Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uuTZAmC99bC96ajDbvvCYePHio8.roa
File: uuTZAmC99bC96ajDbvvCYePHio8.roa (raw, json)
Hash identifier: Qt/apIguL7fuYaS1jD9ifkkxUobXjW9S62PKATXrL58=
Subject key identifier: BA:E4:D9:02:60:BD:F5:B0:BD:E9:A8:C3:6E:FB:C2:61:E3:C7:8A:8F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0C497A66B3AD3778559CE30B0523BCA31
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uuTZAmC99bC96ajDbvvCYePHio8.roa
Signing time: Mon 21 Sep 2026 15:31:07 +0000
ROA not before: Mon 21 Sep 2026 15:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 201.14.223.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:97:a6:6b:3a:d3:77:85:59:ce:30:b0:52:3b:ca:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 21 15:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bae4d90260bdf5b0bde9a8c36efbc261e3c78a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:b5:ce:aa:d5:01:f9:86:c0:69:c5:22:73:
3b:dc:37:c7:d8:d0:df:fc:58:f8:61:d5:cc:b2:a1:
57:41:ec:f1:13:b8:b7:3c:7c:10:2e:6b:f9:25:2b:
bc:ee:dd:81:e8:50:d8:4a:d4:40:12:de:e0:4d:60:
dc:3f:a3:8d:43:0e:53:87:99:3b:17:e1:54:5c:a0:
46:3a:c8:d3:88:e8:9d:ab:60:7b:f6:10:90:35:08:
01:9b:28:c9:1d:71:1f:a3:3e:1d:ab:1a:85:55:0c:
bf:2c:b7:9b:1a:42:ac:c2:9c:d9:48:48:9d:cb:b3:
0c:ad:2b:c1:34:a3:a8:b4:13:ee:04:af:57:a3:6b:
dd:43:f2:18:38:d5:e7:45:d5:5f:f7:97:ac:9e:d5:
2a:66:e4:53:83:96:55:06:1a:17:e0:a3:2d:f8:3f:
b3:10:d5:ce:47:90:89:b3:0f:cb:17:ac:df:e0:b0:
9e:12:bf:33:47:77:30:b7:ba:6a:f8:5c:e5:e1:10:
64:6d:85:3d:6e:34:6b:f9:c5:bd:d3:57:f6:bc:4b:
ed:f3:36:77:99:73:fa:69:57:a5:2a:3c:fe:d7:d6:
e3:99:d8:8f:27:79:87:3d:49:b3:6a:bb:54:22:2b:
0e:cd:39:32:1f:ad:06:ab:59:29:bf:75:95:36:9c:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E4:D9:02:60:BD:F5:B0:BD:E9:A8:C3:6E:FB:C2:61:E3:C7:8A:8F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/uuTZAmC99bC96ajDbvvCYePHio8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.14.223.0/24
201.24.204.0/24
Signature Algorithm: sha256WithRSAEncryption
81:11:6a:17:b9:24:72:8f:ee:e3:7f:d1:d2:35:11:c9:c2:d0:
6a:9a:86:78:23:e4:25:3d:ce:2e:0c:9e:97:b5:37:8d:01:14:
90:c6:e8:7d:11:b6:5c:74:9f:70:44:96:d7:6e:37:db:50:66:
25:e3:cc:e0:39:5d:34:33:c5:d9:8e:b3:d8:26:c0:b9:19:41:
3c:e1:3d:06:e2:23:5e:38:91:1b:05:11:29:6c:0d:b9:fb:c3:
47:de:80:bd:8d:e3:8b:7e:5e:22:dd:0d:6f:06:36:31:a7:8d:
77:06:45:2d:c3:f6:48:a9:3d:75:06:76:3a:e4:36:ed:80:98:
34:3d:fc:fc:ca:cc:a1:f5:f7:17:84:b8:64:3c:7b:b8:3a:14:
f9:cc:b6:f2:f2:32:38:fc:5f:1b:41:43:8d:92:af:85:7c:b1:
5e:2f:a9:ba:e0:f5:43:ab:29:50:0f:62:f6:b8:9b:7c:fa:12:
b1:52:31:85:53:ba:c2:a2:34:78:dd:04:81:e1:23:ee:f5:87:
71:bd:00:2e:53:93:be:03:a2:9d:7a:77:37:64:39:fc:ad:51:
57:cf:d9:bd:bf:b0:18:57:e6:74:66:33:55:75:3c:81:ea:33:
60:78:22:33:05:5c:88:98:b8:61:85:68:2a:6e:0b:0c:fc:d8:
8b:0f:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:56:04 2026 by rpki-client