Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/UxJIkNFFgGyZ3Sx6FuTQTM_feak.roa
File: UxJIkNFFgGyZ3Sx6FuTQTM_feak.roa (raw, json)
Hash identifier: uFaGUNwRr3rUdcztpsTcVQC4D2nmfv7IJ6nyqJNEfF8=
Subject key identifier: 53:12:48:90:D1:45:80:6C:99:DD:2C:7A:16:E4:D0:4C:CF:DF:79:A9
Certificate issuer: /CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Certificate serial: 019F2368E74D9B66A23DD2464B2853EC21AD
Authority key identifier: 8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/UxJIkNFFgGyZ3Sx6FuTQTM_feak.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6797
IP address blocks: 2a00:4961::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e7:4d:9b:66:a2:3d:d2:46:4b:28:53:ec:21:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a3df8838cf34e5fa639c86dd0fd58da390fca
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53124890d145806c99dd2c7a16e4d04ccfdf79a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:87:ea:e9:fc:fe:a1:21:10:7c:8b:29:7a:f6:
6b:46:13:04:6c:7c:e6:14:9a:e1:db:0a:b4:a9:ef:
9e:a4:a2:f2:fd:f7:d2:80:95:b0:3e:0c:c6:a3:f5:
16:fa:ff:9c:96:e0:a6:a9:90:c7:0b:d8:91:1b:d8:
29:eb:7b:f4:69:e1:b7:99:27:00:bc:94:0c:53:a2:
bd:bf:1f:88:71:c7:05:13:f8:e5:90:6b:93:6b:89:
d5:8f:9d:18:58:85:e9:e5:1b:01:18:e5:e5:2c:5a:
65:7e:74:ac:83:f8:11:04:a1:30:6c:f2:c3:38:9b:
28:63:29:db:a8:9d:0e:6b:be:de:32:65:35:a0:fa:
0f:f3:1b:b3:bf:8c:a6:c0:3d:9e:53:bf:be:8e:ad:
a4:ae:9c:f3:91:4d:e9:5a:d3:7b:e8:2f:e7:21:66:
2a:aa:e6:76:aa:51:a8:12:d0:b2:2a:8c:a3:46:6d:
6f:d3:2e:70:41:f0:ea:f4:3c:d4:fc:a5:ed:a7:73:
b7:96:65:c4:92:17:4d:d9:1e:e0:cc:c5:ed:54:8e:
b7:97:91:3d:22:e1:b1:0a:17:5b:fe:a5:02:17:9a:
c9:2f:ee:a0:d9:cd:c1:60:9c:6e:39:15:d3:1a:8e:
df:e3:b2:8d:20:b6:37:25:70:2c:e0:e0:2a:73:63:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:12:48:90:D1:45:80:6C:99:DD:2C:7A:16:E4:D0:4C:CF:DF:79:A9
X509v3 Authority Key Identifier:
keyid:8F:0A:3D:F8:83:8C:F3:4E:5F:A6:39:C8:6D:D0:FD:58:DA:39:0F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwo9-IOM805fpjnIbdD9WNo5D8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/UxJIkNFFgGyZ3Sx6FuTQTM_feak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/jwo9-IOM805fpjnIbdD9WNo5D8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4961::/32
Signature Algorithm: sha256WithRSAEncryption
2a:31:0d:08:19:97:2e:ac:f8:e4:5c:3f:59:4e:38:e2:45:e8:
61:51:d7:91:96:1b:55:8c:5f:7f:29:3f:17:e6:97:04:de:a0:
31:32:8e:da:0b:dc:94:ed:5e:11:62:83:f7:92:c8:9e:3c:79:
f2:72:ea:78:98:c1:5c:45:94:f3:b0:a6:52:3a:34:7e:3c:cd:
15:18:e2:fd:e2:90:12:0c:06:cc:cf:0d:fb:fc:37:4c:e1:95:
5c:2c:af:a2:03:3b:62:63:22:0c:ce:ce:97:e5:1f:b1:3f:b4:
d9:b0:d3:67:26:14:f8:5a:0d:ab:3c:e2:50:b4:d3:81:e8:bc:
c2:d6:bb:be:2b:5b:63:1f:68:a5:cb:51:f9:a6:a2:48:02:9c:
ac:09:25:14:74:3a:24:e3:88:54:de:69:1c:28:60:36:6f:2f:
1a:86:e6:b1:93:69:7f:ab:c2:f0:58:91:13:5b:46:d1:63:f8:
34:bf:50:13:54:a9:bd:ae:54:0d:70:d5:0a:a5:a2:87:dd:d4:
82:3e:ee:cd:04:96:b0:43:6c:b8:f6:78:bd:8a:18:13:7e:96:
34:ea:ea:23:eb:49:87:01:b0:bd:87:1a:4f:22:7f:18:c1:71:
90:28:50:4a:0d:28:56:c7:3a:ee:b5:36:c4:69:9f:48:99:ae:
5f:99:0e:ce
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8jaOdNm2aiPdJGSyhT7CGtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEzZGY4ODM4Y2YzNGU1ZmE2MzljODZkZDBmZDU4ZGEz
OTBmY2EwHhcNMjYwNzAyMTUxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzEyNDg5MGQxNDU4MDZjOTlkZDJjN2ExNmU0ZDA0Y2NmZGY3OWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Yfq6fz+oSEQfIspevZrRhMEbHzm
FJrh2wq0qe+epKLy/ffSgJWwPgzGo/UW+v+cluCmqZDHC9iRG9gp63v0aeG3mScA
vJQMU6K9vx+IcccFE/jlkGuTa4nVj50YWIXp5RsBGOXlLFplfnSsg/gRBKEwbPLD
OJsoYynbqJ0Oa77eMmU1oPoP8xuzv4ymwD2eU7++jq2krpzzkU3pWtN76C/nIWYq
quZ2qlGoEtCyKoyjRm1v0y5wQfDq9DzU/KXtp3O3lmXEkhdN2R7gzMXtVI63l5E9
IuGxChdb/qUCF5rJL+6g2c3BYJxuORXTGo7f47KNILY3JXAs4OAqc2NgowIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFFMSSJDRRYBsmd0sehbk0EzP33mpMB8GA1UdIwQY
MBaAFI8KPfiDjPNOX6Y5yG3Q/VjaOQ/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQt
OWM4NGYyZmRkOGYwLzEvVXhKSWtORkZnR3laM1N4NkZ1VFFUTV9mZWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iODA1OGUtNGViYS00Y2M0LThjMWQtOWM4NGYyZmRkOGYw
LzEvandvOS1JT004MDVmcGpuSWJkRDlXTm81RDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgBJYTAN
BgkqhkiG9w0BAQsFAAOCAQEAKjENCBmXLqz45Fw/WU444kXoYVHXkZYbVYxffyk/
F+aXBN6gMTKO2gvclO1eEWKD95LInjx58nLqeJjBXEWU87CmUjo0fjzNFRji/eKQ
EgwGzM8N+/w3TOGVXCyvogM7YmMiDM7Ol+UfsT+02bDTZyYU+FoNqzziULTTgei8
wta7vitbYx9opctR+aaiSAKcrAklFHQ6JOOIVN5pHChgNm8vGobmsZNpf6vC8FiR
E1tG0WP4NL9QE1Spva5UDXDVCqWih93Ugj7uzQSWsENsuPZ4vYoYE36WNOrqI+tJ
hwGwvYcaTyJ/GMFxkChQSg0oVsc67rU2xGmfSJmuX5kOzg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:57 2026 by rpki-client