Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/UQU1US6_3mB56VjeLcRLs-kNhuA.roa
File: UQU1US6_3mB56VjeLcRLs-kNhuA.roa (raw, json)
Hash identifier: yaHOSirjpxdqwqSWsSE6mn+lXHpQJEyqN8mVa5doJVI=
Subject key identifier: 51:05:35:51:2E:BF:DE:60:79:E9:58:DE:2D:C4:4B:B3:E9:0D:86:E0
Certificate issuer: /CN=db8975b24cfb9edc6e8a082fd05b3e1b52319e6c
Certificate serial: 019F2368592D0FF4D86436A21A64AAD5CC05
Authority key identifier: DB:89:75:B2:4C:FB:9E:DC:6E:8A:08:2F:D0:5B:3E:1B:52:31:9E:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24l1skz7ntxuiggv0Fs-G1Ixnmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/UQU1US6_3mB56VjeLcRLs-kNhuA.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49758
IP address blocks: 159.34.0.0/17 maxlen: 17
159.34.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/24l1skz7ntxuiggv0Fs-G1Ixnmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:59:2d:0f:f4:d8:64:36:a2:1a:64:aa:d5:cc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8975b24cfb9edc6e8a082fd05b3e1b52319e6c
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=510535512ebfde6079e958de2dc44bb3e90d86e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:78:fb:01:57:60:b2:e1:08:13:43:77:59:
a3:1f:da:c3:a7:55:79:5e:86:8f:95:71:97:e9:25:
89:c2:3a:ae:d5:65:16:f7:94:e3:f0:e1:67:d2:c4:
8b:8a:fd:60:aa:b0:8a:7c:e0:e7:f8:b3:5f:10:5d:
a4:4a:59:8c:e8:f6:80:d3:7f:98:c4:30:1a:e1:0e:
19:90:fe:a5:1b:a7:97:bb:d8:a5:8e:67:5a:df:08:
e5:ae:2f:43:f0:b6:7d:73:65:79:88:94:c0:03:df:
b8:4c:c5:3f:d6:a5:1e:2e:7c:4d:44:5f:f5:ae:37:
81:c5:c1:b1:9b:8e:b3:50:70:1a:fe:f3:6a:1d:b9:
ab:7e:3e:f3:e6:c3:1e:0a:3e:68:7a:e3:7b:b0:97:
c4:9c:61:15:82:7c:e5:a7:8e:d9:d5:32:54:2a:13:
e4:1d:bb:95:ca:8b:30:38:c2:1a:35:ab:73:45:77:
b8:7b:7e:5f:9f:64:a8:16:ab:27:89:d5:7b:f3:98:
4e:a8:c8:fe:25:ec:57:b8:f7:60:87:1f:e3:8f:81:
ee:5d:23:74:0e:ec:6b:34:30:51:e9:a2:b7:e6:ea:
01:b9:c7:4d:79:7a:10:18:78:3a:7d:2d:28:cc:73:
a8:a0:e7:d1:3a:a5:3e:57:48:c1:c0:3d:63:bf:ed:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:05:35:51:2E:BF:DE:60:79:E9:58:DE:2D:C4:4B:B3:E9:0D:86:E0
X509v3 Authority Key Identifier:
keyid:DB:89:75:B2:4C:FB:9E:DC:6E:8A:08:2F:D0:5B:3E:1B:52:31:9E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24l1skz7ntxuiggv0Fs-G1Ixnmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/UQU1US6_3mB56VjeLcRLs-kNhuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a4ed8e-9de8-4e11-b13e-efeca43173a8/1/24l1skz7ntxuiggv0Fs-G1Ixnmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0e:79:d5:d7:62:b4:47:5f:b8:1d:dd:f3:93:d1:49:a4:e6:e3:
95:fd:8d:b8:64:ab:72:07:fd:3d:de:3c:a3:7b:43:24:41:ae:
76:16:81:2c:f1:6b:97:f3:d4:96:9a:06:36:98:6d:f9:86:59:
7c:4f:c7:51:93:2d:46:3c:72:c7:89:06:c6:c5:02:28:93:ae:
29:38:ab:51:ab:fb:75:e1:56:61:11:67:db:24:86:44:fe:cd:
b3:93:23:40:67:62:10:6f:13:c0:23:8e:f7:4d:6e:49:93:9e:
40:02:fb:a9:7e:5d:85:2e:bd:f3:d8:e1:7d:f2:b3:b8:b9:0d:
49:8a:dd:ea:53:3b:dc:e3:c5:01:66:6a:2c:83:20:72:ab:25:
27:7f:78:c5:64:a6:58:07:fe:b9:0c:28:a6:9c:05:d5:30:2f:
7b:1c:9c:4d:57:46:ed:b8:64:a2:68:a2:da:76:85:b4:fe:5b:
4e:66:11:c5:48:43:12:0a:85:95:2a:16:54:ac:fd:89:74:cd:
c2:8a:2a:c2:56:de:3b:00:8e:ee:09:67:34:e2:5c:45:ad:a2:
6c:9c:70:5b:0a:82:72:1b:96:97:8c:d1:5a:64:4a:f1:81:f6:
90:d9:ec:9c:c8:dc:79:67:de:4f:92:73:d2:91:1e:de:90:74:
56:2a:c1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:44 2026 by rpki-client