Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Uk_QhoqYwPQ0QJLWkPHVlceMZl0.roa
File: Uk_QhoqYwPQ0QJLWkPHVlceMZl0.roa (raw, json)
Hash identifier: XnABNEOU2iUdf6iAKnb5vou8/9e+Ta+ME1tclY0TkgA=
Subject key identifier: 52:4F:D0:86:8A:98:C0:F4:34:40:92:D6:90:F1:D5:95:C7:8C:66:5D
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A0BCCF73E7F38F9FC8A000B2D9148CFF34
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Uk_QhoqYwPQ0QJLWkPHVlceMZl0.roa
Signing time: Sun 20 Sep 2026 03:15:07 +0000
ROA not before: Sun 20 Sep 2026 03:15:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 94.184.32.0/24 maxlen: 24
94.184.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:cf:73:e7:f3:8f:9f:c8:a0:00:b2:d9:14:8c:ff:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 20 03:15:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=524fd0868a98c0f4344092d690f1d595c78c665d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:70:2a:44:79:37:b9:f6:6f:47:c0:c7:3f:
30:3f:a0:eb:a6:06:71:86:42:21:5f:1b:2f:d0:48:
e7:6f:68:7a:d4:df:84:0b:58:60:20:c1:77:d8:97:
7c:8d:2a:1c:16:7e:7e:9c:a4:50:b6:0c:43:59:08:
06:fd:50:7a:37:fc:35:92:c4:33:93:61:e6:c5:f7:
47:3b:1e:f3:d9:7d:6d:58:54:e6:92:ba:75:d8:05:
f4:f1:7a:4f:6f:24:53:36:58:76:10:68:b1:64:1e:
4a:0a:7f:2d:de:de:6a:e5:14:61:c7:bc:6a:4d:61:
05:55:f6:82:37:85:43:09:73:49:90:a7:ed:12:0b:
ff:f9:46:46:2c:92:cb:f7:e0:41:a4:8e:5e:30:8c:
03:5c:0b:53:ae:3a:79:2a:05:94:5f:ed:8a:2a:a0:
33:af:9b:04:ee:63:64:79:57:9c:f1:e6:03:0e:51:
37:37:ea:27:7f:ee:e0:68:43:5e:47:3e:9d:75:89:
d4:cf:29:7d:3e:8f:6d:0a:2a:4c:8a:41:e6:c6:fa:
45:e3:6e:4e:fc:15:74:57:71:fd:7b:02:01:fb:5d:
ad:31:95:77:62:8d:85:dc:84:b5:94:fd:7e:c6:5d:
23:c2:e8:0b:19:37:d3:41:01:e6:29:dd:e8:38:6f:
11:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4F:D0:86:8A:98:C0:F4:34:40:92:D6:90:F1:D5:95:C7:8C:66:5D
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Uk_QhoqYwPQ0QJLWkPHVlceMZl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.32.0/24
94.184.38.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:8b:15:75:3c:31:a1:ab:06:12:c6:f7:54:c1:da:b8:39:23:
b4:96:a6:ab:db:17:eb:61:f0:dc:d6:e0:54:ba:a6:25:a8:36:
5f:2a:3f:23:ff:8d:66:74:0e:70:e7:25:e8:b1:f4:b3:cc:cb:
a1:62:7f:16:97:a8:78:de:9d:da:90:5d:e0:cd:ab:da:1e:fc:
1c:38:34:6d:38:ec:e6:cb:9f:f2:d1:2b:f0:65:c6:91:23:08:
b2:60:72:e6:ec:ab:73:10:b6:93:d7:e1:47:d3:4f:20:f8:cf:
71:af:77:d3:21:03:83:87:d3:5f:47:9d:7d:62:f2:69:a7:be:
60:24:cb:07:5a:8c:46:11:f2:f6:c2:04:94:71:e8:41:2a:f1:
0c:47:0f:69:07:fb:c2:63:69:6e:7b:ec:32:ad:32:f1:e8:04:
e1:81:c8:4e:ce:73:b7:70:b4:df:52:22:a6:ee:e2:64:b4:4c:
93:c4:cb:87:30:2d:b3:f8:d6:b6:8f:2c:75:72:43:e0:45:8a:
58:96:32:51:7b:97:11:20:99:95:a9:e2:4f:17:08:3e:7c:3b:
34:e3:b4:26:14:92:7b:c8:54:fe:22:b7:54:c1:16:d8:ae:63:
51:65:e4:19:da:d1:f9:f8:02:ef:d0:16:c9:88:b0:93:f0:11:
f1:ca:27:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:35 2026 by rpki-client