Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/uYiIkwBfPqClYfMGl38tvm4KBvg.roa
File: uYiIkwBfPqClYfMGl38tvm4KBvg.roa (raw, json)
Hash identifier: o4gsrEz/fQuiw6/1tweyaGkFxUvLi+VVTdNf5NDVUL0=
Subject key identifier: B9:88:88:93:00:5F:3E:A0:A5:61:F3:06:97:7F:2D:BE:6E:0A:06:F8
Certificate issuer: /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial: 019B79ED1D2F14C9FB5E3EC9021E6F7882FD
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/uYiIkwBfPqClYfMGl38tvm4KBvg.roa
Signing time: Thu 01 Jan 2026 14:19:01 +0000
ROA not before: Thu 01 Jan 2026 14:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198849
IP address blocks: 91.109.249.0/24 maxlen: 24
91.109.250.0/24 maxlen: 24
91.109.251.0/24 maxlen: 24
91.109.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:1d:2f:14:c9:fb:5e:3e:c9:02:1e:6f:78:82:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
Validity
Not Before: Jan 1 14:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b9888893005f3ea0a561f306977f2dbe6e0a06f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:72:cd:71:9d:f1:f7:a6:36:96:08:81:d5:54:
c2:cf:41:9a:cb:7a:16:c2:e6:6d:8a:c1:dc:0d:0e:
c4:67:41:74:46:47:a6:fe:45:40:b8:89:df:29:e7:
0d:53:e4:a4:06:5b:02:29:92:50:44:b5:b9:21:0b:
f1:85:bb:b2:54:90:0d:7e:34:e8:3e:aa:6f:f3:c3:
12:be:8e:e7:83:df:0b:80:1b:46:fd:89:0c:e2:e6:
c6:ce:a4:af:d6:95:5d:3d:36:76:d8:8b:1a:ad:22:
8b:6b:5c:dd:46:cc:5a:f2:da:ca:15:0f:26:7b:75:
78:67:52:ea:18:31:05:8a:fa:52:e6:28:5d:ae:35:
66:28:68:cf:d6:cb:a9:b2:73:d4:bf:94:06:9e:e1:
4c:6a:ea:28:58:6b:9b:8e:93:08:ca:88:d4:ad:94:
fc:c6:0d:3e:d1:5d:a1:f9:af:05:78:94:4a:80:fc:
3c:f1:7e:65:11:f9:80:7d:e1:dc:49:6b:ba:60:c3:
d4:78:df:e7:74:11:01:a1:55:ac:5c:9e:90:42:e5:
15:4d:1f:47:48:76:80:38:52:96:90:ec:39:1e:32:
46:77:23:e4:bc:2e:d5:cc:41:f0:43:22:8e:45:84:
74:4a:06:d1:2a:3f:62:50:e6:aa:45:62:c7:31:8d:
26:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:88:88:93:00:5F:3E:A0:A5:61:F3:06:97:7F:2D:BE:6E:0A:06:F8
X509v3 Authority Key Identifier:
keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/uYiIkwBfPqClYfMGl38tvm4KBvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.249.0-91.109.252.255
Signature Algorithm: sha256WithRSAEncryption
30:20:e5:9a:bb:fd:f3:f7:81:df:76:a6:17:b0:27:21:c6:ea:
7b:95:df:bc:57:2d:df:8e:f3:62:14:d3:7e:c4:f6:20:66:6c:
87:c4:a9:1c:f6:c8:84:5b:fa:7c:1b:43:b1:51:32:0b:e5:39:
96:51:21:27:d5:4e:62:c2:1f:d5:9d:2c:21:f7:1c:bc:a4:67:
59:bc:24:07:8c:7c:b3:e3:7f:7f:f2:f2:23:d8:a8:18:9b:b3:
8b:3e:b8:fd:07:6e:5c:0c:ee:d3:7e:e2:c6:6b:c8:ee:d9:6f:
4b:fb:9b:80:7d:ad:c4:0c:d1:1f:05:29:f6:fa:4d:88:09:d2:
33:8e:35:ca:a8:ab:9c:a4:02:4e:28:76:ba:bb:de:b0:a0:dd:
b9:d0:26:65:94:28:c8:d9:c6:68:a0:55:5e:af:6b:b2:9b:98:
10:b7:0e:40:68:cd:23:66:16:6f:66:1d:e8:28:1e:84:43:7a:
75:fa:72:60:6f:0b:f5:9f:bd:23:1b:40:8f:59:44:94:60:e0:
da:a0:e3:a8:8e:ac:91:1c:7b:30:35:29:69:3b:86:21:5a:df:
1a:1b:cf:a7:2c:e7:9e:b9:ed:02:a0:a3:2a:96:4a:c3:e7:f1:
e9:18:52:f3:da:7e:18:ce:03:6e:1c:d3:b9:ec:eb:d3:74:44:
64:21:ca:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:51:36 2026 by rpki-client