Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/uO0OosOwCej1iPeBEJLacTu1fCc.roa
File: uO0OosOwCej1iPeBEJLacTu1fCc.roa (raw, json)
Hash identifier: LfdF8YBX+rkhAtFJtkhf9XAqvZMs95yfwOPQhktKFPE=
Subject key identifier: B8:ED:0E:A2:C3:B0:09:E8:F5:88:F7:81:10:92:DA:71:3B:B5:7C:27
Certificate issuer: /CN=a87b82ef7140312709a5d2a6d68681a60aea8d65
Certificate serial: 019F236920126058E8B5BA43DC9F45596883
Authority key identifier: A8:7B:82:EF:71:40:31:27:09:A5:D2:A6:D6:86:81:A6:0A:EA:8D:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHuC73FAMScJpdKm1oaBpgrqjWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/uO0OosOwCej1iPeBEJLacTu1fCc.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60893
IP address blocks: 178.211.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHuC73FAMScJpdKm1oaBpgrqjWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:12:60:58:e8:b5:ba:43:dc:9f:45:59:68:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87b82ef7140312709a5d2a6d68681a60aea8d65
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b8ed0ea2c3b009e8f588f7811092da713bb57c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:3d:d8:d5:47:86:5a:fa:0d:e1:83:a1:45:
ca:6a:02:cc:ac:39:75:d2:99:67:d5:3a:93:ee:12:
20:22:17:e2:98:88:7e:c9:df:9e:10:48:76:20:fe:
c4:b1:ec:97:2a:ef:e2:ea:fb:97:c4:ea:23:8e:84:
e0:da:28:d2:d9:4c:c2:8f:5f:e9:f9:6a:f1:03:79:
92:4b:87:16:ea:99:15:6a:d4:5e:fd:53:05:6d:2a:
93:a8:42:3d:4e:a1:12:72:8b:98:f9:78:69:a8:ea:
23:97:10:61:d5:49:a1:a4:50:e7:5a:f0:ad:3f:32:
7f:92:8f:6e:84:f6:fd:eb:9f:11:f5:ab:b0:b7:ae:
85:6d:23:15:23:92:cb:87:bd:22:b9:28:47:23:fb:
84:dc:13:fb:a2:27:9c:b7:82:24:3e:2a:a2:42:8e:
57:34:48:d5:f6:be:20:7d:0f:25:67:97:5a:e0:58:
79:86:1a:1e:3b:e2:d2:3b:41:c1:91:5b:84:ca:48:
72:73:79:70:b8:1a:9c:2f:36:af:d8:07:3c:d8:ca:
5c:9e:4e:09:e3:3a:94:78:c0:14:a7:13:7e:b4:38:
2c:e8:97:33:07:7d:a7:bd:91:b1:e0:d9:71:e1:ff:
62:bc:54:d2:c4:68:80:d7:80:88:59:5a:d0:0d:1f:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:ED:0E:A2:C3:B0:09:E8:F5:88:F7:81:10:92:DA:71:3B:B5:7C:27
X509v3 Authority Key Identifier:
keyid:A8:7B:82:EF:71:40:31:27:09:A5:D2:A6:D6:86:81:A6:0A:EA:8D:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHuC73FAMScJpdKm1oaBpgrqjWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/uO0OosOwCej1iPeBEJLacTu1fCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5353ba-e520-4fb9-bd0b-a9c5eed85ba7/1/qHuC73FAMScJpdKm1oaBpgrqjWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.138.0/24
Signature Algorithm: sha256WithRSAEncryption
61:eb:07:57:2a:3b:62:10:b3:11:75:b7:dc:a9:c2:01:0c:eb:
a1:de:f3:65:be:aa:5b:2b:f1:26:7b:05:8f:d6:f4:ba:5b:5f:
8c:21:af:4e:e4:94:a5:82:82:79:a2:31:f0:df:ec:81:34:cf:
54:92:25:e8:66:9f:eb:d4:40:72:c1:a5:ed:8e:5a:0a:28:68:
f0:3f:f0:75:b3:a9:78:c7:49:a7:9e:e4:9d:9c:1e:1b:a3:af:
ad:a0:28:c4:91:99:29:08:22:eb:af:6f:8c:2e:02:71:22:a2:
b7:b9:e8:00:68:b5:88:b3:cd:11:64:43:4b:81:70:4f:10:80:
01:d7:3e:26:4b:bc:3d:96:c0:b3:9e:72:41:d0:fa:a6:74:34:
b8:78:27:05:e5:7e:17:f5:fe:32:17:84:aa:87:8e:3d:02:25:
d2:b0:ef:4a:91:d7:c7:ac:b3:1c:1d:85:bf:96:a4:e6:c1:a8:
62:59:20:e1:f9:6f:18:6a:05:49:10:3f:21:2b:f5:fb:0e:d1:
3d:a5:c3:3f:45:2c:f5:b7:a7:39:b7:3b:10:a7:d6:8e:22:33:
7f:49:36:26:a8:45:0a:c5:b2:14:36:79:26:05:e2:f4:8b:49:
d9:fd:86:e9:bc:83:d9:b4:17:ed:f7:70:00:4b:69:63:09:3d:
9d:91:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:30 2026 by rpki-client