Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/uZgV4-Ds1XzpLf-2ECMQ9ZRf4m8.roa
File: uZgV4-Ds1XzpLf-2ECMQ9ZRf4m8.roa (raw, json)
Hash identifier: zLg9ydgFE5EwTfAibsnbM8CO5leJWTWYdarpdW2Jxgc=
Subject key identifier: B9:98:15:E3:E0:EC:D5:7C:E9:2D:FF:B6:10:23:10:F5:94:5F:E2:6F
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01A1A62C38E8A019B0B6578A2AB7521FCD48
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/uZgV4-Ds1XzpLf-2ECMQ9ZRf4m8.roa
Signing time: Wed 04 Nov 2026 10:47:58 +0000
ROA not before: Wed 04 Nov 2026 10:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5520
IP address blocks: 134.107.209.0/24 maxlen: 24
134.107.216.0/23 maxlen: 23
134.107.225.0/24 maxlen: 24
134.107.226.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:2c:38:e8:a0:19:b0:b6:57:8a:2a:b7:52:1f:cd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Nov 4 10:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b99815e3e0ecd57ce92dffb6102310f5945fe26f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:69:07:a6:d8:83:66:63:0a:27:e8:9f:47:
a6:51:13:db:bd:65:f2:56:d4:cb:2f:5d:f2:ab:81:
aa:98:39:55:7a:10:33:6e:ff:fe:1b:1f:9d:ae:da:
2b:f9:eb:32:64:d2:31:52:33:46:36:c3:88:b8:da:
46:ac:ff:b6:1f:62:dd:fe:26:c4:29:64:73:5e:a3:
cc:6f:5b:c7:e7:f8:1f:76:bf:bc:e0:c4:80:e5:a9:
c2:ed:43:59:05:66:ae:38:4e:4b:12:db:67:6b:6a:
77:fe:ce:18:88:0e:2a:ab:18:95:0b:2f:32:ff:26:
7b:24:0e:b8:58:4a:ef:4c:50:fb:8f:e3:2b:a9:b6:
96:28:55:80:7f:5f:73:67:7d:ac:e3:07:49:c7:40:
9f:20:49:63:f5:97:3b:99:f4:b6:37:aa:17:b5:f5:
55:d0:72:85:12:b5:5b:b9:26:95:de:f8:7d:ea:d9:
6a:d8:1d:fd:a6:37:6a:5d:43:6e:c1:31:32:f0:e7:
15:0c:a2:3d:04:4e:b0:53:a9:fb:d3:2b:d9:d4:62:
f9:a8:3c:4a:4d:3e:d1:13:bf:e9:23:19:ea:bb:70:
28:8b:ed:01:c0:78:ae:15:da:a0:8a:86:6d:66:36:
85:92:9d:c3:d9:21:f1:0d:ff:4f:f6:0c:4f:8f:0a:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:98:15:E3:E0:EC:D5:7C:E9:2D:FF:B6:10:23:10:F5:94:5F:E2:6F
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/uZgV4-Ds1XzpLf-2ECMQ9ZRf4m8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.107.209.0/24
134.107.216.0/23
134.107.225.0-134.107.227.255
Signature Algorithm: sha256WithRSAEncryption
08:0e:77:f6:97:4f:66:9b:3c:92:38:42:de:e6:34:e8:45:a0:
02:38:c7:b7:a9:23:6b:e6:d3:95:7b:b1:eb:75:a6:86:6f:6c:
b2:cd:ef:d1:1d:92:20:ab:4a:8d:bd:60:0e:6c:c2:2a:f2:90:
20:69:df:67:aa:6b:fe:94:51:02:c5:49:72:c8:85:89:d8:69:
ec:78:af:4f:cf:ae:76:b5:90:2d:bc:05:a0:d1:ed:d2:de:57:
60:7b:f2:dc:86:4e:b1:1a:4e:07:6f:7a:8a:5a:9f:1d:ec:41:
d4:ff:6c:65:b3:d9:84:cd:69:dd:c6:be:3b:a3:d2:14:74:3f:
20:5a:c8:63:21:d9:f1:85:e9:d3:6c:fe:2e:14:ba:cc:87:c4:
7e:f9:d6:9d:a1:11:5e:1e:0e:e5:89:50:5c:64:83:2c:c9:a3:
ab:64:63:0b:8a:9e:43:da:e6:dd:45:f9:4e:c4:31:84:85:dc:
cd:71:2c:d3:cc:f5:2a:1e:86:90:66:53:7e:2b:ef:b4:e5:3e:
6f:7f:8e:aa:c6:48:44:b9:db:ba:7c:46:60:02:c6:5e:74:85:
77:14:ec:10:d1:b7:96:04:8a:19:be:96:a7:bf:81:2d:86:b6:
7d:ce:a3:81:aa:99:0f:7a:8c:aa:1b:c0:2b:e2:30:60:63:0d:
cc:37:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:16:33 2026 by rpki-client