:9b:60:73:89:ba:49:a6:04:5e:75:ff:7f:
c9:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:22:8D:34:C3:29:B7:EC:25:95:8A:31:8E:B1:14:AA:B9:D9:6C
X509v3 Authority Key Identifier:
keyid:D3:9A:1B:35:85:80:C8:2F:CD:B3:3B:F9:2A:79:61:0A:25:DB:6E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05obNYWAyC_Nszv5KnlhCiXbbls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/UQwijTTDKbfsJZWKMY6xFKq52Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:2a00::/31
Signature Algorithm: sha256WithRSAEncryption
5d:c8:bc:9b:13:f3:bb:0c:20:d5:36:e6:54:4b:b9:e2:e6:62:
a4:b7:da:37:e3:3c:83:ac:76:fe:22:70:9d:fe:92:b9:6c:e8:
31:6d:05:6d:d6:d6:0a:e3:7e:64:65:98:20:68:18:e6:db:b3:
d3:e9:ca:9b:4a:28:4a:bb:db:c0:5f:65:71:c8:23:c4:06:d4:
38:1d:6b:8b:d3:a0:b7:95:d0:1a:64:f9:21:d1:50:88:ce:7c:
db:cb:0a:31:38:4d:f3:0e:d5:9a:8e:43:fa:26:b8:73:33:cb:
42:88:26:22:50:6e:30:3a:aa:57:50:65:1d:ce:85:14:83:d1:
ad:09:fb:8f:58:a0:7d:da:9d:f3:6b:c4:ca:19:2f:17:ae:ca:
ce:ee:15:ea:e8:2c:6a:35:9e:63:36:6c:65:f0:66:68:54:73:
0c:cc:c6:3c:ee:b1:e0:8f:ff:21:94:18:12:35:a7:fc:0d:18:
d1:c6:62:34:35:38:8e:fe:8c:32:8b:c9:2e:3b:9c:b6:f2:94:
87:42:2c:f5:08:19:3c:a9:d6:0c:3b:af:1a:96:42:b9:89:8c:
20:20:37:bf:2b:5c:1c:2c:c7:ad:04:68:ad:c5:0f:0e:ec:47:
66:aa:92:21:17:16:ec:7f:84:7b:ea:f3:9b:c2:7d:80:6b:d3:
a0:d6:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:46 2026 by rpki-client