Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/UfOE-rSQQJxT5pel5hxB7CI5WyA.roa
File: UfOE-rSQQJxT5pel5hxB7CI5WyA.roa (raw, json)
Hash identifier: lITU3NpiQckWKnEMAb5T8z+uP9+F2438Al8BboidjZs=
Subject key identifier: 51:F3:84:FA:B4:90:40:9C:53:E6:97:A5:E6:1C:41:EC:22:39:5B:20
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 019B7759401F955D75EDFB44098B5E1A7502
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/UfOE-rSQQJxT5pel5hxB7CI5WyA.roa
Signing time: Thu 01 Jan 2026 02:18:16 +0000
ROA not before: Thu 01 Jan 2026 02:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209664
IP address blocks: 176.117.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:59:40:1f:95:5d:75:ed:fb:44:09:8b:5e:1a:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Jan 1 02:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51f384fab490409c53e697a5e61c41ec22395b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:a5:bc:4f:28:c7:aa:36:dc:8e:76:4a:35:
5a:21:05:70:91:b7:e1:ec:d1:96:90:24:5b:9e:d1:
a0:96:92:bd:5a:bd:34:52:4d:5b:a0:3f:aa:d9:09:
56:d5:0d:28:0c:96:68:f3:07:a4:c8:bb:d8:36:55:
46:6e:88:93:5f:15:fd:3f:ac:3e:0d:a7:ad:df:80:
09:3c:1d:10:f3:21:ae:c8:c0:46:db:f8:d9:82:27:
b6:33:04:68:72:10:ad:5e:fe:f8:04:f9:21:b5:d1:
8e:9c:52:4f:b4:c1:49:0c:19:1e:7b:90:bc:e4:82:
34:19:cd:cb:f5:ab:71:1d:60:33:4e:58:5b:95:f2:
e6:86:8c:c3:b6:21:e6:b8:78:c2:3c:21:38:77:be:
0a:16:17:e8:6a:b3:da:39:9e:a7:9f:f4:fc:4c:07:
12:db:af:72:6c:c4:89:42:dd:32:8f:fd:5d:9a:e2:
2b:90:32:dc:11:ce:8f:4c:3e:98:65:0e:0c:41:20:
33:79:c7:04:85:5b:c7:27:0c:30:a8:d7:8b:e0:a3:
4e:7a:15:b2:b1:cd:c2:02:31:02:b1:25:ff:f2:08:
ba:a4:8b:b3:87:cd:9a:85:df:d0:de:c8:31:60:24:
33:0c:56:47:a1:c2:cc:0c:fc:71:21:fd:9d:1f:78:
c5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F3:84:FA:B4:90:40:9C:53:E6:97:A5:E6:1C:41:EC:22:39:5B:20
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/UfOE-rSQQJxT5pel5hxB7CI5WyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.70.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b6:d8:1b:cc:61:ee:c6:79:2e:c6:f5:fd:ef:c4:6b:2a:4d:
92:b7:8a:a9:3f:32:ae:e4:48:84:d9:77:7e:e0:5a:d9:83:8a:
66:1c:19:3c:93:63:10:39:33:84:53:cb:2d:4d:89:64:6b:6b:
2c:54:75:9f:a6:50:70:fc:76:a9:e9:f8:da:55:c2:70:ec:93:
3f:b5:4c:30:7a:e8:9a:39:b1:db:61:79:e8:5c:e7:90:ab:20:
ae:06:10:7c:e3:9a:af:9c:ef:22:4c:6b:ba:dd:5d:6b:8b:da:
46:78:24:b8:b3:5e:08:24:a8:39:04:87:34:13:e7:a3:de:9d:
30:4a:f0:5a:1b:16:8b:68:58:fe:65:2b:b6:f6:51:11:92:c6:
6a:56:3b:25:01:cf:4a:d4:3b:fa:7e:a0:de:1e:f8:5f:c8:9b:
78:24:3f:9a:79:83:e2:19:e4:e1:3b:23:c7:72:c7:64:b4:71:
8b:50:0c:f2:e2:db:6e:64:00:49:d6:68:06:9c:ee:f6:d1:70:
0d:22:60:db:54:fa:29:7e:b0:0c:8a:05:35:51:e5:95:55:43:
30:1c:d6:a0:39:3f:4e:d1:6c:e4:3d:02:c1:6b:a1:34:a8:82:
77:aa:71:4c:f5:77:dc:b0:ab:bd:1f:fa:ea:b1:c7:7c:a4:e5:
06:91:35:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:19:59 2026 by rpki-client