Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uf7Q8wgKat4-sSTZIsQHphVw-SI.roa
File: Uf7Q8wgKat4-sSTZIsQHphVw-SI.roa (raw, json)
Hash identifier: zMo6nDCZlUj9SsHq6PKcqXqY8FEBfoXj+vrjM1ydbmU=
Subject key identifier: 51:FE:D0:F3:08:0A:6A:DE:3E:B1:24:D9:22:C4:07:A6:15:70:F9:22
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019C9053A8270C7864EE014E4B57BA1CC044
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uf7Q8wgKat4-sSTZIsQHphVw-SI.roa
Signing time: Tue 24 Feb 2026 15:45:27 +0000
ROA not before: Tue 24 Feb 2026 15:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211502
IP address blocks: 193.181.8.0/24 maxlen: 24
193.181.9.0/24 maxlen: 24
193.181.10.0/24 maxlen: 24
193.181.11.0/24 maxlen: 24
193.181.12.0/24 maxlen: 24
194.68.88.0/24 maxlen: 24
194.68.89.0/24 maxlen: 24
194.68.90.0/24 maxlen: 24
194.68.91.0/24 maxlen: 24
194.68.92.0/24 maxlen: 24
194.68.93.0/24 maxlen: 24
194.68.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:90:53:a8:27:0c:78:64:ee:01:4e:4b:57:ba:1c:c0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 15:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51fed0f3080a6ade3eb124d922c407a61570f922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:d6:ad:19:12:76:0b:9a:e8:6c:35:fe:b5:
cd:f4:d5:4f:6b:0c:d3:9d:07:60:61:35:f7:d1:e9:
2b:af:92:cc:6b:ec:9f:b2:ee:f0:bb:56:7a:c8:a4:
37:84:40:67:bb:1b:79:a8:a5:b8:f3:fa:55:cd:1a:
51:66:eb:bf:25:f5:a1:3e:6e:a3:3a:a6:e3:74:2e:
a8:d6:08:e8:24:ea:b9:c8:c8:cd:2f:e8:72:ce:86:
81:9c:ed:7d:28:2a:1f:5f:1d:8e:d6:56:94:7e:bf:
0f:3e:62:de:66:09:21:fa:95:47:8b:6f:12:70:a9:
83:39:17:6b:84:28:ea:49:e6:0f:99:eb:c0:2b:70:
19:17:55:5b:2d:52:3d:f8:be:b3:11:c7:63:c4:d4:
6e:31:08:8d:34:4c:e0:e2:c5:3e:42:84:68:04:3e:
62:45:d8:7d:e6:c3:9a:e9:92:2f:ab:fa:37:61:c2:
9c:cd:9b:a1:5e:31:1a:14:44:05:54:6e:f9:7d:b4:
67:ee:c6:ae:2a:c6:bb:d4:a6:79:0f:e4:23:54:28:
20:64:ed:6a:00:46:e7:cd:ac:3f:03:fe:b0:87:5a:
e2:64:2a:f8:83:fe:d5:6b:99:84:d3:7f:a5:b8:15:
26:d2:22:04:af:95:14:f8:f2:f8:95:c2:a7:f3:aa:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FE:D0:F3:08:0A:6A:DE:3E:B1:24:D9:22:C4:07:A6:15:70:F9:22
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Uf7Q8wgKat4-sSTZIsQHphVw-SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.8.0-193.181.12.255
194.68.88.0-194.68.94.255
Signature Algorithm: sha256WithRSAEncryption
63:54:37:a5:f5:ad:fc:ce:e1:5a:fc:2b:4a:9a:f8:74:dc:08:
85:71:8b:21:d3:57:05:d1:aa:d4:27:d7:cb:60:16:7c:b3:6e:
4e:b1:e4:d1:1b:e4:05:93:86:bc:64:a2:52:84:b6:b7:10:67:
57:d7:0e:30:60:cb:d7:85:49:f4:d6:1e:6b:69:f6:4e:9a:4b:
bb:bb:77:dc:41:ed:2d:95:dc:25:0e:65:44:72:18:d6:a6:77:
c2:2c:a6:5c:fa:98:4e:0a:e7:6d:ec:87:62:df:1c:50:f0:fd:
6a:49:0f:9e:69:08:5b:0c:c8:92:54:5c:c3:3f:fe:08:b2:d5:
0e:88:c2:bd:f8:b7:7f:45:24:fe:e2:2e:8c:52:81:97:88:35:
13:eb:5f:e6:9a:60:b6:c9:5c:a0:27:8b:0d:77:8c:04:40:71:
87:be:05:27:42:18:e2:da:76:7a:23:60:68:c8:fb:d3:83:e3:
5c:e6:f7:57:73:93:b6:c4:28:8a:8f:65:a4:b4:d0:22:82:5c:
96:1b:c8:92:ac:71:f1:0c:f2:46:9b:9e:c2:b9:0d:1d:44:52:
a5:b4:56:1d:91:5d:d9:4a:ff:50:32:62:27:0e:e7:ad:0c:2d:
31:51:af:db:d8:7c:ad:fa:0f:fc:0c:78:d2:1b:54:c2:99:52:
59:79:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:05:20 2026 by rpki-client