Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UkqJ9xSHaBtI4ZaXZU5mDQc055o.roa
File: UkqJ9xSHaBtI4ZaXZU5mDQc055o.roa (raw, json)
Hash identifier: o24wEriDZ19BaaQZwUey+WrDQofm0sbK7x2MVAgrUsY=
Subject key identifier: 52:4A:89:F7:14:87:68:1B:48:E1:96:97:65:4E:66:0D:07:34:E7:9A
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019C755A8774557494185318D49B58CECAA5
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UkqJ9xSHaBtI4ZaXZU5mDQc055o.roa
Signing time: Thu 19 Feb 2026 10:03:13 +0000
ROA not before: Thu 19 Feb 2026 10:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211615
IP address blocks: 188.255.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:75:5a:87:74:55:74:94:18:53:18:d4:9b:58:ce:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Feb 19 10:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=524a89f71487681b48e19697654e660d0734e79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:33:e5:23:e8:71:dc:58:37:e0:8e:f8:70:76:
97:fc:d7:ca:60:74:14:3a:88:e8:f8:bf:58:5f:e4:
f6:b9:ec:d7:0d:49:b1:d2:ff:e7:2a:26:04:17:64:
6b:cb:94:10:37:33:39:4e:20:10:67:16:bc:14:53:
5b:57:f7:ee:19:54:59:eb:6b:52:f4:8a:f3:bf:c8:
e9:8e:85:52:1a:7a:18:71:c2:d5:bf:a7:fd:c8:5a:
54:5d:85:96:87:dc:41:7d:df:53:44:ec:f5:18:8c:
3d:4f:5b:75:6f:20:fa:7d:ca:ca:62:1b:79:0a:6e:
0c:cb:cf:04:53:8b:df:0f:63:72:f7:2a:71:1e:81:
3f:9c:3c:7c:11:04:47:e3:6a:95:0d:16:04:04:3a:
03:03:fe:aa:22:08:1b:0f:8f:b6:47:1f:d9:65:84:
3b:9a:81:c7:89:40:51:b3:17:88:81:dd:40:43:7b:
df:ff:7e:6c:94:25:d1:67:bc:27:0f:2b:b5:d3:ab:
a9:17:d3:51:01:dd:2b:38:b2:48:1f:3a:ad:14:36:
50:a1:2f:fa:f2:ea:dc:81:77:30:20:be:5a:14:71:
02:d5:2b:68:58:09:78:51:cd:a8:d1:18:41:55:9a:
37:39:d2:a3:6b:d0:b6:7b:00:05:86:83:39:8b:c0:
ce:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4A:89:F7:14:87:68:1B:48:E1:96:97:65:4E:66:0D:07:34:E7:9A
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/UkqJ9xSHaBtI4ZaXZU5mDQc055o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.165.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:32:25:a1:ca:d3:d0:95:1d:bd:62:80:d0:4d:28:f6:67:17:
6f:f0:f9:33:66:76:22:95:f5:49:54:1b:5f:59:f1:c6:27:6a:
f4:ad:40:a1:e1:19:e7:b8:9a:10:cf:13:0d:5a:58:30:85:7c:
10:10:13:c8:79:03:c9:5e:bb:5f:35:28:bf:a4:55:6f:e1:32:
ed:65:1f:bc:86:e3:15:83:85:d7:b6:9b:e9:4c:25:ac:f7:f4:
38:a2:3e:65:af:6b:25:a4:a3:8d:4b:80:9e:b6:72:33:67:ca:
3e:b4:3f:4d:98:bb:c9:44:96:c4:96:45:41:49:9d:af:63:44:
15:fb:ae:16:80:01:97:07:82:ea:4a:0c:88:4b:89:53:ae:47:
79:3d:10:12:63:35:f9:71:f9:f9:f9:ec:2b:e9:37:de:26:2b:
40:ee:e8:8e:9b:21:2e:a7:a6:20:c6:e5:39:c3:ed:b8:9b:a4:
fb:67:1c:bb:c8:1a:80:c8:3e:f0:f1:29:bd:b6:5b:fa:9a:ee:
dd:e9:4a:29:4e:17:ff:e1:b8:26:5c:26:d7:8a:b1:a1:11:11:
55:fc:35:20:80:0a:f3:19:2d:f5:ae:e7:ae:f3:ba:2a:33:06:
fb:9d:aa:d8:6e:0e:84:0e:be:84:47:df:96:3c:7d:27:76:30:
f2:0b:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:44 2026 by rpki-client