Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Uhz95GtLrrNWpO8ON4z3szUmjmI.roa
File: Uhz95GtLrrNWpO8ON4z3szUmjmI.roa (raw, json)
Hash identifier: K9tEDc8amWi3eCTZ4jyiDXvcA0ZWKgiwRbLmUPFDDN0=
Subject key identifier: 52:1C:FD:E4:6B:4B:AE:B3:56:A4:EF:0E:37:8C:F7:B3:35:26:8E:62
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D202FD897D09D1B0498F730091609E79C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Uhz95GtLrrNWpO8ON4z3szUmjmI.roa
Signing time: Tue 24 Mar 2026 14:11:39 +0000
ROA not before: Tue 24 Mar 2026 14:11:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 81.168.117.0/24 maxlen: 24
89.213.182.0/24 maxlen: 24
212.38.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:2f:d8:97:d0:9d:1b:04:98:f7:30:09:16:09:e7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 24 14:11:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=521cfde46b4baeb356a4ef0e378cf7b335268e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:41:b8:f7:db:94:b1:fc:fa:4d:b9:81:b7:3f:
0f:4e:2b:e1:ad:ea:58:9d:cd:20:95:ee:fa:9d:7f:
ef:a5:69:9b:bb:69:95:2d:5a:79:4c:3c:91:23:7e:
eb:53:4a:c3:51:ce:5d:fc:1b:8a:3b:44:19:90:59:
f7:ad:0a:c5:aa:7e:89:61:95:f4:18:fc:7d:52:11:
77:2a:03:1e:5d:6e:44:56:9d:6b:f7:06:53:7f:56:
69:ff:8d:ce:f8:7c:cb:40:e1:38:b9:b7:dd:73:a4:
48:b6:19:e6:af:df:69:9b:67:76:5c:d3:7f:ae:53:
73:8f:5b:27:23:44:73:a1:32:97:29:b2:d1:d9:d9:
d4:56:50:22:95:7c:05:53:8b:7c:91:ad:e0:9e:e4:
d0:1d:6a:3b:0d:8b:ce:8d:26:d0:57:d8:4b:f7:82:
57:72:27:4a:eb:66:56:f7:8c:0e:93:f1:46:2d:bd:
66:5d:7a:99:f4:a3:35:3a:bf:68:ad:7b:29:fb:ed:
cb:95:1f:33:db:ed:c9:80:e3:e9:56:af:f8:12:26:
37:d9:70:fe:23:88:bc:10:fc:56:34:c4:e6:e7:5c:
57:0a:a8:99:fd:c3:42:b5:4b:91:60:0a:77:71:17:
2e:29:f4:59:5e:6f:e7:7c:a8:e8:71:6b:4a:77:61:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1C:FD:E4:6B:4B:AE:B3:56:A4:EF:0E:37:8C:F7:B3:35:26:8E:62
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Uhz95GtLrrNWpO8ON4z3szUmjmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.117.0/24
89.213.182.0/24
212.38.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:29:08:7a:c6:15:e1:35:e3:61:ff:4a:8f:43:f1:cc:66:19:
18:c1:d9:1b:15:8b:78:b3:15:92:1b:54:3b:f7:57:ca:60:80:
99:3c:60:f3:71:ba:7c:57:35:2c:11:35:39:3d:c3:f8:47:88:
5f:c1:a1:2b:61:ed:93:9b:ef:95:87:58:c5:18:60:8a:c1:1c:
32:7a:d5:ae:41:72:56:61:10:bb:28:ff:e9:a5:45:3d:5e:f3:
a2:93:bc:bb:f2:5c:a8:56:0b:7a:7a:c7:15:0f:6e:90:ff:cf:
10:36:1d:3e:67:8d:a5:d5:65:18:25:78:64:f7:e1:f9:2b:cf:
87:38:92:9e:06:65:fb:88:88:21:12:6a:cf:9b:ec:e0:e5:59:
ca:d5:06:49:89:b0:1a:14:a0:aa:ce:36:c6:55:ca:49:ab:46:
f5:f4:65:95:fa:58:1b:77:bf:43:c5:80:c9:fd:02:aa:3f:f5:
df:b8:ad:14:4c:2e:12:f8:8d:1a:40:e7:91:46:bb:2c:3f:d3:
02:ab:9e:71:4e:bb:26:1e:0d:8b:ac:1e:ca:8d:be:8c:8c:b2:
de:33:64:e2:7e:63:7d:4d:a8:33:6b:ca:70:aa:69:76:3a:3c:
0b:36:4c:9b:a2:55:ff:cc:4c:0a:0e:80:e8:f3:a8:8a:93:0b:
8c:06:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:46:44 2026 by rpki-client