Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/ujSx52BQjLKBERcbBmmYd5-UdCA.roa
File: ujSx52BQjLKBERcbBmmYd5-UdCA.roa (raw, json)
Hash identifier: LvlXIEXYgxOLjVoGgZsOJJNe14GMXjgwHtX/Mdlm0CY=
Subject key identifier: BA:34:B1:E7:60:50:8C:B2:81:11:17:1B:06:69:98:77:9F:94:74:20
Certificate issuer: /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial: 01A0936334A30FA59F8916D00ED1EB9FEB12
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/ujSx52BQjLKBERcbBmmYd5-UdCA.roa
Signing time: Sat 12 Sep 2026 02:12:27 +0000
ROA not before: Sat 12 Sep 2026 02:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 31.222.200.0/22 maxlen: 24
37.148.218.0/23 maxlen: 24
185.11.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:63:34:a3:0f:a5:9f:89:16:d0:0e:d1:eb:9f:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Validity
Not Before: Sep 12 02:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba34b1e760508cb28111171b066998779f947420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:0f:e1:ff:9a:41:4e:c7:69:64:2c:cd:ba:
fa:73:0e:5f:c7:02:76:68:7c:b9:4e:9d:e7:75:51:
24:a4:3f:1d:61:7f:ce:e7:ac:a5:7a:0d:90:bc:da:
1e:86:0c:06:d3:a2:18:90:b8:25:25:67:04:d3:ec:
19:da:19:e7:1d:14:a7:4c:ba:da:ab:30:66:48:bb:
f6:40:3c:0e:f7:66:60:0a:c1:2a:43:50:f6:10:ec:
d6:9a:46:19:9a:bc:25:8f:93:94:da:c2:16:e5:8c:
3c:9d:ab:ac:92:07:5c:63:f8:fb:6c:0d:74:88:bf:
13:43:b4:37:cc:96:4a:70:08:32:2b:5b:a2:d8:c6:
49:d4:f8:26:57:2a:53:82:5b:d8:25:35:19:12:20:
bb:79:fb:29:37:32:70:0b:59:0e:50:53:d1:1b:39:
2b:07:a6:d6:99:3b:a4:81:b1:3e:89:5a:8d:32:5a:
16:c7:7b:a2:58:b6:38:7d:26:00:1d:02:b0:9b:15:
40:6a:22:c3:cf:f4:e5:5a:7d:a3:e1:34:e2:26:34:
fe:bb:8a:e9:d3:65:f5:93:17:ab:46:1d:7f:47:a0:
fb:29:a6:84:8f:e1:49:07:80:04:d1:6e:a2:88:ab:
70:4e:1a:9c:9b:b8:b5:46:c6:b5:9c:17:32:04:66:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:34:B1:E7:60:50:8C:B2:81:11:17:1B:06:69:98:77:9F:94:74:20
X509v3 Authority Key Identifier:
keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/ujSx52BQjLKBERcbBmmYd5-UdCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.200.0/22
37.148.218.0/23
185.11.142.0/23
Signature Algorithm: sha256WithRSAEncryption
75:55:fd:b8:b4:e7:61:cc:0e:79:3f:8a:73:aa:f6:ed:87:bf:
ce:f5:0c:01:ab:aa:d3:47:ae:07:5b:28:d5:2a:df:cf:27:a9:
76:ee:47:ae:cc:c6:85:48:ef:47:e9:fb:3e:8f:f6:6d:9f:a0:
0c:63:11:19:aa:f3:6d:35:90:b4:d3:9d:b2:f8:10:ed:3b:70:
70:e1:0d:39:9c:45:00:32:f2:f1:a0:41:14:50:73:3d:ac:1e:
7a:99:d4:73:46:3c:78:7f:95:af:05:ee:52:c4:49:9d:66:ea:
30:9a:72:e3:06:d8:0e:97:3e:86:70:f4:35:15:41:2e:44:84:
c4:8e:a5:7c:37:c8:5c:e7:2d:6b:43:89:9a:82:59:87:ba:0f:
69:d4:2e:fd:46:6e:29:23:82:16:7c:d2:f4:ee:02:48:8a:8b:
5e:54:a0:29:e7:f6:62:67:f7:ce:98:ec:22:c6:73:c5:07:3b:
90:83:d4:94:86:67:e8:11:b8:d9:50:d6:8f:ce:2e:5f:10:92:
04:06:3c:c2:64:74:12:3a:e8:37:df:fc:e3:d5:65:ab:82:9e:
f4:77:28:55:e7:27:f9:45:47:f2:ec:48:78:ea:dd:7a:14:7e:
ff:71:6e:98:63:e4:d6:bd:7e:de:20:d1:a4:56:ea:1f:c8:4b:
f2:77:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:49 2026 by rpki-client