Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/umA8ie990SaJO3qAQ7xl_O3i6jM.roa
File: umA8ie990SaJO3qAQ7xl_O3i6jM.roa (raw, json)
Hash identifier: QhoEkmFGY40VFv9BAqjKSQOiC3qc6ciaemVpb78Q6Lo=
Subject key identifier: BA:60:3C:89:EF:7D:D1:26:89:3B:7A:80:43:BC:65:FC:ED:E2:EA:33
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 019F8AB967CAC9E167859A8403A8786D5285
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/umA8ie990SaJO3qAQ7xl_O3i6jM.roa
Signing time: Wed 22 Jul 2026 16:47:14 +0000
ROA not before: Wed 22 Jul 2026 16:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 5.102.38.0/24 maxlen: 24
195.5.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:b9:67:ca:c9:e1:67:85:9a:84:03:a8:78:6d:52:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Jul 22 16:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba603c89ef7dd126893b7a8043bc65fcede2ea33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:8a:e1:09:fc:02:a7:8f:7e:f3:30:dd:01:
78:d5:40:13:d9:75:5e:63:ae:ee:d3:ff:0d:86:ce:
17:1d:2b:7a:3f:7e:e5:cf:cc:71:de:8e:75:61:d6:
f8:93:8a:85:eb:66:4d:dd:f0:cb:30:f0:b6:89:4b:
0e:6d:53:2d:f7:12:97:21:5e:c9:37:e3:c7:8a:24:
04:23:4b:6f:f8:02:41:f3:52:0b:f1:54:71:ec:9e:
70:38:ea:21:22:92:f3:b0:82:37:3f:30:8e:fe:0b:
93:0c:ce:85:cc:10:e0:a0:27:62:f4:dd:a3:84:3e:
b2:be:13:d9:c8:a8:e7:dc:5d:49:5b:4c:3c:79:fe:
0a:d4:c9:5a:ca:49:9b:a8:c3:23:d6:a6:07:b4:7f:
da:c4:4b:47:81:c3:e9:03:6e:a3:ab:e6:e7:87:be:
bf:ab:a5:9a:b7:08:26:ca:78:aa:8a:43:bc:f3:ba:
de:89:77:50:79:ee:d7:3e:9a:77:b3:7b:8d:0c:5f:
07:b1:37:07:27:41:11:df:49:b9:b8:f0:91:c8:fa:
7b:75:13:9d:d0:c8:39:1e:cc:a8:3c:7c:28:bf:52:
4f:1e:a3:72:bf:6f:f5:63:21:bd:5f:ab:fc:cb:4c:
1f:23:a7:c9:c1:c6:8a:0d:93:1c:ad:e7:6b:b7:16:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:60:3C:89:EF:7D:D1:26:89:3B:7A:80:43:BC:65:FC:ED:E2:EA:33
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/umA8ie990SaJO3qAQ7xl_O3i6jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
195.5.125.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:73:e3:ff:3b:5b:65:16:8c:8a:cd:67:5f:32:d6:58:96:69:
ca:63:11:dd:5f:90:51:86:d7:1d:5e:37:94:0f:26:6e:df:42:
e6:54:ee:38:22:68:4d:c6:47:bb:3e:b5:55:7e:30:a2:6e:ff:
9a:81:42:a8:87:16:96:05:e7:b0:7a:11:43:ac:db:4a:3e:63:
bb:1d:af:29:57:f3:bb:d6:f8:32:79:dd:bf:37:62:bd:c2:2d:
22:83:9a:de:68:08:84:3e:6d:33:62:12:ee:87:72:89:33:53:
e0:77:1e:63:3b:10:0d:af:e9:4c:24:ce:e1:03:d5:70:97:10:
e5:08:94:dc:a6:69:fc:17:8f:9d:c8:d9:05:97:e4:83:aa:72:
3c:3d:bb:50:cc:2d:a3:99:a0:7b:1b:19:84:b6:26:2a:be:05:
b5:75:ff:be:58:ee:ac:9e:3d:67:0c:6a:5b:db:95:b0:c3:83:
04:2a:e2:02:37:07:19:6d:cc:1e:19:34:f0:cc:2c:ef:e6:9c:
b7:bd:3a:3a:46:ef:16:49:ca:bc:c6:a1:f3:05:0e:40:b0:8a:
be:f4:ed:18:9e:a8:e1:3b:10:62:6e:7c:06:21:3c:cb:dc:05:
8a:d3:3b:5f:d7:c0:d0:e0:2e:44:28:f9:89:be:45:da:6d:9f:
cb:09:96:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:58 2026 by rpki-client