Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa
File: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (raw, json)
Hash identifier: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=
Subject key identifier: B9:73:7B:FC:CB:4F:28:CC:21:49:32:05:2A:92:D4:C2:8F:95:E4:FF
Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial: 019C9187440B4B595A59E4AF2AF543B3B3D3
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa
Signing time: Tue 24 Feb 2026 21:21:26 +0000
ROA not before: Tue 24 Feb 2026 21:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 91.216.158.0/24 maxlen: 24
91.223.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:91:87:44:0b:4b:59:5a:59:e4:af:2a:f5:43:b3:b3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Validity
Not Before: Feb 24 21:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9737bfccb4f28cc214932052a92d4c28f95e4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:da:e0:65:41:07:af:c2:72:49:79:b2:06:ae:
e3:3c:e8:0d:36:36:c4:f9:44:f7:dc:6d:a1:41:78:
26:c5:c6:a4:b3:51:5f:a8:a7:5a:be:be:7f:a8:f9:
14:63:32:46:c8:c2:20:22:5b:34:13:a0:88:ee:a3:
7c:c4:0e:b3:7f:cc:63:1e:f5:a1:0c:f8:47:27:a7:
e4:24:48:34:fc:b2:ae:ce:26:58:0d:b3:78:54:ae:
2e:c1:fd:08:c7:d3:75:92:ba:70:a8:e6:83:ab:9e:
4b:be:9b:61:a8:7a:23:48:81:1b:b1:21:e7:88:4e:
bc:70:f8:5c:b6:de:21:48:63:d6:f3:76:18:9a:0a:
00:a9:8e:6f:49:46:98:1c:04:1b:54:72:7b:1e:9d:
14:43:74:f8:87:7a:18:ef:a9:08:02:47:fb:eb:a5:
15:d1:25:ae:27:a5:37:41:51:a0:06:bf:9f:c5:fa:
c2:eb:36:43:60:e2:a9:26:03:46:24:47:25:3c:b9:
4d:25:87:fe:ca:2c:14:2f:15:f5:18:d2:0d:0c:93:
44:4d:45:85:9f:98:6e:74:69:4c:71:7f:a3:e9:de:
b7:d4:7f:64:83:a6:c2:7d:2e:d6:be:f6:38:6e:a2:
be:0c:6e:ac:1a:5d:4a:08:26:6a:27:71:d9:f4:01:
39:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:73:7B:FC:CB:4F:28:CC:21:49:32:05:2A:92:D4:C2:8F:95:E4:FF
X509v3 Authority Key Identifier:
keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.158.0/24
91.223.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f4:48:2d:18:d4:78:36:04:ea:83:94:57:d6:75:6b:1f:21:
1e:e0:6a:a4:bc:f8:5a:b1:29:12:dd:d4:b6:f5:78:01:09:5d:
49:f1:cc:c4:9d:f1:ee:d1:88:bb:fc:45:8e:64:ec:9c:15:18:
b2:8a:d6:d9:9b:5f:0b:62:40:10:03:f7:f4:97:99:e0:3e:9c:
1f:6f:8f:a0:2f:4d:f7:2b:3f:b6:cc:2d:3c:a6:11:26:f1:04:
84:bc:c4:a0:42:70:95:aa:3d:2f:b6:13:a1:77:df:23:8e:4b:
cc:5b:ce:d3:c1:ca:2b:5d:e2:76:dc:9b:bf:57:a8:95:63:d4:
64:8e:d2:1e:43:6b:93:a4:06:36:37:f7:ca:d0:30:cb:b1:48:
6e:8b:2f:d3:80:6a:b8:e6:d2:58:60:0c:8b:64:5f:1b:c7:a7:
6b:23:d0:70:9a:e1:de:f2:c0:2c:96:30:f3:41:c3:a3:2d:ac:
6e:21:81:68:72:7f:55:da:d1:dd:6f:3d:b9:2e:da:8d:c8:85:
20:08:d2:07:3f:34:06:65:b2:e8:5d:0a:4a:84:8b:b6:51:0d:
ee:57:11:bb:5e:89:ad:d2:47:85:7b:57:61:a0:f4:59:db:ef:
1e:43:6f:45:e5:64:46:45:bc:2d:f0:78:54:01:99:d3:0d:34:
5a:69:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:52 2026 by rpki-client