Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ul83e-8Lunxmc3e-2Z2QVwWUBgY.roa
File: ul83e-8Lunxmc3e-2Z2QVwWUBgY.roa (raw, json)
Hash identifier: MuRtM3m1PbO3jmRRbv9YpR7GvTL+63+lxs3zHPjs0ZI=
Subject key identifier: BA:5F:37:7B:EF:0B:BA:7C:66:73:77:BE:D9:9D:90:57:05:94:06:06
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01A1397814859824DB63A6D73E8993F9948E
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ul83e-8Lunxmc3e-2Z2QVwWUBgY.roa
Signing time: Wed 14 Oct 2026 08:12:13 +0000
ROA not before: Wed 14 Oct 2026 08:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 89.191.112.0/22 maxlen: 22
89.191.124.0/22 maxlen: 22
217.24.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:78:14:85:98:24:db:63:a6:d7:3e:89:93:f9:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Oct 14 08:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba5f377bef0bba7c667377bed99d905705940606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:e0:7b:bf:7d:64:b1:71:be:dc:b9:9e:57:
f9:65:15:59:a7:89:32:df:dd:fc:c8:1b:49:37:78:
6b:1b:f8:99:ab:02:19:5d:f4:a9:67:51:9c:1c:2f:
03:4b:0b:98:1c:96:26:3c:c5:8c:62:79:9c:f4:be:
fa:bc:43:40:ac:bd:c9:95:f0:f4:f0:85:18:b4:dc:
52:5d:6d:02:22:a4:dc:a5:0f:55:1d:4d:1d:e7:ee:
6e:6d:00:36:cf:82:91:1f:1a:2d:40:29:81:e1:25:
80:1a:80:d1:c4:c0:83:32:8e:ac:9b:58:fa:02:ee:
ab:ea:f9:8c:11:1e:39:ea:99:28:ed:8c:12:eb:8c:
c4:cc:20:47:8b:9b:7b:a8:d9:5e:df:8a:f9:33:95:
b7:c4:49:13:53:88:13:8a:f7:42:7f:05:51:02:60:
59:65:52:d1:1b:75:c3:9e:f5:33:ce:3f:25:75:99:
9e:73:75:07:e6:f7:3f:23:c9:7e:e1:72:3e:9b:c6:
f2:8c:59:11:c8:9a:82:12:a3:f4:79:e9:7d:98:10:
ca:4d:69:70:de:d4:82:e5:a8:d5:b4:9f:56:69:a8:
38:e4:7a:e5:d8:54:a9:7a:a4:c3:2d:1f:22:ce:d2:
5c:28:57:6f:61:81:0c:40:cd:98:00:67:93:f8:f0:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5F:37:7B:EF:0B:BA:7C:66:73:77:BE:D9:9D:90:57:05:94:06:06
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ul83e-8Lunxmc3e-2Z2QVwWUBgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.112.0/22
89.191.124.0/22
217.24.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0b:2a:45:b6:61:ea:51:12:bb:15:34:e4:92:bb:63:2a:41:
cc:46:cc:3a:ec:84:9a:01:32:30:5a:09:56:3d:89:e4:33:40:
7e:6f:e1:59:81:8a:e0:d6:61:2d:72:a7:61:4b:6b:46:7f:ef:
7b:69:5b:5e:1e:4c:1e:ab:f7:ea:a9:8d:24:e1:88:7b:91:c2:
38:bd:fc:ad:f9:eb:ff:3d:2a:eb:03:1d:4b:bd:29:5d:88:f9:
6e:d0:d9:64:72:bc:84:27:d9:cf:4e:b6:db:0c:97:1f:97:17:
93:e9:d7:46:33:b3:ef:3e:b0:d0:5e:ca:52:e9:83:5d:91:e3:
d2:d1:62:95:21:a4:37:1c:c8:c0:87:ca:2c:e3:4f:25:d4:26:
d5:1a:48:c0:ff:d7:f1:fd:42:aa:50:fc:80:f1:c9:f8:c8:bd:
53:24:5b:4d:5e:06:33:24:56:bf:c1:a6:6b:db:0f:c1:6d:05:
7a:51:06:60:0e:32:59:02:ac:81:c7:d3:57:4d:15:23:49:9a:
47:d9:97:4d:72:6d:18:05:26:db:4b:62:a5:42:6e:a4:30:8c:
b4:13:60:71:d3:89:dc:dd:3a:75:e8:5b:95:21:8c:cc:ef:f9:
d3:68:d3:49:c4:eb:e4:99:e9:85:cc:c2:07:34:ca:f7:b1:c4:
9b:8c:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:36 2026 by rpki-client