Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/UfveTkbhDROhtf4Q54D-noxdaPQ.roa
File: UfveTkbhDROhtf4Q54D-noxdaPQ.roa (raw, json)
Hash identifier: iATBsXTFVSKE8Da9sQ7fsUA56B2MiMhD7/7ye901kbo=
Subject key identifier: 51:FB:DE:4E:46:E1:0D:13:A1:B5:FE:10:E7:80:FE:9E:8C:5D:68:F4
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019D2609A384571FFA933BF983FDF3C6B754
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/UfveTkbhDROhtf4Q54D-noxdaPQ.roa
Signing time: Wed 25 Mar 2026 17:27:38 +0000
ROA not before: Wed 25 Mar 2026 17:27:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399114
IP address blocks: 94.154.8.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
135.136.143.0/24 maxlen: 32
178.211.157.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
207.189.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:09:a3:84:57:1f:fa:93:3b:f9:83:fd:f3:c6:b7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Mar 25 17:27:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51fbde4e46e10d13a1b5fe10e780fe9e8c5d68f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:50:aa:9f:9f:8c:34:05:1b:77:05:a4:6b:13:
d6:fd:f8:83:8c:02:9e:f5:f2:ab:c0:41:f2:5a:4f:
09:41:27:8e:75:c0:fe:37:e5:31:69:b1:e1:9c:71:
49:a7:59:d4:be:6a:f9:e0:76:d1:a0:93:3d:ef:ca:
41:85:21:ab:39:26:3b:b6:73:d5:c5:4b:84:95:dc:
e1:85:34:84:29:75:68:00:b7:07:b3:fd:21:27:1a:
d2:0b:f3:1f:fb:5f:9a:79:ac:42:b5:4f:84:ba:00:
e7:c9:8d:b8:d1:e4:f8:8c:68:67:0a:a4:3e:a6:e3:
bb:d3:90:39:d0:ae:5b:0c:fb:95:0c:cc:d4:3d:86:
57:b2:ba:6d:8c:8e:7f:45:07:48:f4:0a:67:ed:67:
a0:c1:3e:f3:81:08:e1:97:a9:f3:cc:dd:ce:a7:8b:
14:da:db:a7:99:a7:35:e0:f4:69:27:ab:36:21:44:
64:5e:9c:49:2a:c0:b3:a2:60:10:fd:4a:90:26:16:
ec:b1:d0:dd:ca:54:13:b7:3e:c6:4e:57:57:f4:96:
f8:43:28:9b:14:8f:d6:f8:2f:0a:99:68:3b:7d:79:
fa:0c:58:ce:f4:0d:4b:e1:47:ee:79:58:01:b5:d3:
a5:b1:1d:ea:c0:bf:41:c3:3b:6d:40:b3:2c:bf:aa:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:DE:4E:46:E1:0D:13:A1:B5:FE:10:E7:80:FE:9E:8C:5D:68:F4
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/UfveTkbhDROhtf4Q54D-noxdaPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
135.136.128.0/19
178.211.157.0/24
185.234.115.0/24
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
22:7e:72:fd:9d:a5:8c:8a:ef:96:1a:95:e9:27:d9:e7:f5:ab:
cf:5f:1f:78:e5:12:df:b5:52:c8:db:c9:25:cf:5a:e9:b9:99:
9e:93:d6:55:3c:aa:f2:dc:bc:ca:cd:76:ee:70:e6:6e:69:94:
27:f3:d1:70:ef:e5:5c:bd:64:52:49:40:70:bf:e5:1b:30:78:
d6:fb:ed:89:bc:16:e5:a6:6e:db:e9:fb:79:23:b3:30:6f:40:
fb:dc:b4:7f:a1:87:84:25:d1:19:a4:58:36:8b:4f:43:55:2c:
61:83:70:2c:fe:83:db:91:5b:67:42:0a:9d:8b:4d:8c:cd:e2:
04:a7:64:b1:d7:d1:c5:d3:d4:47:d3:5a:d9:4a:9c:16:6d:38:
36:f0:24:18:2a:a8:ee:2c:f5:bf:95:9e:97:63:b6:bd:06:1d:
d8:53:e6:81:f8:b5:35:49:6a:d7:01:29:bb:f0:7b:5f:79:be:
15:5b:97:a3:88:4c:d7:c5:6b:48:8e:ef:f4:9e:e6:ce:49:08:
4d:5a:b5:00:14:4b:cc:45:4f:ae:89:6d:80:80:4b:dd:db:25:
5e:a6:42:60:79:4b:98:5f:33:37:09:c8:aa:05:c7:40:cb:29:
09:98:b3:b4:a8:43:82:07:03:b8:45:49:12:b3:9f:ca:df:e7:
14:be:35:4b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ0mCaOEVx/6kzv5g/3zxrdUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYTU0MGNlNDUwNDU2MzQ1ZWM4ZTA5OGVmNGY1MzYzNGQ3
NGJmMWYwHhcNMjYwMzI1MTcyNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWZiZGU0ZTQ2ZTEwZDEzYTFiNWZlMTBlNzgwZmU5ZThjNWQ2OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVCqn5+MNAUbdwWkaxPW/fiDjAKe
9fKrwEHyWk8JQSeOdcD+N+UxabHhnHFJp1nUvmr54HbRoJM978pBhSGrOSY7tnPV
xUuEldzhhTSEKXVoALcHs/0hJxrSC/Mf+1+aeaxCtU+EugDnyY240eT4jGhnCqQ+
puO705A50K5bDPuVDMzUPYZXsrptjI5/RQdI9Apn7WegwT7zgQjhl6nzzN3Op4sU
2tunmac14PRpJ6s2IURkXpxJKsCzomAQ/UqQJhbssdDdylQTtz7GTldX9Jb4Qyib
FI/W+C8KmWg7fXn6DFjO9A1L4UfueVgBtdOlsR3qwL9BwzttQLMsv6ryewIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFH73k5G4Q0TobX+EOeA/p6MXWj0MB8GA1UdIwQY
MBaAFGClQM5FBFY0XsjgmO9PU2NNdL8fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEt
ZTQ3MzUzMWY2ZmU4LzEvVWZ2ZVRrYmhEUk9odGY0UTU0RC1ub3hkYVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8xOTVhNDctYTJjYi00ZjAwLTg1MzEtZTQ3MzUzMWY2ZmU4
LzEvWUtWQXprVUVWalJleU9DWTcwOVRZMDEwdng4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAXpoIAwQF
h4iAAwQAstOdAwQAuepzAwQFz70AMA0GCSqGSIb3DQEBCwUAA4IBAQAifnL9naWM
iu+WGpXpJ9nn9avPXx945RLftVLI28klz1rpuZmek9ZVPKry3LzKzXbucOZuaZQn
89Fw7+VcvWRSSUBwv+UbMHjW++2JvBblpm7b6ft5I7Mwb0D73LR/oYeEJdEZpFg2
i09DVSxhg3As/oPbkVtnQgqdi02MzeIEp2Sx19HF09RH01rZSpwWbTg28CQYKqju
LPW/lZ6XY7a9Bh3YU+aB+LU1SWrXASm78Htfeb4VW5ejiEzXxWtIju/0nubOSQhN
WrUAFEvMRU+uiW2AgEvd2yVepkJgeUuYXzM3CciqBcdAyykJmLO0qEOCBwO4RUkS
s5/K3+cUvjVL
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:14:29 2026 by rpki-client