Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/UFG3J9tTkqA-ZxiTtLy8xHr9o1c.roa
File: UFG3J9tTkqA-ZxiTtLy8xHr9o1c.roa (raw, json)
Hash identifier: LrOrfYRTpJGJIwPzrccCItcapQMf9yEQgTHQtGu7hkc=
Subject key identifier: 50:51:B7:27:DB:53:92:A0:3E:67:18:93:B4:BC:BC:C4:7A:FD:A3:57
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C88224B7B3A95F6BF61C3244C04A6BD6
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/UFG3J9tTkqA-ZxiTtLy8xHr9o1c.roa
Signing time: Tue 22 Sep 2026 09:46:07 +0000
ROA not before: Tue 22 Sep 2026 09:46:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 2a11:7a00::/29 maxlen: 32
2a11:ec80::/29 maxlen: 32
2a12:2580::/29 maxlen: 32
2a12:d300::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:82:24:b7:b3:a9:5f:6b:f6:1c:32:44:c0:4a:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 09:46:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5051b727db5392a03e671893b4bcbcc47afda357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:92:87:c1:ed:94:48:76:ad:e5:08:53:49:
7e:98:82:bd:4b:49:48:8e:6d:4d:e9:c6:4a:d8:1b:
49:0f:4f:9f:bb:35:6f:07:55:84:fa:ed:54:34:99:
e8:fd:af:50:9e:81:41:2f:12:5c:60:96:f6:9a:7b:
ea:66:e5:15:8e:8f:a3:67:6b:dd:f1:de:4c:59:d8:
a0:e7:74:32:00:79:ff:db:a7:ec:4f:d6:94:7e:64:
7f:27:65:55:39:c2:49:05:68:d1:43:98:ee:e1:10:
61:bc:ff:f3:01:27:c3:09:cc:d1:99:ec:f0:b9:ba:
0a:10:94:71:48:60:09:d6:54:a2:79:16:24:25:f6:
46:ea:47:06:39:dd:51:99:a6:c4:53:fa:58:77:dd:
e6:b4:a8:07:f2:a3:36:2e:00:1f:3c:e6:2b:43:89:
ee:14:c9:99:80:68:33:6e:4e:33:8c:c7:d9:a1:e0:
03:1d:d1:43:a6:d9:b8:c3:99:89:41:d6:f7:7d:ec:
8d:e2:40:5a:3c:9c:a2:ae:65:3d:23:e9:0e:a0:19:
e0:3b:a1:73:9f:14:c6:eb:4a:32:68:b0:1c:54:60:
15:16:5a:f6:b4:af:56:1f:f1:fe:78:a4:e9:bc:ac:
c4:36:89:41:80:da:02:6c:2e:a5:96:94:28:be:91:
89:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:51:B7:27:DB:53:92:A0:3E:67:18:93:B4:BC:BC:C4:7A:FD:A3:57
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/UFG3J9tTkqA-ZxiTtLy8xHr9o1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7a00::/29
2a11:ec80::/29
2a12:2580::/29
2a12:d300::/29
Signature Algorithm: sha256WithRSAEncryption
0f:c5:0f:59:98:f5:b6:d9:16:9c:31:be:42:1c:d1:06:93:b3:
b8:2e:8d:29:17:76:f6:9f:0e:f4:29:f8:b8:f2:9c:6b:fb:21:
f4:6f:66:d1:2d:54:61:5a:ba:08:70:bf:50:98:eb:9e:b4:da:
30:58:23:91:3e:02:ee:62:00:4c:ce:70:0a:82:59:44:97:87:
ef:93:da:7b:5c:c9:fa:f1:f4:f9:c0:f6:94:27:7b:ad:a7:43:
b8:03:8b:42:97:09:aa:4a:32:68:ba:7b:cc:a2:ca:9a:41:ad:
6e:a7:c3:58:70:12:14:2f:82:c9:81:9d:f3:23:64:27:eb:4d:
91:41:04:5d:57:72:01:5b:56:f5:4e:bc:2f:20:db:3f:d9:7d:
62:67:d0:e5:16:3b:bb:f8:a6:ad:05:e1:f3:48:f0:5c:ef:a9:
d3:1d:45:c0:76:df:3b:2a:cf:05:f7:7c:dc:97:eb:05:ce:ec:
a2:72:a2:76:1d:2f:c0:d1:c1:19:a1:bf:da:b7:c0:34:ae:24:
62:37:6f:d7:1f:87:9f:08:01:1b:a9:cd:4e:19:54:6c:16:c9:
f5:d5:e2:c0:22:4d:27:53:ca:fd:bd:4d:a4:cb:93:46:01:49:
d6:c6:64:37:f1:d8:61:ed:03:e4:e8:1d:61:71:88:8c:02:f5:
69:97:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:48:06 2026 by rpki-client