Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/uct3FriMmJ2dsZBkcrXJVXsGDFw.roa
File: uct3FriMmJ2dsZBkcrXJVXsGDFw.roa (raw, json)
Hash identifier: YxoLUypivPWxn2AjW2R+K6r0FePAjOs61fBGsFzRkR4=
Subject key identifier: B9:CB:77:16:B8:8C:98:9D:9D:B1:90:64:72:B5:C9:55:7B:06:0C:5C
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 019C564C15DED9ED0C3B45B926D787FE018D
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/uct3FriMmJ2dsZBkcrXJVXsGDFw.roa
Signing time: Fri 13 Feb 2026 09:19:12 +0000
ROA not before: Fri 13 Feb 2026 09:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3339
IP address blocks: 91.200.244.0/22 maxlen: 22
176.97.224.0/22 maxlen: 22
185.72.12.0/22 maxlen: 22
185.72.12.0/24 maxlen: 24
185.73.188.0/22 maxlen: 22
185.95.56.0/22 maxlen: 22
185.177.168.0/22 maxlen: 22
185.209.120.0/22 maxlen: 22
185.233.76.0/22 maxlen: 22
185.255.104.0/22 maxlen: 22
192.145.40.0/22 maxlen: 22
193.26.148.0/22 maxlen: 22
2a0a:4280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:4c:15:de:d9:ed:0c:3b:45:b9:26:d7:87:fe:01:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Feb 13 09:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9cb7716b88c989d9db1906472b5c9557b060c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9f:61:cc:15:63:ec:d7:e7:b1:cf:28:52:45:
a8:2d:14:38:0c:99:42:af:95:60:32:a2:36:fe:40:
c9:a0:ec:40:ce:be:68:e9:ee:8a:44:3d:8a:a2:e2:
a8:e0:59:c0:ae:6a:70:19:bc:5b:f6:af:c5:0f:01:
2f:d4:b7:2b:14:78:f6:c2:b5:31:f7:42:0d:c3:0b:
ba:7b:cc:e6:ab:bb:52:4a:27:ec:08:4a:c9:6f:03:
a5:bd:dd:4d:8c:39:b8:7c:b2:8c:a2:3e:84:6f:a6:
27:b0:23:4e:86:d2:2a:37:0a:ff:f3:01:40:56:f7:
f6:0d:38:5e:60:a3:a5:c9:e3:11:f8:6d:6b:11:42:
c8:f3:bb:43:68:22:8a:99:5a:6f:b6:7b:3a:1b:69:
c0:a9:74:c6:cd:1f:13:93:4f:e5:c8:33:d6:23:d2:
8f:83:f3:26:3c:20:52:e7:b1:b9:c2:80:24:41:86:
17:4a:88:0d:c0:65:36:7c:1c:48:04:16:b2:9e:69:
75:42:15:17:fd:06:4e:f8:91:4b:ab:07:10:70:39:
e1:96:8d:88:54:3b:30:8e:e7:8c:eb:16:bc:7f:3b:
4f:84:48:e5:37:6b:56:4f:7f:50:d6:79:e5:39:51:
cc:f4:8b:28:a5:5d:80:6b:14:3c:a8:a2:86:3b:94:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CB:77:16:B8:8C:98:9D:9D:B1:90:64:72:B5:C9:55:7B:06:0C:5C
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/uct3FriMmJ2dsZBkcrXJVXsGDFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.244.0/22
176.97.224.0/22
185.72.12.0/22
185.73.188.0/22
185.95.56.0/22
185.177.168.0/22
185.209.120.0/22
185.233.76.0/22
185.255.104.0/22
192.145.40.0/22
193.26.148.0/22
IPv6:
2a0a:4280::/29
Signature Algorithm: sha256WithRSAEncryption
87:78:a1:38:94:75:6d:ec:76:ed:ed:ea:81:ae:90:dc:41:4a:
d7:2f:0c:70:05:8c:48:99:65:91:7f:c6:9d:c8:f5:40:5f:9d:
94:35:5e:f0:22:9f:96:8b:79:16:ed:fc:e4:eb:f0:a0:df:1d:
7d:04:08:87:2b:45:45:bb:0d:07:bc:9d:6e:88:1e:63:79:25:
d5:85:43:78:56:db:7c:a3:7f:55:49:f1:07:41:7b:50:e6:14:
74:0b:50:6c:79:dc:41:43:79:fa:25:8c:cf:52:c8:53:44:8e:
c9:c2:e5:e3:5d:21:58:1b:f3:08:eb:4f:b4:a2:4c:02:84:6d:
77:72:7e:80:3e:3e:30:aa:34:ec:e5:b7:5b:ae:9e:d8:ce:25:
e4:59:52:8e:8c:70:59:a2:ee:a2:c1:61:7b:af:3a:b5:7c:5b:
cd:54:be:bb:13:8f:72:1d:75:e9:bf:ed:60:cb:1b:7f:4c:83:
a9:a5:2f:9f:fb:7f:45:03:a1:6d:ec:47:11:49:a0:a1:7e:44:
cf:53:40:69:15:10:2a:4a:df:8d:05:98:18:80:cf:15:df:f8:
f7:74:93:2e:d7:83:3d:ec:06:f4:4d:8e:84:64:12:c0:5c:bb:
99:e2:59:08:2d:45:b2:1b:af:4f:4e:50:52:82:84:50:26:0b:
41:a3:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:03:53 2026 by rpki-client