Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/UkjSUTUx7IMjtaAeMWvjHQv755g.roa
File: UkjSUTUx7IMjtaAeMWvjHQv755g.roa (raw, json)
Hash identifier: BnS14gtS4fdP8nYmUOmguLX9BTECEdJHjxJKXb0Fl+E=
Subject key identifier: 52:48:D2:51:35:31:EC:83:23:B5:A0:1E:31:6B:E3:1D:0B:FB:E7:98
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 01A1A6BA20FEAE3BBD0157D1D7E5057997C8
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/UkjSUTUx7IMjtaAeMWvjHQv755g.roa
Signing time: Wed 04 Nov 2026 13:22:58 +0000
ROA not before: Wed 04 Nov 2026 13:22:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 84.54.13.0/24 maxlen: 24
176.98.41.0/24 maxlen: 24
185.127.42.0/24 maxlen: 24
193.31.116.0/24 maxlen: 24
213.226.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:ba:20:fe:ae:3b:bd:01:57:d1:d7:e5:05:79:97:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: Nov 4 13:22:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5248d2513531ec8323b5a01e316be31d0bfbe798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:5d:bc:cf:91:de:0e:d6:bc:3b:1a:79:d6:
c6:90:96:91:00:5e:bf:b0:6d:91:1f:4a:11:06:69:
fe:8e:5c:0d:e3:55:7a:49:5e:1a:05:c2:12:82:30:
bf:48:a0:87:de:4a:d6:8b:2a:dd:4d:b2:7c:e8:98:
1e:37:75:ce:da:43:fa:15:03:bb:84:4c:17:b8:52:
22:52:81:dc:a9:20:7e:da:fb:ab:c8:2a:50:16:84:
e2:4b:96:c3:28:86:f6:1a:34:38:ca:97:94:43:65:
a4:c8:0e:99:0d:60:9d:59:06:87:56:88:60:2f:7c:
29:d3:a4:a1:cb:39:31:ab:2a:86:3d:bc:bc:2e:07:
67:6b:f6:f1:1b:1e:8d:57:c7:97:0e:0a:8d:ae:10:
a3:f5:fd:bf:b2:9a:f8:7e:c4:33:ed:ca:56:98:45:
20:8a:a1:4e:c8:11:be:f9:09:7e:b3:ba:30:81:48:
3d:2a:0d:02:fb:b1:98:10:0a:16:e8:6c:7a:73:41:
20:c0:d6:8f:da:2b:72:5c:7c:f0:1b:08:b8:84:a3:
2e:3e:9d:b2:1e:e0:e0:ea:84:0f:f9:72:8a:74:91:
6d:7c:a9:93:c5:d0:f4:32:a6:e7:1c:15:cd:63:15:
82:85:04:81:c0:23:b6:8e:65:9b:6e:24:97:42:9a:
ac:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:48:D2:51:35:31:EC:83:23:B5:A0:1E:31:6B:E3:1D:0B:FB:E7:98
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/UkjSUTUx7IMjtaAeMWvjHQv755g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.13.0/24
176.98.41.0/24
185.127.42.0/24
193.31.116.0/24
213.226.119.0/24
Signature Algorithm: sha256WithRSAEncryption
09:aa:a1:8a:fb:e4:9d:9c:1a:9c:76:72:fb:54:36:8c:27:bd:
1f:bd:35:7f:85:6b:51:75:47:1c:a8:cf:2e:d1:1f:3e:15:27:
2a:d5:40:59:86:bd:87:4b:16:59:e0:96:d4:a7:68:29:71:1a:
c7:46:9e:d7:d9:09:8c:b7:24:9e:7b:91:72:fb:45:b1:4e:00:
af:b5:54:32:22:58:a3:ce:9c:06:16:a8:50:22:dc:27:06:84:
a5:2f:a7:6f:ef:83:11:4f:c1:b1:bc:46:a1:1e:66:e8:f6:8c:
c3:92:39:df:d0:fc:46:29:68:84:6d:ce:68:97:ac:d0:39:b0:
09:e0:43:34:6d:b7:35:82:2c:46:39:7f:bf:57:18:f5:f3:ef:
44:a3:8a:62:ac:22:1b:f8:e2:f9:f5:b6:81:bb:ac:df:7f:34:
24:32:f9:0f:bf:48:bb:df:44:3a:96:2a:dc:b2:bd:1a:3f:3e:
c5:6a:e7:b6:c3:1c:05:b8:d7:a3:90:be:96:21:5f:59:7d:ef:
e4:54:a8:4c:58:7b:a6:c6:99:a1:a2:45:ec:58:41:07:08:26:
94:3f:48:a3:14:d4:dc:8f:f7:cf:21:fc:a0:08:da:19:83:73:
6b:03:e6:f2:cd:7e:a9:25:47:5a:27:54:9e:04:b6:b6:e6:31:
d6:12:01:3b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaGmuiD+rju9AVfR1+UFeZfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm
MjhmNmMwHhcNMjYxMTA0MTMyMjU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MjQ4ZDI1MTM1MzFlYzgzMjNiNWEwMWUzMTZiZTMxZDBiZmJlNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyy9dvM+R3g7WvDsaedbGkJaRAF6/
sG2RH0oRBmn+jlwN41V6SV4aBcISgjC/SKCH3krWiyrdTbJ86JgeN3XO2kP6FQO7
hEwXuFIiUoHcqSB+2vuryCpQFoTiS5bDKIb2GjQ4ypeUQ2WkyA6ZDWCdWQaHVohg
L3wp06ShyzkxqyqGPby8Lgdna/bxGx6NV8eXDgqNrhCj9f2/spr4fsQz7cpWmEUg
iqFOyBG++Ql+s7owgUg9Kg0C+7GYEAoW6Gx6c0EgwNaP2ityXHzwGwi4hKMuPp2y
HuDg6oQP+XKKdJFtfKmTxdD0MqbnHBXNYxWChQSBwCO2jmWbbiSXQpqsFwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFJI0lE1MeyDI7WgHjFr4x0L++eYMB8GA1UdIwQY
MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt
YTM4NTU1MDVlYTJlLzEvVWtqU1VUVXg3SU1qdGFBZU1XdmpIUXY3NTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl
LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVDYNAwQA
sGIpAwQAuX8qAwQAwR90AwQA1eJ3MA0GCSqGSIb3DQEBCwUAA4IBAQAJqqGK++Sd
nBqcdnL7VDaMJ70fvTV/hWtRdUccqM8u0R8+FScq1UBZhr2HSxZZ4JbUp2gpcRrH
Rp7X2QmMtySee5Fy+0WxTgCvtVQyIlijzpwGFqhQItwnBoSlL6dv74MRT8GxvEah
Hmbo9ozDkjnf0PxGKWiEbc5ol6zQObAJ4EM0bbc1gixGOX+/Vxj18+9Eo4pirCIb
+OL59baBu6zffzQkMvkPv0i730Q6lircsr0aPz7Faue2wxwFuNejkL6WIV9Zfe/k
VKhMWHumxpmhokXsWEEHCCaUP0ijFNTcj/fPIfygCNoZg3NrA+byzX6pJUdaJ1Se
BLa25jHWEgE7
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:07 2026 by rpki-client