Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UK2ycumYiugwatWnVs1QqJjOCac.roa
File: UK2ycumYiugwatWnVs1QqJjOCac.roa (raw, json)
Hash identifier: eKDeQEWO+asKJbiwDn/Un55kV+V/7oxdsbVsVR8nmOg=
Subject key identifier: 50:AD:B2:72:E9:98:8A:E8:30:6A:D5:A7:56:CD:50:A8:98:CE:09:A7
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F997822446B933A605BAD7C037467934A
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UK2ycumYiugwatWnVs1QqJjOCac.roa
Signing time: Sat 25 Jul 2026 13:30:14 +0000
ROA not before: Sat 25 Jul 2026 13:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 110.34.32.0/24 maxlen: 24
222.167.210.0/24 maxlen: 24
222.167.224.0/24 maxlen: 24
222.167.232.0/24 maxlen: 24
222.167.234.0/24 maxlen: 24
222.167.250.0/24 maxlen: 24
222.167.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:78:22:44:6b:93:3a:60:5b:ad:7c:03:74:67:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 25 13:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50adb272e9988ae8306ad5a756cd50a898ce09a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:ce:a8:3c:5d:52:30:87:4e:0d:31:72:f8:
54:27:64:43:27:9f:87:ef:c1:88:17:8c:92:e2:4a:
75:44:05:39:3a:f2:8e:42:ee:20:cb:cd:20:5d:f4:
f0:34:4f:8c:78:e5:ae:04:ea:eb:3f:42:e8:d0:4c:
d0:f8:95:67:82:2d:33:96:f0:db:fb:c7:00:f8:84:
21:ff:f1:90:ac:23:f1:e8:6b:7c:ac:64:b0:05:ed:
5f:08:03:57:1d:b8:51:39:b9:01:00:22:12:1d:ca:
0a:0b:74:b8:8b:b0:bf:95:f1:68:0a:c7:5f:98:74:
9e:64:98:6d:ff:d9:76:04:34:27:a4:57:d1:25:dd:
22:a6:5b:44:3e:b2:4c:a5:ff:b2:ac:86:9e:8a:69:
a3:5b:46:19:36:8b:69:b5:41:8e:68:30:db:82:c3:
86:f9:60:2b:1a:f9:0c:f7:0c:b2:49:d8:d9:06:6b:
74:77:67:56:2e:1e:fa:fa:f3:0e:df:bf:9c:81:3d:
91:3f:30:41:3c:46:83:20:64:32:75:c7:99:6f:78:
77:c2:e8:ed:e1:d5:d6:86:84:b5:5d:96:f0:d8:df:
d2:77:1d:fb:67:32:2f:4e:6e:65:d2:63:7d:72:d3:
b9:35:55:1c:6f:ca:29:21:24:7e:96:a3:37:19:3a:
bc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:AD:B2:72:E9:98:8A:E8:30:6A:D5:A7:56:CD:50:A8:98:CE:09:A7
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/UK2ycumYiugwatWnVs1QqJjOCac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.34.32.0/24
222.167.210.0/24
222.167.224.0/24
222.167.232.0/24
222.167.234.0/24
222.167.250.0/24
222.167.255.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0c:da:f4:76:94:69:e4:e6:5d:05:27:ae:b9:f7:3e:c6:cd:
90:22:b3:90:dd:99:68:a6:d4:fa:61:7e:b6:55:83:d5:a2:ad:
82:6f:5d:b3:75:7d:5b:95:f6:ca:0a:88:63:d8:67:68:9c:98:
1e:5e:b6:f2:24:eb:21:cf:12:ea:01:22:6f:c2:b6:e6:19:3a:
d8:84:e9:3f:c6:fa:06:46:6a:bc:ca:81:ef:31:bd:84:56:df:
da:1f:6d:9e:2f:f6:cb:cb:5e:30:78:b4:ea:66:93:bb:1c:b7:
6e:17:b8:65:84:bb:ce:9c:2c:ed:b6:97:85:0d:69:c1:18:e7:
0b:b1:5e:7a:8c:41:f4:51:fd:a9:c4:fc:13:6a:c4:10:8e:54:
63:5d:2c:10:e4:90:b8:21:23:99:3c:b4:0e:5f:66:01:26:34:
8f:11:67:88:2e:05:e2:2d:9d:7c:4e:ba:a6:9f:bf:02:a0:0c:
96:be:ef:09:5b:5e:af:da:67:c6:28:29:5e:17:80:18:ec:03:
0d:68:ba:1e:fa:64:e2:5b:ee:e7:b6:70:9c:20:f0:d6:97:d7:
93:a8:05:22:c2:c7:b9:22:d1:5b:10:c6:22:68:b4:61:f2:4e:
77:9c:14:14:e6:bd:0e:15:2c:78:41:8d:94:ef:cc:71:6b:cb:
9d:00:3d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:55 2026 by rpki-client