Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UQG7j2T_ljSc9Arg78ho7Na8GRc.roa
File: UQG7j2T_ljSc9Arg78ho7Na8GRc.roa (raw, json)
Hash identifier: vOq4gu5zFTR7W2ncbuvlGngtGMGPABpduC5naQX4EC0=
Subject key identifier: 51:01:BB:8F:64:FF:96:34:9C:F4:0A:E0:EF:C8:68:EC:D6:BC:19:17
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0AD8FF53D42746108A1FA922FA5405C58
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UQG7j2T_ljSc9Arg78ho7Na8GRc.roa
Signing time: Thu 17 Sep 2026 04:11:27 +0000
ROA not before: Thu 17 Sep 2026 04:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15731
IP address blocks: 9.247.21.0/24 maxlen: 24
89.35.73.0/24 maxlen: 24
153.76.195.0/24 maxlen: 24
153.76.205.0/24 maxlen: 24
162.35.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:40:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ad:8f:f5:3d:42:74:61:08:a1:fa:92:2f:a5:40:5c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 17 04:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5101bb8f64ff96349cf40ae0efc868ecd6bc1917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:1d:b2:54:67:41:c4:18:bf:64:f9:3f:74:
1d:57:e4:98:32:ea:ce:fb:fa:15:a0:c8:0a:16:c1:
7f:90:52:5b:ff:13:43:8b:07:b1:57:fc:6a:02:aa:
98:2e:3e:33:b6:65:69:ce:15:54:62:9a:68:9d:e0:
2d:87:65:96:34:a9:ea:6a:af:2e:17:66:15:ad:97:
25:85:f0:fd:82:b1:fb:29:4c:51:d4:0a:bb:57:ff:
6f:a9:d5:e9:09:72:aa:97:fd:06:a2:34:9a:0f:13:
e8:35:5a:34:2a:23:69:f0:ad:67:dc:f5:fd:62:ce:
c6:43:01:49:67:ba:d3:34:3b:bc:71:9d:3a:ff:c4:
8f:4c:69:d0:17:d8:7d:1b:df:02:00:66:3c:e3:ea:
72:73:ee:fd:a1:f3:55:7b:69:b2:34:bc:61:5a:34:
5f:3e:d3:34:9d:78:7d:82:db:57:62:7e:b5:88:1b:
c9:29:94:e2:7d:62:46:7d:4c:11:15:dd:e7:b1:4f:
5c:8e:24:d4:9d:c6:ed:c2:69:52:5c:14:d3:5e:f6:
50:9a:62:72:de:c9:94:c1:8d:ee:4c:50:6a:18:24:
79:b4:a8:c0:54:d1:eb:21:e5:36:2e:e3:4e:7b:a0:
f9:37:cb:47:7e:24:da:ce:b5:77:ad:d1:b7:49:80:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:01:BB:8F:64:FF:96:34:9C:F4:0A:E0:EF:C8:68:EC:D6:BC:19:17
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UQG7j2T_ljSc9Arg78ho7Na8GRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.247.21.0/24
89.35.73.0/24
153.76.195.0/24
153.76.205.0/24
162.35.230.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:5f:41:16:a5:f9:35:0c:f4:60:1f:94:a5:db:9e:b5:0e:0d:
58:6b:3e:88:64:7d:12:eb:ed:39:7a:ee:72:04:e2:fb:2d:04:
9a:83:b2:55:44:ab:8c:2e:8f:77:fb:aa:45:58:07:2b:0f:31:
60:5c:38:c3:5a:bf:d6:54:0c:1c:11:c5:9b:ef:d5:12:a3:9b:
5b:a1:ec:b2:ae:e4:fd:f4:4f:8a:e2:9f:77:2e:ff:c2:5d:dd:
f1:60:42:df:cc:c2:2c:05:f8:d4:54:fb:7e:80:c0:72:df:2a:
d8:c8:c7:81:28:4f:49:b5:71:3d:00:16:94:86:90:cd:ef:8b:
69:ae:f5:7c:e2:c7:4c:b0:7c:e0:26:4d:a5:93:34:8c:1b:2a:
0d:58:f9:10:a1:2c:72:95:3e:11:b3:07:2e:6d:98:92:16:b8:
28:96:08:0e:47:ab:74:15:9f:92:53:5d:26:14:bb:06:dc:96:
26:9e:98:e9:c7:a9:4c:08:fc:aa:c5:f8:51:48:7d:d0:4f:93:
1a:b9:14:a3:95:8a:27:7b:18:80:48:19:aa:fb:dd:45:ac:ca:
bf:f6:16:66:1e:31:7f:c8:92:4b:57:00:64:d0:c1:d0:e8:e4:
4f:c8:8e:18:5b:6e:24:41:0e:74:a1:1b:b4:d5:92:63:20:f6:
43:da:a6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:34 2026 by rpki-client