Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UCNY-4C5iN-LC-M6qEwDZM9m8Dw.roa
File: UCNY-4C5iN-LC-M6qEwDZM9m8Dw.roa (raw, json)
Hash identifier: DZxvKfGIRPZ7jfjsm/n4PsJEHacE7HLF90WmfdrHr88=
Subject key identifier: 50:23:58:FB:80:B9:88:DF:8B:0B:E3:3A:A8:4C:03:64:CF:66:F0:3C
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 01A125F54C57FF99D8341E0A0A84E97E3084
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UCNY-4C5iN-LC-M6qEwDZM9m8Dw.roa
Signing time: Sat 10 Oct 2026 13:16:35 +0000
ROA not before: Sat 10 Oct 2026 13:16:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272962
IP address blocks: 109.122.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:f5:4c:57:ff:99:d8:34:1e:0a:0a:84:e9:7e:30:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Oct 10 13:16:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=502358fb80b988df8b0be33aa84c0364cf66f03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b0:e8:0c:ec:d6:35:f2:62:27:d4:cb:36:cf:
bc:61:ef:a7:07:04:f0:8a:fe:76:e3:d8:51:4a:ab:
01:5e:e3:62:c4:bd:66:eb:c9:1a:5c:57:b4:94:ee:
d5:3f:ae:7a:2c:da:7d:01:10:2a:02:da:d6:1d:c3:
77:11:60:94:2a:ba:a8:34:1e:bb:6e:e5:fc:5d:81:
3d:d6:94:36:1a:c5:ee:3d:81:ec:76:5e:f2:5c:ab:
58:d9:0c:4c:0c:38:2c:1a:ba:8e:75:a0:ea:07:76:
9f:18:39:7f:02:0f:b2:48:af:d4:7b:14:b6:d3:4a:
d2:7f:68:bb:fb:15:bf:3c:b3:ca:38:28:18:e9:2c:
74:b0:c8:4f:0e:a8:4e:53:eb:fe:d4:cf:8d:78:02:
20:a3:b6:b9:6f:93:77:32:6c:df:81:7c:8d:df:2b:
03:23:c7:21:a5:aa:65:95:10:9d:29:9a:46:2c:09:
28:22:60:c6:1f:bc:59:e4:0e:b1:87:31:16:d2:fe:
53:7a:8e:04:ca:24:10:74:b7:28:54:79:16:e4:c6:
73:19:1d:b6:b9:6f:44:10:0b:b2:4c:7f:3b:80:9c:
b1:43:1e:7c:26:32:94:0d:27:ab:42:ce:c5:19:a7:
04:d2:21:ef:69:bd:16:b3:21:b4:29:5f:cf:f0:70:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:23:58:FB:80:B9:88:DF:8B:0B:E3:3A:A8:4C:03:64:CF:66:F0:3C
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/UCNY-4C5iN-LC-M6qEwDZM9m8Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.17.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bd:31:b8:21:bd:56:0c:62:bc:9e:52:0c:69:61:80:75:fe:
4e:14:54:eb:17:15:e7:94:06:b0:8f:bb:e3:78:6d:c0:98:88:
b2:98:ed:50:54:49:18:24:62:1b:34:94:b2:b2:77:b8:b4:38:
1c:d2:d4:50:42:43:65:a5:6a:eb:33:11:b1:d7:2a:6e:9a:7d:
7c:20:5a:20:22:ef:4f:6e:90:80:20:99:33:ba:d9:07:43:64:
22:46:20:cc:5f:88:41:dc:72:9f:9a:98:99:d8:3a:37:db:d5:
00:c4:9c:86:3e:85:b5:b7:d0:83:9b:34:46:65:27:32:58:2d:
97:a8:5a:5b:60:c1:98:d6:05:20:22:f6:96:17:8d:1e:04:4a:
09:15:0e:8d:d7:a6:a4:dc:dc:ca:b6:1b:a8:d2:45:04:50:99:
d6:c8:a9:a5:62:3e:8b:5a:55:a4:0f:65:68:24:54:8b:93:07:
16:b2:66:35:4c:eb:bd:76:5d:27:41:cd:c9:1c:e9:0c:ba:e6:
5b:57:3f:8f:c5:9f:3a:c7:2e:fd:64:76:a5:42:52:fc:35:fd:
83:6f:a1:73:45:78:72:e2:30:ad:42:4c:fd:af:a9:ce:9d:e6:
c7:be:7b:fc:99:ad:fb:37:0a:74:c3:d8:26:72:29:6c:a0:58:
0b:7d:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:49:07 2026 by rpki-client