Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uQr0KcoOeVsXGsvAr2kOLDQRmdw.roa
File: uQr0KcoOeVsXGsvAr2kOLDQRmdw.roa (raw, json)
Hash identifier: 8ctkDDnFjEn17F8jhgQ6LrTez8oebObwiHkmy0BpO9s=
Subject key identifier: B9:0A:F4:29:CA:0E:79:5B:17:1A:CB:C0:AF:69:0E:2C:34:11:99:DC
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B8BCAD6082FE9A3C9DB6262B65009E57
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uQr0KcoOeVsXGsvAr2kOLDQRmdw.roa
Signing time: Sat 19 Sep 2026 08:16:07 +0000
ROA not before: Sat 19 Sep 2026 08:16:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 109.64.10.0/24 maxlen: 24
109.64.25.0/24 maxlen: 24
109.64.100.0/24 maxlen: 24
109.64.116.0/24 maxlen: 24
109.64.124.0/24 maxlen: 24
109.64.126.0/24 maxlen: 24
109.64.135.0/24 maxlen: 24
109.64.160.0/24 maxlen: 24
109.64.165.0/24 maxlen: 24
109.64.166.0/24 maxlen: 24
109.64.188.0/24 maxlen: 24
109.64.208.0/24 maxlen: 24
109.64.228.0/24 maxlen: 24
109.64.232.0/24 maxlen: 24
109.64.250.0/24 maxlen: 24
109.65.105.0/24 maxlen: 24
109.65.144.0/24 maxlen: 24
109.65.195.0/24 maxlen: 24
109.65.235.0/24 maxlen: 24
109.66.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:bc:ad:60:82:fe:9a:3c:9d:b6:26:2b:65:00:9e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 19 08:16:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b90af429ca0e795b171acbc0af690e2c341199dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:70:65:ac:e5:c5:ca:ee:2e:47:fc:d8:e8:
4d:c2:26:19:a1:8d:89:d0:79:59:c6:50:09:0e:49:
d5:df:23:c8:49:2c:ff:e6:c0:63:8a:97:2f:3e:7d:
88:ab:97:4f:34:f1:f6:ca:42:fa:1f:c7:de:0a:1e:
b0:49:00:63:58:bf:a5:68:4e:94:4a:82:f6:75:5b:
0f:38:cb:3d:43:23:4d:14:69:93:a1:15:38:62:0f:
a1:a3:28:68:86:ce:1b:a8:1b:16:06:03:03:63:60:
0a:03:9c:ca:9f:cf:76:1e:71:68:bf:48:ef:bf:d8:
38:54:22:06:35:ce:8c:db:78:d8:64:46:b8:f1:be:
24:7c:76:b6:91:43:c4:2a:eb:a8:4a:3f:34:98:4e:
c4:f3:9a:45:d8:01:be:4d:fc:b6:9d:e5:e6:15:5d:
ee:e7:b3:91:02:1b:e5:30:c0:9b:c2:ff:97:17:67:
17:61:92:6c:a4:e4:0e:44:26:88:92:08:6e:95:ea:
53:43:60:b3:9d:1d:4c:e0:58:54:29:4b:62:2f:93:
cf:4b:3c:0b:92:0c:50:39:c4:cd:9d:08:6e:53:a4:
49:5d:d4:0e:97:94:60:be:83:e6:0f:35:ec:25:78:
94:6d:27:2d:f4:96:8e:aa:b0:75:36:2b:68:af:22:
c5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:F4:29:CA:0E:79:5B:17:1A:CB:C0:AF:69:0E:2C:34:11:99:DC
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/uQr0KcoOeVsXGsvAr2kOLDQRmdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.64.10.0/24
109.64.25.0/24
109.64.100.0/24
109.64.116.0/24
109.64.124.0/24
109.64.126.0/24
109.64.135.0/24
109.64.160.0/24
109.64.165.0-109.64.166.255
109.64.188.0/24
109.64.208.0/24
109.64.228.0/24
109.64.232.0/24
109.64.250.0/24
109.65.105.0/24
109.65.144.0/24
109.65.195.0/24
109.65.235.0/24
109.66.106.0/24
Signature Algorithm: sha256WithRSAEncryption
13:72:9a:26:d3:5e:fc:f4:d6:c7:ac:c1:80:ab:9d:5e:25:8a:
dd:55:9a:1c:22:cc:ca:0e:a4:ab:93:cc:c0:5c:fb:99:e0:57:
a3:fd:3e:18:cb:c8:81:19:d7:fa:3b:7d:2c:25:6e:7b:9d:dd:
c9:84:ae:a8:a7:6f:dc:02:6b:ea:70:57:7e:fb:54:40:d0:75:
c0:1d:67:0d:7b:2e:d2:90:14:23:3e:8d:8f:ca:8b:2f:15:2a:
55:52:d9:4b:41:d3:37:12:39:48:82:33:5e:c3:e2:3d:d1:83:
c2:e1:5e:fb:7a:29:8d:a6:83:3b:e9:b3:cc:fc:e7:e5:15:cb:
b9:cb:c2:60:f8:ee:0c:bb:49:59:6c:97:08:61:c5:5e:0e:94:
d5:64:a1:e4:0b:f2:a1:f9:e8:c0:dc:df:7b:f3:ab:ba:c2:e6:
42:20:b7:48:45:25:87:42:eb:c8:0f:06:44:6d:c3:4b:5c:8b:
67:ec:23:02:4a:58:1e:b6:c6:ad:17:dd:eb:87:78:44:20:41:
c9:ed:5c:79:50:ff:fa:eb:c2:78:07:fe:99:8d:8f:ba:2c:bd:
d7:f9:2a:e6:73:6b:a7:d0:86:e9:7c:4b:30:0c:d4:64:a3:cb:
53:51:55:52:3a:29:91:50:bf:7d:19:e0:ec:d5:3c:62:d4:be:
67:a0:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:10 2026 by rpki-client