Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/UiuaMadIa34ZVH4JPpb_7TjTz3A.roa
File: UiuaMadIa34ZVH4JPpb_7TjTz3A.roa (raw, json)
Hash identifier: 81//4wt6oj+yRk5h9sBjg6Uv03FMVzZyifdZ80jFUsU=
Subject key identifier: 52:2B:9A:31:A7:48:6B:7E:19:54:7E:09:3E:96:FF:ED:38:D3:CF:70
Certificate issuer: /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial: 019F236924E34DFB24B1BB45F22C5D5B8872
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/UiuaMadIa34ZVH4JPpb_7TjTz3A.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207199
IP address blocks: 91.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:e3:4d:fb:24:b1:bb:45:f2:2c:5d:5b:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=522b9a31a7486b7e19547e093e96ffed38d3cf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:7a:71:f0:f1:d2:7d:6f:58:3c:c1:44:24:
d1:15:ed:57:56:89:14:a7:30:e7:e7:92:a6:38:5d:
3a:f5:67:de:5b:c1:d0:79:04:96:f5:2c:43:0e:45:
b5:d9:7e:61:1a:c7:9e:79:16:8a:05:c5:17:d3:27:
a1:ec:28:ed:61:26:0c:8c:7e:77:a4:27:a1:74:66:
b6:8f:8b:97:f0:d7:88:a9:1e:00:00:e9:8c:2c:0c:
91:2f:08:9c:4a:02:e2:fc:c8:09:24:41:f8:40:65:
04:36:fc:7f:ed:92:da:2b:09:9a:47:34:4e:e6:81:
a8:61:28:84:1b:bb:1e:bd:20:34:48:c0:eb:65:77:
9b:3c:06:43:91:e6:48:f0:8c:32:6b:e3:ef:6e:e7:
02:14:50:cb:07:21:fb:c4:a8:3a:0d:57:ab:23:03:
e1:61:7b:32:48:1c:31:41:ea:a1:91:7d:0a:3b:26:
ed:af:50:69:fb:c9:a7:08:a8:b3:8a:d0:a0:76:04:
b9:63:1c:53:72:da:e8:ff:a2:e5:90:e0:64:65:42:
b1:00:79:41:aa:1d:26:81:ac:d0:21:00:1b:c3:35:
48:28:6d:7c:59:90:09:e1:ec:18:6b:07:91:b6:81:
bd:81:94:d5:7d:15:6b:f3:17:4c:a1:54:85:d4:f5:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2B:9A:31:A7:48:6B:7E:19:54:7E:09:3E:96:FF:ED:38:D3:CF:70
X509v3 Authority Key Identifier:
keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/UiuaMadIa34ZVH4JPpb_7TjTz3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:02:8e:12:a8:c5:0c:eb:1c:20:14:79:b2:04:d5:06:79:97:
7f:58:2a:ea:0d:70:e8:2d:3c:4d:4a:23:4c:16:6e:a7:c2:66:
44:d1:58:c0:3e:de:34:e8:eb:f4:30:72:f0:9b:a8:8e:94:37:
5c:85:18:2c:14:3f:18:2d:44:fb:2c:0c:75:34:ca:9d:ec:1c:
2f:7a:7b:10:8f:fa:6e:e1:15:1c:27:b4:48:80:77:6c:27:9f:
2e:68:cb:d0:40:74:0c:b1:d5:12:86:e6:fa:2e:7f:be:27:af:
37:c8:ba:89:5c:a8:04:19:a2:9a:e3:4a:50:40:bc:51:5e:d2:
39:7e:c8:eb:29:42:cd:e8:5c:44:ac:b6:0d:0f:89:f9:ed:b5:
22:1c:55:a9:e2:18:32:4b:90:01:90:fc:e9:e3:bf:12:f8:76:
1a:95:51:7b:83:df:6c:58:46:89:2f:d0:13:1a:1d:70:62:32:
fa:93:76:3c:a2:68:db:3d:a3:3e:f5:77:1f:3f:4a:9e:c3:1a:
10:c5:dc:61:e2:81:73:31:3a:81:5d:db:63:3e:ad:50:ce:a5:
8c:5e:62:92:89:1c:32:2d:03:26:e3:43:90:9a:e6:af:82:61:
f8:bb:34:1e:49:a1:4f:7b:41:03:4b:a3:4c:81:14:ce:ef:ce:
c0:6f:c3:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaSTjTfsksbtF8ixdW4hyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MWE0YjBlOGYyY2FiYmE2YTI1NjM5NDcyNTIwN2RkZjNl
OTM0MzQwHhcNMjYwNzAyMTUxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjJiOWEzMWE3NDg2YjdlMTk1NDdlMDkzZTk2ZmZlZDM4ZDNjZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEZ6cfDx0n1vWDzBRCTRFe1XVokU
pzDn55KmOF069WfeW8HQeQSW9SxDDkW12X5hGseeeRaKBcUX0yeh7CjtYSYMjH53
pCehdGa2j4uX8NeIqR4AAOmMLAyRLwicSgLi/MgJJEH4QGUENvx/7ZLaKwmaRzRO
5oGoYSiEG7sevSA0SMDrZXebPAZDkeZI8Iwya+PvbucCFFDLByH7xKg6DVerIwPh
YXsySBwxQeqhkX0KOybtr1Bp+8mnCKizitCgdgS5YxxTctro/6LlkOBkZUKxAHlB
qh0mgazQIQAbwzVIKG18WZAJ4ewYaweRtoG9gZTVfRVr8xdMoVSF1PVrEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFIrmjGnSGt+GVR+CT6W/+04089wMB8GA1UdIwQY
MBaAFKkaSw6PLKu6aiVjlHJSB93z6TQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJwTERvOHNxN3BxSldPVWNsSUgzZlBwTkRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUt
OTM3ZGNmZjUxZTJkLzEvVWl1YU1hZElhMzRaVkg0SlBwYl83VGpUejNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kY2Y1NTktYWZiNC00NmI5LWIyZDUtOTM3ZGNmZjUxZTJk
LzEvcVJwTERvOHNxN3BxSldPVWNsSUgzZlBwTkRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+96MA0G
CSqGSIb3DQEBCwUAA4IBAQDDAo4SqMUM6xwgFHmyBNUGeZd/WCrqDXDoLTxNSiNM
Fm6nwmZE0VjAPt406Ov0MHLwm6iOlDdchRgsFD8YLUT7LAx1NMqd7BwvensQj/pu
4RUcJ7RIgHdsJ58uaMvQQHQMsdUShub6Ln++J683yLqJXKgEGaKa40pQQLxRXtI5
fsjrKULN6FxErLYND4n57bUiHFWp4hgyS5ABkPzp478S+HYalVF7g99sWEaJL9AT
Gh1wYjL6k3Y8omjbPaM+9XcfP0qewxoQxdxh4oFzMTqBXdtjPq1QzqWMXmKSiRwy
LQMm40OQmuavgmH4uzQeSaFPe0EDS6NMgRTO787Ab8PT
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:05 2026 by rpki-client