Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uykz-kAzxHlG06pifAtv9WqfVJY.roa
File: Uykz-kAzxHlG06pifAtv9WqfVJY.roa (raw, json)
Hash identifier: 1yZvpeWy0ApSzKzu7MOgq4CMJoV5rC6Z6llxfrKA+L8=
Subject key identifier: 53:29:33:FA:40:33:C4:79:46:D3:AA:62:7C:0B:6F:F5:6A:9F:54:96
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DDD7E85A9CFF0D093FC2E5ADF6594E39D
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uykz-kAzxHlG06pifAtv9WqfVJY.roa
Signing time: Thu 30 Apr 2026 08:25:49 +0000
ROA not before: Thu 30 Apr 2026 08:25:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200993
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:7e:85:a9:cf:f0:d0:93:fc:2e:5a:df:65:94:e3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 30 08:25:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=532933fa4033c47946d3aa627c0b6ff56a9f5496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:ac:87:f2:9c:70:d1:fd:67:4a:d9:b9:15:
49:3c:80:14:a0:89:72:87:f2:47:8b:d4:ed:00:6d:
09:7d:d7:2c:65:43:f3:32:e2:6d:c4:90:14:3c:88:
7c:1d:0d:7c:18:9b:98:eb:ce:5e:cd:ef:54:a2:62:
e3:0b:86:12:11:61:84:44:ea:1f:df:fd:60:86:f2:
6b:ff:6d:56:b4:e0:90:52:8e:22:7a:e4:c7:63:5d:
98:0e:3b:c7:00:d1:e0:c0:92:72:f8:41:cc:44:29:
14:e5:fa:73:15:ad:f0:de:b8:45:40:09:ea:e3:6a:
2d:46:3f:df:f2:13:9d:b4:4a:e1:08:3a:dd:8c:9f:
85:73:d2:cd:5b:a5:55:ff:fe:c7:fc:27:f6:1c:3a:
65:3b:6d:03:ff:d2:82:88:24:c0:48:1b:77:f0:37:
3b:72:0e:a2:78:dc:77:80:0b:5b:7d:31:dd:16:3b:
74:7e:90:da:97:2a:37:6f:6c:89:65:d5:6e:7e:d8:
0a:d2:f5:5e:b6:7a:e0:c2:fb:c9:ee:bb:34:0d:f9:
af:18:ad:db:70:64:34:69:96:dd:a1:29:bb:e4:55:
80:9b:44:20:5a:82:92:c7:89:6a:c2:7b:1b:f7:f8:
6e:aa:1c:47:b9:fa:6f:db:ad:b0:c8:82:33:fa:cd:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:29:33:FA:40:33:C4:79:46:D3:AA:62:7C:0B:6F:F5:6A:9F:54:96
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Uykz-kAzxHlG06pifAtv9WqfVJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
56:14:85:d7:e0:8e:fc:5b:c3:fc:b2:55:53:e5:99:1f:14:20:
ce:9b:df:b8:d2:35:25:30:11:65:f6:3e:bc:97:1f:40:69:e5:
0b:b2:71:bf:ae:60:12:c5:d8:15:e5:bf:f3:5a:54:5a:7d:8a:
64:e9:dc:c0:0f:65:1c:22:76:7a:9a:73:b4:79:3c:4e:79:ff:
77:b5:cf:9a:53:6e:e4:4b:45:59:6c:2a:a0:70:86:71:f0:b6:
09:00:79:da:6f:92:59:c6:36:e2:3f:8b:7a:60:cc:fa:6a:9e:
11:f4:ed:17:5c:97:f3:33:d5:9f:ca:cf:e5:12:9e:6b:46:97:
c3:9c:21:33:52:c0:49:eb:ee:df:37:e4:3c:88:42:c2:fa:c3:
c9:e5:3d:f7:55:d8:45:12:d1:7d:05:16:ee:f9:5a:f2:7b:fb:
06:c0:63:97:a0:4a:c3:a4:c9:a1:01:f9:10:00:c9:20:fc:ef:
07:c2:34:41:4f:f4:0a:ba:2d:77:c3:ef:45:40:0e:4f:ec:17:
1c:6f:b3:08:48:9b:ed:8c:d8:76:bd:b6:5e:f7:d4:4b:de:39:
ba:db:bf:48:e2:da:02:af:76:16:97:b9:09:4c:3a:d6:30:b4:
d8:9a:9c:2d:e9:21:32:a0:c2:a1:62:48:77:8a:94:ed:a2:7a:
e9:5a:43:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3dfoWpz/DQk/wuWt9llOOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNDMwMDgyNTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzI5MzNmYTQwMzNjNDc5NDZkM2FhNjI3YzBiNmZmNTZhOWY1NDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEesh/KccNH9Z0rZuRVJPIAUoIly
h/JHi9TtAG0JfdcsZUPzMuJtxJAUPIh8HQ18GJuY685eze9UomLjC4YSEWGEROof
3/1ghvJr/21WtOCQUo4ieuTHY12YDjvHANHgwJJy+EHMRCkU5fpzFa3w3rhFQAnq
42otRj/f8hOdtErhCDrdjJ+Fc9LNW6VV//7H/Cf2HDplO20D/9KCiCTASBt38Dc7
cg6ieNx3gAtbfTHdFjt0fpDalyo3b2yJZdVuftgK0vVetnrgwvvJ7rs0DfmvGK3b
cGQ0aZbdoSm75FWAm0QgWoKSx4lqwnsb9/huqhxHufpv262wyIIz+s2GZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFMpM/pAM8R5RtOqYnwLb/Vqn1SWMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVXlrei1rQXp4SGxHMDZwaWZBdHY5V3FmVkpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+GMA0G
CSqGSIb3DQEBCwUAA4IBAQBWFIXX4I78W8P8slVT5ZkfFCDOm9+40jUlMBFl9j68
lx9AaeULsnG/rmASxdgV5b/zWlRafYpk6dzAD2UcInZ6mnO0eTxOef93tc+aU27k
S0VZbCqgcIZx8LYJAHnab5JZxjbiP4t6YMz6ap4R9O0XXJfzM9Wfys/lEp5rRpfD
nCEzUsBJ6+7fN+Q8iELC+sPJ5T33VdhFEtF9BRbu+Vrye/sGwGOXoErDpMmhAfkQ
AMkg/O8HwjRBT/QKui13w+9FQA5P7Bccb7MISJvtjNh2vbZe99RL3jm6279I4toC
r3YWl7kJTDrWMLTYmpwt6SEyoMKhYkh3ipTtonrpWkPH
-----END CERTIFICATE-----
Generated at Tue May 12 21:39:05 2026 by rpki-client