Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uVC-d1dBLfIIgNO0_VfI1vrQmUU.roa
File: uVC-d1dBLfIIgNO0_VfI1vrQmUU.roa (raw, json)
Hash identifier: LqfQs8xp7q9Ofv2l1XrO8IUWTHFjHJ8bwy1hj4f5Xq8=
Subject key identifier: B9:50:BE:77:57:41:2D:F2:08:80:D3:B4:FD:57:C8:D6:FA:D0:99:45
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1C716D45CA0D455E451F4501374EC8C47
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uVC-d1dBLfIIgNO0_VfI1vrQmUU.roa
Signing time: Tue 10 Nov 2026 20:12:04 +0000
ROA not before: Tue 10 Nov 2026 20:12:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33124
IP address blocks: 2.26.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:16:d4:5c:a0:d4:55:e4:51:f4:50:13:74:ec:8c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Nov 10 20:12:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b950be7757412df20880d3b4fd57c8d6fad09945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8e:9f:25:ae:25:81:59:69:3e:da:b3:24:11:
79:b3:f4:58:4a:7c:f8:ea:02:c7:5f:00:8f:5a:27:
6c:02:a8:4e:96:92:68:c6:f6:6c:01:fe:4f:94:64:
4a:36:8b:20:e3:e7:6b:ae:79:72:dc:7f:10:d2:c9:
19:a6:16:80:eb:bc:7d:1c:61:bc:ea:d3:59:aa:7a:
a3:b8:97:31:6b:23:02:d1:1e:2d:a5:a0:e4:35:aa:
09:07:2c:3c:c2:25:0b:21:f7:74:6e:c6:32:39:f6:
20:31:b0:e3:a1:01:42:54:04:3a:90:6f:74:0d:cb:
12:44:c9:4a:55:13:1e:97:a1:52:36:ea:9b:dc:41:
59:ed:cd:25:a0:66:00:ea:34:fb:12:59:b6:94:7b:
e3:c6:b9:a5:d1:49:4e:b9:72:6a:ba:30:7f:d0:86:
82:2f:67:59:d9:b7:1a:a5:96:28:76:14:16:2c:ee:
b5:b8:c0:44:b6:b2:8b:dc:40:7f:22:85:de:17:0a:
1e:8f:b0:03:2e:11:90:53:68:dd:3c:3b:90:97:ab:
18:40:f0:f9:d2:60:11:f5:b7:75:40:c7:3d:f3:ae:
38:13:00:8c:7a:9f:3e:be:96:3d:66:0f:59:44:98:
59:fd:48:08:7d:0e:60:0d:1d:81:0e:b0:6d:99:97:
05:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:50:BE:77:57:41:2D:F2:08:80:D3:B4:FD:57:C8:D6:FA:D0:99:45
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/uVC-d1dBLfIIgNO0_VfI1vrQmUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.208.0/21
Signature Algorithm: sha256WithRSAEncryption
26:e5:9d:32:c2:1d:6c:2a:f1:71:a8:4e:6e:88:f2:e9:7f:ac:
66:61:00:b8:55:28:ec:f7:69:a4:cb:6f:20:c5:4b:30:f3:ed:
d3:4b:43:bf:7e:1d:02:32:dd:8a:65:19:35:3e:42:b4:6c:ff:
f8:f7:6c:9e:b8:d0:71:ca:be:84:2b:2c:64:e6:d1:6f:ba:53:
83:1a:ae:d3:2e:ec:58:b3:fb:2e:9d:5c:70:74:fa:f7:e2:47:
0c:7b:10:8d:ea:42:4c:cc:6e:66:71:3b:96:31:56:4e:3a:db:
80:15:f8:21:a6:cf:ed:48:02:45:22:0f:8c:b5:62:d7:e3:63:
e6:b3:44:cf:8b:a4:25:65:3b:fe:a5:36:74:d9:ae:be:76:22:
31:27:e4:be:1a:d4:a4:93:23:5d:0c:5c:39:44:52:f5:14:e1:
5e:37:1e:12:d9:c4:d8:99:11:5f:c3:0f:19:25:b0:ae:69:44:
bb:e8:a1:0c:1a:5c:15:2c:89:10:6b:20:51:bd:90:cb:70:c4:
85:20:71:ce:2c:ad:7a:03:29:23:08:a3:76:3f:1d:68:ea:74:
07:89:d2:c7:0d:64:d6:76:de:99:ae:a3:fa:fd:1e:07:f7:70:
cf:98:60:99:23:ad:4c:d1:4c:12:91:29:2b:47:df:91:f0:02:
7e:c9:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:49 2026 by rpki-client