Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Uama_ITVp1jKnrPwRQoo0O742_Q.roa
File: Uama_ITVp1jKnrPwRQoo0O742_Q.roa (raw, json)
Hash identifier: VtOiVsZnhQU00HEYfZDK9xwjniGjb5FMU4uIxbPlvG8=
Subject key identifier: 51:A9:9A:FC:84:D5:A7:58:CA:9E:B3:F0:45:0A:28:D0:EE:F8:DB:F4
Certificate issuer: /CN=e4c86da3f483246518d368034bc86113906a55a3
Certificate serial: 01A15DFE850858451397EBB2F32839CCCB13
Authority key identifier: E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Uama_ITVp1jKnrPwRQoo0O742_Q.roa
Signing time: Wed 21 Oct 2026 10:25:23 +0000
ROA not before: Wed 21 Oct 2026 10:25:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218419
IP address blocks: 79.110.4.0/24 maxlen: 24
79.110.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:fe:85:08:58:45:13:97:eb:b2:f3:28:39:cc:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4c86da3f483246518d368034bc86113906a55a3
Validity
Not Before: Oct 21 10:25:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51a99afc84d5a758ca9eb3f0450a28d0eef8dbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:31:88:b9:62:5c:08:b3:04:b2:60:b5:c3:
63:82:c1:34:d2:ac:12:7d:15:e0:00:c8:ee:8b:fe:
da:07:8a:27:e8:e4:9d:8e:32:61:25:c8:f2:cb:e8:
64:84:b1:cf:9f:c0:48:21:b6:75:98:7e:47:cd:7b:
de:5a:62:45:ec:43:7c:a5:9a:27:5b:69:77:57:3e:
51:64:94:d4:d8:bd:18:7c:59:71:22:4c:44:11:36:
32:e6:9a:ab:6e:51:8a:7e:4d:a9:9c:e9:d5:53:d6:
08:dc:71:45:45:8e:01:88:09:81:ed:2b:15:37:cc:
d3:64:7f:58:2d:36:bf:c9:b8:c9:4d:60:70:5d:e9:
37:94:dd:18:ad:33:e6:c3:81:87:d3:b5:3a:5a:7a:
a2:7e:71:3c:e3:6b:80:8b:58:bd:1f:9c:d6:cc:6c:
5b:d4:b1:fd:b1:e7:a5:2d:ce:52:6c:d2:36:23:ed:
bc:cd:d2:2d:a0:0d:a0:73:cb:29:aa:51:a7:0a:82:
59:cb:80:7d:dd:a6:8a:94:01:44:7a:41:84:16:c2:
b1:1d:4d:2a:06:40:1d:03:1f:90:63:6e:f3:a6:cd:
52:74:fd:00:95:b4:2e:49:a5:cd:6e:e2:e9:b3:0a:
9d:af:c8:9f:d3:7c:c6:26:97:ca:69:14:21:bc:fc:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A9:9A:FC:84:D5:A7:58:CA:9E:B3:F0:45:0A:28:D0:EE:F8:DB:F4
X509v3 Authority Key Identifier:
keyid:E4:C8:6D:A3:F4:83:24:65:18:D3:68:03:4B:C8:61:13:90:6A:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mhto_SDJGUY02gDS8hhE5BqVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/Uama_ITVp1jKnrPwRQoo0O742_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b4e503-574b-4565-9217-c511a3e912b6/1/5Mhto_SDJGUY02gDS8hhE5BqVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.4.0/23
Signature Algorithm: sha256WithRSAEncryption
55:00:46:01:2f:3f:6b:ee:f7:94:72:f9:af:21:1e:fd:76:7d:
d9:45:20:7f:5e:47:56:98:4e:09:cb:ea:be:12:5a:9b:f1:89:
2b:f1:54:0e:cb:77:6b:88:cf:42:e8:8f:cf:e5:45:4d:1c:16:
f5:69:ec:73:f4:c6:d6:1f:d3:0f:03:4e:19:f9:5b:3a:d1:e0:
a1:7f:d7:be:b1:f4:c1:52:32:31:e6:a6:bd:0e:fa:44:f2:2f:
c6:67:0d:2c:79:e6:dd:c8:45:2e:94:24:3a:e5:ac:15:62:17:
cb:88:51:b8:ff:57:b9:00:20:15:7f:51:87:e2:22:ee:8d:37:
89:d2:83:5d:f7:9f:98:e7:18:a9:d9:a8:b3:56:90:a2:f6:8b:
11:ac:94:e1:c7:bd:11:55:c9:8b:92:de:e0:69:62:44:d7:3c:
8e:4e:a5:4b:a7:f6:55:6b:81:76:40:39:fc:9c:af:99:8a:4f:
3c:f6:ef:48:eb:d2:c0:df:73:63:f3:b9:ba:6f:05:e9:07:d0:
6e:65:2b:52:52:6d:67:99:37:29:d5:21:27:ab:38:16:d5:ea:
d8:8c:cf:62:e6:ef:80:35:0a:73:ba:1e:f6:4b:5f:97:bf:25:
51:53:1c:50:fc:52:fc:22:3c:ff:e3:86:de:61:60:58:1b:11:
06:33:84:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFd/oUIWEUTl+uy8yg5zMsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Yzg2ZGEzZjQ4MzI0NjUxOGQzNjgwMzRiYzg2MTEzOTA2
YTU1YTMwHhcNMjYxMDIxMTAyNTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWE5OWFmYzg0ZDVhNzU4Y2E5ZWIzZjA0NTBhMjhkMGVlZjhkYmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndoxiLliXAizBLJgtcNjgsE00qwS
fRXgAMjui/7aB4on6OSdjjJhJcjyy+hkhLHPn8BIIbZ1mH5HzXveWmJF7EN8pZon
W2l3Vz5RZJTU2L0YfFlxIkxEETYy5pqrblGKfk2pnOnVU9YI3HFFRY4BiAmB7SsV
N8zTZH9YLTa/ybjJTWBwXek3lN0YrTPmw4GH07U6WnqifnE842uAi1i9H5zWzGxb
1LH9seelLc5SbNI2I+28zdItoA2gc8spqlGnCoJZy4B93aaKlAFEekGEFsKxHU0q
BkAdAx+QY27zps1SdP0AlbQuSaXNbuLpswqdr8if03zGJpfKaRQhvPzrIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFGpmvyE1adYyp6z8EUKKNDu+Nv0MB8GA1UdIwQY
MBaAFOTIbaP0gyRlGNNoA0vIYROQalWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTct
YzUxMWEzZTkxMmI2LzEvVWFtYV9JVFZwMWpLbnJQd1JRb28wTzc0Ml9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iNGU1MDMtNTc0Yi00NTY1LTkyMTctYzUxMWEzZTkxMmI2
LzEvNU1odG9fU0RKR1VZMDJnRFM4aGhFNUJxVmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBT24EMA0G
CSqGSIb3DQEBCwUAA4IBAQBVAEYBLz9r7veUcvmvIR79dn3ZRSB/XkdWmE4Jy+q+
Elqb8Ykr8VQOy3driM9C6I/P5UVNHBb1aexz9MbWH9MPA04Z+Vs60eChf9e+sfTB
UjIx5qa9DvpE8i/GZw0seebdyEUulCQ65awVYhfLiFG4/1e5ACAVf1GH4iLujTeJ
0oNd95+Y5xip2aizVpCi9osRrJThx70RVcmLkt7gaWJE1zyOTqVLp/ZVa4F2QDn8
nK+Zik889u9I69LA33Nj87m6bwXpB9BuZStSUm1nmTcp1SEnqzgW1erYjM9i5u+A
NQpzuh72S1+XvyVRUxxQ/FL8Ijz/44beYWBYGxEGM4RM
-----END CERTIFICATE-----
Generated at Thu Oct 29 06:09:47 2026 by rpki-client