Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/ucADD6Yh4BlCI1nzbXrE79pdugQ.roa
File: ucADD6Yh4BlCI1nzbXrE79pdugQ.roa (raw, json)
Hash identifier: lIeb2K1Ku3XdMNralNbKNkojTmlUe23ubgq7NoIci/o=
Subject key identifier: B9:C0:03:0F:A6:21:E0:19:42:23:59:F3:6D:7A:C4:EF:DA:5D:BA:04
Certificate issuer: /CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Certificate serial: 019F23295F0D7CE382A7C21EAA6C31EF75FD
Authority key identifier: 03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/ucADD6Yh4BlCI1nzbXrE79pdugQ.roa
Signing time: Thu 02 Jul 2026 14:09:01 +0000
ROA not before: Thu 02 Jul 2026 14:09:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41508
IP address blocks: 91.226.68.0/24 maxlen: 24
91.226.69.0/24 maxlen: 24
91.226.70.0/23 maxlen: 23
194.150.250.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.mft
rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:29:5f:0d:7c:e3:82:a7:c2:1e:aa:6c:31:ef:75:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=031ae0e7de5ed910459e5fc6240815153c2e678e
Validity
Not Before: Jul 2 14:09:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9c0030fa621e019422359f36d7ac4efda5dba04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:27:d2:10:0a:78:b9:99:7c:ea:6b:24:3f:
b3:52:df:e7:7e:b8:42:ed:bc:fa:dc:b5:36:99:d5:
18:fa:28:74:96:63:7e:15:9c:64:25:88:30:02:b8:
59:f2:50:ad:74:5c:c4:1c:e9:8c:c3:96:36:7f:a5:
7e:7b:b4:62:e8:7f:ed:7a:c1:57:b6:85:46:f5:97:
2f:a2:1e:95:b2:e3:4c:47:46:ac:94:5b:8f:c6:d7:
fe:58:49:0e:0b:07:af:d8:f7:f1:4f:84:dc:29:94:
c0:f2:24:3f:46:cc:1b:87:b7:63:d0:0a:d2:91:d2:
2d:2b:cf:c2:68:67:b6:89:ce:ef:3a:a1:d5:9b:bb:
8c:65:d3:bd:90:e5:49:70:e6:4e:a9:a7:50:d4:3a:
29:ba:ed:af:ae:c4:01:26:ee:1c:ab:48:71:4f:a8:
aa:52:83:30:fc:f5:8c:e5:a1:f9:9b:0c:87:bf:6c:
8b:c8:19:34:84:19:81:1d:79:9b:86:56:3d:fe:33:
86:c1:f7:00:0b:5a:60:8d:a2:02:b9:e2:55:7d:22:
f2:19:94:92:8c:dc:8c:65:56:82:81:6e:be:9c:1f:
a8:56:c9:e0:d4:d0:c5:55:56:0f:bc:c4:e7:28:06:
3d:54:bb:7d:61:db:f6:00:3c:98:20:09:6e:04:2c:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C0:03:0F:A6:21:E0:19:42:23:59:F3:6D:7A:C4:EF:DA:5D:BA:04
X509v3 Authority Key Identifier:
keyid:03:1A:E0:E7:DE:5E:D9:10:45:9E:5F:C6:24:08:15:15:3C:2E:67:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Axrg595e2RBFnl_GJAgVFTwuZ44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/ucADD6Yh4BlCI1nzbXrE79pdugQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/63c55f-41be-44b6-84cf-3e1086e73ade/1/Axrg595e2RBFnl_GJAgVFTwuZ44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.68.0/22
194.150.250.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d4:8c:e6:28:49:67:c7:d9:8c:a2:15:24:e3:fc:74:23:2b:
da:66:90:fc:60:27:48:5c:fb:e8:9d:58:14:bd:02:16:c6:47:
86:92:3f:77:b0:7a:be:33:fd:e5:63:11:01:1c:c8:26:a3:53:
95:37:af:1c:3b:73:bf:74:96:96:e3:7a:af:5e:76:1c:0c:20:
50:fc:31:00:8d:cf:5f:84:c5:61:be:a3:52:0d:7e:cd:a5:21:
d4:b5:f7:59:45:84:bc:ac:be:71:1b:72:df:20:62:77:0b:be:
36:e3:42:dc:3a:38:f1:8b:01:c2:1a:61:a6:d2:33:94:6c:09:
2f:d8:fd:81:04:a7:65:a3:d4:9e:ed:53:bc:e0:ce:f0:58:4c:
b8:09:62:75:ff:f1:90:ca:00:04:33:2d:04:d9:90:5e:19:d3:
5c:8f:3a:5c:78:77:d7:b2:69:74:87:a0:0f:ae:18:bc:2d:03:
2c:15:7b:29:18:c1:ba:88:73:d5:09:5e:5c:d2:0a:6c:42:4c:
75:a5:36:92:91:5f:5a:13:ab:f3:c9:97:06:94:02:de:09:e1:
29:63:2a:80:fa:b9:30:a9:6b:f7:d3:4f:42:16:ce:67:0e:90:
65:0f:1b:4f:e2:94:ab:99:5c:31:f0:f4:c2:aa:1d:53:75:0a:
e5:11:dc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:27 2026 by rpki-client